Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
File: JGJNNpZGiPmJxkSsIBH0Fl086wc.mft (raw, json)
Hash identifier: 1uDP8LUl5zLwGPnpCkPPFs11UnW9NyuCcKalf9m+FKk=
Subject key identifier: 2B:F5:63:19:AC:64:A6:73:60:F4:9D:1A:F1:19:7F:23:14:11:0C:9C
Authority key identifier: 24:62:4D:36:96:46:88:F9:89:C6:44:AC:20:11:F4:16:5D:3C:EB:07
Certificate issuer: /CN=24624d36964688f989c644ac2011f4165d3ceb07
Certificate serial: 018F874AB52CED1817A5A6F456099F610BDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
Manifest number: 04D0
Signing time: Fri 17 May 2024 16:02:51 +0000
Manifest this update: Fri 17 May 2024 16:02:51 +0000
Manifest next update: Sat 18 May 2024 16:02:51 +0000
Files and hashes: 1: JGJNNpZGiPmJxkSsIBH0Fl086wc.crl (hash: G0wkEvQNCRO3wUQuTMeNWls2EXVdZGMw8KO9YkQMkM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:b5:2c:ed:18:17:a5:a6:f4:56:09:9f:61:0b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24624d36964688f989c644ac2011f4165d3ceb07
Validity
Not Before: May 17 16:02:51 2024 GMT
Not After : May 18 16:02:51 2024 GMT
Subject: CN=2bf56319ac64a67360f49d1af1197f2314110c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a4:01:f5:60:28:d2:c5:bc:81:8b:6a:bd:66:
30:f6:d3:06:30:46:86:0c:23:76:4b:83:e6:47:5b:
67:8c:58:a7:23:2a:d6:e6:7e:2f:d2:ae:36:5b:e8:
76:eb:8a:b3:78:41:03:1f:b5:33:7b:96:43:d1:56:
cd:98:29:e0:69:24:de:a1:fa:4d:84:9a:0d:d0:cb:
96:52:84:c5:4c:9a:4f:1d:3f:d5:af:10:79:cd:81:
62:9f:7f:f9:3c:66:03:41:9e:8f:88:d0:23:a9:b2:
47:30:4d:b6:58:05:59:c6:41:bd:95:81:4f:2d:3b:
57:d3:c1:06:85:a5:fe:fd:e8:b0:e3:3a:55:92:f9:
43:9d:3a:66:f3:0d:02:bf:68:b8:3a:cf:73:21:97:
fd:7b:fd:37:86:90:f9:bc:90:ed:97:fe:41:21:d0:
ee:02:08:ba:20:9b:48:b7:b8:d8:93:6c:87:52:5f:
e2:8d:b8:28:43:93:04:d2:44:4f:ec:46:29:9b:94:
c5:d1:21:4e:5b:7d:0c:7f:35:a0:c6:05:f5:65:b6:
f3:85:b0:b5:33:64:16:9a:94:b4:79:86:98:57:b6:
62:a8:7d:b5:b4:37:4d:cb:ee:3f:d6:ef:b7:91:a4:
72:90:6a:d3:cb:9c:24:5e:1a:0c:d1:c4:7f:1d:e8:
46:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F5:63:19:AC:64:A6:73:60:F4:9D:1A:F1:19:7F:23:14:11:0C:9C
X509v3 Authority Key Identifier:
keyid:24:62:4D:36:96:46:88:F9:89:C6:44:AC:20:11:F4:16:5D:3C:EB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b5:24:31:d9:17:af:5c:0d:70:81:0d:62:fc:c6:4c:dd:34:
d3:95:c7:d6:d2:5a:e5:bc:06:46:96:05:30:36:de:38:c6:37:
09:da:2e:34:46:25:91:81:68:c1:da:31:fb:ce:1c:1b:f1:b6:
09:bc:78:fe:38:58:5a:09:20:63:05:6c:a6:fe:02:d0:d9:2d:
b6:44:ae:65:97:78:2c:c6:3c:3e:d4:bb:09:64:b9:9f:e5:ae:
68:84:21:53:b7:08:f1:34:a5:39:59:8f:d0:a7:9b:a3:5f:6a:
32:1f:eb:d4:a6:30:b9:3f:ca:a6:78:ed:eb:2e:05:d2:66:1d:
5c:6f:60:ae:48:0b:8f:71:e8:45:b8:1b:73:9a:f3:c7:46:ec:
6b:4c:81:6c:92:e3:5d:2b:4d:c9:bc:20:25:66:3e:bf:99:d2:
07:fb:ac:aa:54:d7:bc:40:2e:9b:36:a8:49:8a:cd:22:77:01:
63:c3:8b:eb:a9:aa:9a:21:46:7f:3d:69:1f:48:f6:a6:6c:f1:
5d:db:74:9c:44:a5:1c:9b:22:be:de:73:ed:00:0d:41:05:38:
c2:df:4a:e4:f6:8c:62:fc:9a:5c:e7:c6:b9:7a:04:7b:0e:f0:
28:96:6e:63:08:3b:ce:48:1c:88:a5:0d:49:e1:8d:0e:29:b0:
44:2f:0c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:24:01 2024 by rpki-client on console-fra.rpki-client.org