Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
File: jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft (raw, json)
Hash identifier: W5IwV5BSfkatvlP/zZpsAnN7QMp5tcZ1MNwTQQlmgLE=
Subject key identifier: 1C:A9:48:83:1C:46:0B:13:58:1C:08:5C:21:D1:36:7E:F8:95:10:11
Authority key identifier: 8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
Certificate issuer: /CN=8df893edf33208d7a2cf62268613769fb4967c66
Certificate serial: 018F9917CC1B8FD943703BABF8AA75971AC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
Manifest number: 067D
Signing time: Tue 21 May 2024 03:00:24 +0000
Manifest this update: Tue 21 May 2024 03:00:24 +0000
Manifest next update: Wed 22 May 2024 03:00:24 +0000
Files and hashes: 1: KVaIZQjmJQtVI_yoXdhuTuB3LyA.roa (hash: 2gsUES62Ed89deRYvNB3kC56ZAGr7aFYIRxWqkdKkBA=)
2: jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl (hash: zcihmuX5VqZr/ee58yg4I/uB7kNxJycAJ/ZWA7Pn2z4=)
3: ycDMFlnjHeu50QW54O197qCAAvM.roa (hash: 3dS05EpJKvuwZyOBqzPGFddvq12lTXYCDv/+JN6g44I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:99:17:cc:1b:8f:d9:43:70:3b:ab:f8:aa:75:97:1a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df893edf33208d7a2cf62268613769fb4967c66
Validity
Not Before: May 21 03:00:24 2024 GMT
Not After : May 22 03:00:24 2024 GMT
Subject: CN=1ca948831c460b13581c085c21d1367ef8951011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:50:7c:49:85:5a:d3:dd:0b:75:d0:b4:50:1a:
fa:26:50:63:df:e8:0d:b1:1f:56:f4:82:5b:07:da:
73:e9:bc:91:11:0f:af:37:40:8b:dd:f7:18:f5:b1:
aa:cc:16:6a:b1:16:3a:33:b8:a4:5b:4c:ff:f9:7d:
b3:38:84:0c:47:d0:73:91:97:35:19:fd:9b:b9:a0:
58:7f:22:95:3a:12:0f:be:b5:00:6f:cb:36:a6:63:
8d:58:23:0c:32:37:58:82:d6:56:bc:b2:ee:3d:01:
ee:95:b2:12:c2:e0:07:e8:81:1a:48:a6:5f:59:8e:
3c:19:65:96:ad:74:c2:c0:93:0d:39:d3:89:e4:51:
0f:a2:8e:cb:37:77:b0:53:73:31:da:58:07:81:be:
84:e9:d5:fa:0a:71:25:e1:36:07:b2:91:ab:3e:44:
9a:1b:4e:16:ba:e3:c6:e1:4b:da:96:23:f7:98:98:
12:c4:a7:87:9e:ad:26:b3:5e:bd:a4:ab:b5:d6:3b:
17:b1:4d:ba:d2:82:9b:18:bb:26:97:0d:53:a7:f0:
4f:2b:fc:b6:d5:9a:e0:a8:34:26:51:dc:b2:30:16:
41:b9:40:96:f8:fc:67:63:86:5a:f7:ef:a1:24:0e:
41:5e:bb:c8:17:b2:55:21:0c:11:2b:c5:27:9a:2a:
62:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A9:48:83:1C:46:0B:13:58:1C:08:5C:21:D1:36:7E:F8:95:10:11
X509v3 Authority Key Identifier:
keyid:8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:0a:87:81:79:a7:97:a0:12:46:27:be:8c:27:45:0a:37:de:
9c:bd:3f:40:51:a2:b1:a1:90:78:39:52:42:76:27:ca:a1:31:
bc:d2:33:54:be:e2:b7:d0:7b:32:b8:6a:5e:d9:95:b3:dc:bb:
d0:f8:c1:3f:12:cf:b5:63:99:81:52:87:a1:46:89:6e:ad:a7:
2d:dd:57:75:26:8d:79:ea:fd:af:97:6c:f5:9a:d5:f5:6b:f9:
c7:5c:cf:ca:ec:91:e6:bf:c0:36:a4:55:7e:e5:f8:4b:e6:df:
eb:57:db:20:11:51:f8:71:12:4f:18:58:e4:b2:fc:9c:9a:ff:
66:ea:95:3e:e0:77:e2:a1:22:7b:b8:8b:e4:ac:13:9a:17:e9:
d8:f2:d7:94:7d:bc:49:50:2d:14:ec:c4:a7:5e:7b:be:d3:db:
11:35:80:4d:a8:9e:d0:d0:61:5f:db:7e:69:5e:51:13:67:21:
7c:41:77:90:94:c5:0f:be:9e:35:94:1c:d2:69:3f:81:0f:8d:
78:e0:a0:58:6b:c4:e7:36:8c:6d:9a:78:b0:4e:80:0f:49:2a:
2c:84:5f:8c:8d:22:57:27:67:68:35:6f:ba:4a:14:aa:a5:31:
d2:6d:c5:24:72:84:78:c7:28:ed:a7:e4:2f:7e:66:47:8c:c9:
00:80:84:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 10:35:30 2024 by rpki-client on console-ams.rpki-client.org