Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
File: ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft (raw, json)
Hash identifier: AWbpySxUlLbFMwAoP0Un0s+dWgV8Nhb9Ndsc98PEOYM=
Subject key identifier: DD:74:71:C2:A4:92:0F:C8:D7:67:C9:C1:3C:2C:9A:B8:6E:40:DF:11
Authority key identifier: 72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09
Certificate issuer: /CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
Certificate serial: 01936B22A8E071B20362BA38B7BDC769BEF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
Manifest number: 12BC
Signing time: Wed 27 Nov 2024 01:00:53 +0000
Manifest this update: Wed 27 Nov 2024 01:00:53 +0000
Manifest next update: Thu 28 Nov 2024 01:00:53 +0000
Files and hashes: 1: KiYrt-FrlYfcvrfTl93T9l2mBP4.roa (hash: U0scJK1VhI3QAAqXBhtwEyaVT3E/Oa8TLbaJk9HYKKA=)
2: ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl (hash: HeSgOuJkZyj1l/Ij3ELN3IZd0DstTKjQfy4wlFnYpwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6b:22:a8:e0:71:b2:03:62:ba:38:b7:bd:c7:69:be:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
Validity
Not Before: Nov 27 01:00:53 2024 GMT
Not After : Nov 28 01:00:53 2024 GMT
Subject: CN=dd7471c2a4920fc8d767c9c13c2c9ab86e40df11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:00:d3:66:e5:82:28:2e:f3:05:b7:19:ad:70:
e4:11:3f:4a:92:da:ae:44:07:48:91:3f:07:ad:7d:
3a:5e:d6:46:f6:22:d5:4d:f8:48:c9:e5:a9:6e:f2:
65:2b:43:da:5e:34:0b:a2:23:22:f5:f2:b1:41:0c:
7c:58:64:09:91:b9:36:05:1a:19:e5:71:8c:bd:5f:
98:25:e2:ab:0c:72:6e:97:56:f7:11:e9:a1:6b:76:
1f:16:d1:4b:a2:b8:da:46:b7:2d:d1:e0:1e:93:2b:
20:0e:73:37:10:4a:8f:d0:2e:18:9a:8c:d7:62:30:
a2:ed:ac:83:e5:2b:8d:8a:44:69:0a:a2:e8:f9:81:
e6:25:e6:c5:25:3f:b8:91:9d:f0:05:86:54:27:18:
52:10:ee:88:31:46:33:a1:c0:a4:22:66:f3:43:19:
38:51:79:0d:0e:8c:3c:e0:d0:57:69:b1:60:67:da:
0b:ef:c9:b6:4f:57:a6:da:7d:17:f7:32:26:7c:7f:
75:46:95:52:bc:86:9f:60:54:3f:44:24:54:42:d6:
24:8f:7e:c3:d5:b8:12:5f:5b:4a:a6:15:5f:3c:03:
fd:2a:37:46:9b:1f:44:ca:39:17:72:32:bc:bf:e7:
26:9c:81:0e:12:ca:e1:d4:d0:23:b8:5f:bf:7a:e8:
53:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:74:71:C2:A4:92:0F:C8:D7:67:C9:C1:3C:2C:9A:B8:6E:40:DF:11
X509v3 Authority Key Identifier:
keyid:72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:75:d7:12:11:da:db:b5:2a:58:78:28:6a:36:87:21:8b:8f:
09:38:86:c4:2d:ad:51:c9:39:bc:30:00:a5:1f:0d:96:50:f5:
46:c2:a0:af:2c:c1:af:30:91:b3:82:91:8c:b1:25:cf:a4:b5:
87:17:43:2b:97:e0:bf:08:3b:ba:cb:80:10:18:c9:3b:34:c1:
e3:0c:11:34:cb:b0:cd:3c:f3:9d:cb:e7:50:29:14:b8:85:bc:
a5:4b:28:89:cf:1d:8d:ff:af:df:fd:2f:bd:64:82:9a:ac:73:
19:53:06:29:29:92:1f:2f:e1:ba:f7:5b:76:b6:5c:61:e0:d8:
91:25:1e:ac:43:44:77:1c:29:39:cf:82:75:6e:73:8a:30:61:
2a:49:4f:a3:88:cf:aa:65:d5:08:8c:2e:56:bb:88:77:01:9f:
0c:ea:bc:4a:f5:de:6e:4d:b8:d5:5e:99:bb:5f:3f:24:8d:cf:
24:9c:d5:c4:96:cf:0a:3b:f2:f1:0c:50:6a:d9:01:76:07:41:
2a:cb:03:d8:a7:92:cc:3b:88:02:81:01:de:13:3e:fb:56:59:
7d:4a:e7:8c:56:d1:c2:75:65:b5:d1:01:d6:52:49:92:9e:93:
80:c1:14:93:c4:c1:15:d5:e6:b3:ca:4f:a4:51:dd:15:6e:5f:
f0:f5:83:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:49:04 2024 by rpki-client on console-fra.rpki-client.org