Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
File: JrFSTsAdz0BfRBcYKe1nopkqpC0.mft (raw, json)
Hash identifier: fR120QJaMu4ssvzumYzdEzDULTNc5f0Wo4Jr623d/Q0=
Subject key identifier: E1:6A:9B:53:00:28:E5:22:DD:F7:39:DF:C7:67:61:EF:54:55:5E:B7
Authority key identifier: 26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D
Certificate issuer: /CN=26b1524ec01dcf405f44171829ed67a2992aa42d
Certificate serial: 019365579004B50D503F520B31179801A88B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
Manifest number: A7
Signing time: Mon 25 Nov 2024 22:00:57 +0000
Manifest this update: Mon 25 Nov 2024 22:00:57 +0000
Manifest next update: Tue 26 Nov 2024 22:00:57 +0000
Files and hashes: 1: JrFSTsAdz0BfRBcYKe1nopkqpC0.crl (hash: DuOBDG2qwT2ITRecMn492NgsUjB7EJ0ZlZwLPJs5bIw=)
2: Ng6LYfwgNSndDLdHvp9yFZyNgWo.roa (hash: tF3+vpKFFZWGGDgO1LWLRcOD9m2vB0PusHXuXriG83Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:65:57:90:04:b5:0d:50:3f:52:0b:31:17:98:01:a8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26b1524ec01dcf405f44171829ed67a2992aa42d
Validity
Not Before: Nov 25 22:00:57 2024 GMT
Not After : Nov 26 22:00:57 2024 GMT
Subject: CN=e16a9b530028e522ddf739dfc76761ef54555eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:47:3c:b1:44:eb:53:17:32:b0:99:84:1d:8d:
92:7f:a6:2e:7c:f2:1c:6d:82:19:d9:91:39:c6:01:
ac:c0:fb:86:ee:57:d5:23:31:5a:10:0e:13:6c:a8:
a8:bc:b9:30:8b:e7:e5:b2:2f:7b:f3:b2:a9:b7:03:
bb:99:bb:77:1f:24:3e:d0:9d:13:4b:59:b5:5e:5e:
9f:1c:26:e5:ae:ff:d8:18:db:10:85:a0:ae:ef:ba:
f5:9b:e6:7e:dd:9f:5b:0d:2b:e5:9d:31:53:81:ad:
8b:a1:53:db:c9:9c:8f:94:25:e3:48:66:bc:38:ea:
71:d8:55:a5:3c:2b:e5:01:d6:c6:ef:ac:3b:54:d3:
66:63:ba:09:3b:f3:b0:10:8b:73:df:11:da:f5:db:
dd:e9:18:60:51:eb:92:ea:35:88:61:30:14:67:8d:
93:3f:a9:9c:55:c0:77:c9:08:25:27:46:8b:d8:19:
a9:da:a3:2c:20:92:33:1d:e8:e1:85:05:5a:51:f1:
19:24:08:23:de:21:dd:30:9c:4c:ad:df:97:77:72:
63:f3:50:7b:f7:ac:1f:ca:68:c8:8a:93:ea:7d:24:
a8:ac:6c:b5:3a:af:5e:0e:7b:fc:ff:dc:87:79:9a:
6c:7f:90:d5:ff:d6:a9:8f:4a:ee:cb:5a:79:16:07:
3e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6A:9B:53:00:28:E5:22:DD:F7:39:DF:C7:67:61:EF:54:55:5E:B7
X509v3 Authority Key Identifier:
keyid:26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7b:27:cf:54:6f:0c:4a:5c:99:93:ae:cd:02:17:8e:20:93:
e4:e2:d6:b9:4e:f9:57:e6:4e:95:6b:b1:ba:c3:49:5a:0a:c6:
0a:2f:40:37:3c:43:83:2d:76:96:a9:fd:ae:7a:19:ad:c6:35:
2b:3d:ea:88:f8:e6:a2:e3:29:b3:0c:dc:c3:2a:10:7e:a4:6d:
ad:07:5c:f0:18:cb:7e:1b:a4:11:2e:2c:fa:19:b1:ab:00:81:
d2:61:84:5b:6c:59:35:ae:db:3d:d4:0b:0f:8a:b6:f7:dd:4a:
b9:f5:d6:8b:48:73:59:92:44:15:1b:e3:1f:ea:fa:e1:ac:31:
ed:1e:53:cc:10:c2:04:6b:d5:b1:5d:b6:e1:a6:f2:15:80:7e:
30:73:41:59:9a:4c:5c:03:57:20:81:0d:7e:e4:a5:32:1b:ff:
e7:ff:e8:e1:c6:48:3c:ba:48:d0:71:c9:46:db:85:d1:12:21:
59:24:a0:9f:55:14:ee:56:15:bc:ae:fa:a8:72:b0:8b:82:b4:
1e:22:20:a3:31:d5:eb:94:11:a1:90:6f:e8:ef:89:91:b7:aa:
97:a6:be:ef:2e:f4:62:bc:f3:9c:1e:46:06:62:06:0c:aa:e9:
f5:c2:fc:91:61:0a:0a:1d:cb:46:67:00:b2:d1:af:89:b9:fb:
8e:23:cf:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:37:28 2024 by rpki-client on console-fra.rpki-client.org