Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
File: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft (raw, json)
Hash identifier: DdhgPtuf08dqewsDOICuRjOWS5LHiqXgr54W+Qx0ryA=
Subject key identifier: 4D:84:AD:87:00:BE:84:0D:21:07:6E:B2:CF:E4:42:E6:B2:A5:79:16
Authority key identifier: 27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
Certificate issuer: /CN=27d8640c305107766a646fbf8ec81db45ce1f249
Certificate serial: 018F8891F702B04BD27FFDA5695BA897E491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
Manifest number: 0FD2
Signing time: Fri 17 May 2024 22:00:18 +0000
Manifest this update: Fri 17 May 2024 22:00:18 +0000
Manifest next update: Sat 18 May 2024 22:00:18 +0000
Files and hashes: 1: 1-qkXwvYlvGgsuqI5uJO1P8oDAs0.roa (hash: 2D+pnv+26fi7n3xTTwFI7y631G0VukVYTnUNnxy9W/U=)
2: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl (hash: DLAvLWhVqDp0ZsFo0cLkc+i8WdmaE+d9J0aVHhGwc4I=)
3: fcOZrsQdNAZNPjzuV6-pnOKNwEI.roa (hash: 8ViOAIcslnlzDsfhAL3pZAa61EXBUCo2ayW001xkWxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:91:f7:02:b0:4b:d2:7f:fd:a5:69:5b:a8:97:e4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d8640c305107766a646fbf8ec81db45ce1f249
Validity
Not Before: May 17 22:00:18 2024 GMT
Not After : May 18 22:00:18 2024 GMT
Subject: CN=4d84ad8700be840d21076eb2cfe442e6b2a57916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:de:a1:92:fb:de:54:f8:7d:55:e1:9a:4e:5b:
43:09:b3:76:24:ce:5a:5d:06:0d:5e:a8:61:e8:ec:
93:f3:ec:d6:5d:72:b2:43:b9:a2:fc:51:7a:99:0f:
92:c1:0d:4c:6a:72:8e:d0:06:19:42:7b:e9:71:03:
2e:9b:60:5c:a6:22:6b:6a:36:94:10:22:22:c5:08:
12:af:5b:7a:21:cd:02:b3:15:12:29:0d:16:29:95:
e0:63:f4:25:82:00:8e:e5:da:5d:2d:10:15:5d:ea:
d3:87:ed:50:8c:1d:9b:4f:5f:bb:70:f7:78:d3:ab:
f3:04:df:36:e5:db:de:23:57:d2:d5:41:1f:82:8d:
be:11:15:05:f6:f9:7b:54:bb:be:1b:20:c7:ab:49:
9e:47:a1:57:bb:39:7f:62:28:f2:6b:87:6b:85:77:
d5:39:72:1f:a0:8b:df:9e:55:13:ae:59:c3:19:8a:
82:a3:ee:78:59:d8:97:65:3b:29:96:f1:2e:f0:0e:
42:07:da:d1:fa:bb:bb:b7:a4:fe:91:58:70:1a:64:
a8:9a:11:f6:cf:e8:7f:b4:3e:ce:a5:9f:a5:1e:e0:
7b:d0:f1:a3:ec:fa:8a:38:bd:aa:53:e6:03:77:5a:
21:46:78:0e:6c:0d:48:9f:0d:f9:2d:2b:a3:d4:ef:
21:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:84:AD:87:00:BE:84:0D:21:07:6E:B2:CF:E4:42:E6:B2:A5:79:16
X509v3 Authority Key Identifier:
keyid:27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:4f:74:f8:38:1c:ef:b7:cf:f1:31:0c:b6:f9:00:8e:a8:1b:
3f:2c:eb:72:6f:ac:2a:c8:0c:74:c5:5e:77:5d:cd:5f:4f:59:
e0:cc:e3:29:69:58:30:70:2c:7b:4d:27:37:3c:0c:3e:8f:da:
de:37:0e:2a:7d:5d:f5:fb:c0:c8:e0:72:13:0a:82:ea:28:a0:
75:a7:e3:68:88:88:9e:df:f3:95:06:21:1c:e2:0c:72:92:a1:
b3:fa:11:33:6c:a4:a2:10:b7:bf:92:22:1a:bb:a9:54:16:0f:
64:c9:b2:c0:8b:dd:1d:f8:42:cf:b8:c9:a3:80:10:b6:e8:2a:
b8:4b:af:f4:25:ad:9d:5e:b4:5b:72:05:27:11:40:fa:24:9b:
36:ad:36:12:7a:9c:f9:1f:f5:71:99:36:51:f6:4c:8a:71:fb:
3a:51:dd:a2:9f:7b:39:04:ef:38:4f:db:4a:f7:84:f3:01:88:
40:81:5a:6f:12:06:ab:0f:cf:ba:b2:a9:73:d8:05:a2:77:d2:
26:ee:9a:dc:c4:2a:fd:b6:2d:db:e4:fb:21:00:a2:af:3e:65:
46:1c:9b:b6:30:08:6e:19:97:56:39:9d:9d:c2:80:80:73:03:
a5:50:68:fa:69:a4:46:a5:a8:70:c1:c7:d8:f7:89:93:55:99:
91:d4:8f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:55:16 2024 by rpki-client on console-fra.rpki-client.org