Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
File: JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft (raw, json)
Hash identifier: XWYGi52jNnLx6sWvwGfFOr3r1AN/1nubVDOo2+7h4Sc=
Subject key identifier: 8D:32:86:B2:7F:4D:B9:22:99:D2:72:36:B9:EA:AE:96:7A:76:ED:22
Authority key identifier: 25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
Certificate issuer: /CN=25292652a9ecd9c6bdc8264b9948df6212207624
Certificate serial: 0191F9347375DE16F53CE976C53095E01140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
Manifest number: 014A
Signing time: Mon 16 Sep 2024 05:00:49 +0000
Manifest this update: Mon 16 Sep 2024 05:00:49 +0000
Manifest next update: Tue 17 Sep 2024 05:00:49 +0000
Files and hashes: 1: GBaIq9Q0xFK_FpS8t-YRhdxGvi8.roa (hash: EHdbpoCkCVPmFsf8k7X5liVRA+AGR0wAVGnYfp99Q+Q=)
2: JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl (hash: Rwvxw0GsZ8/VlUPSTe5g4U1i21fspuinvS7+LgmpWLY=)
3: p0oZ4q6lHrN2uY6gOzA5xnEORLo.roa (hash: +3pVCZ5GKtwQuNKqa60g7O/l0ZyA3msRy8do5+lhnMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f9:34:73:75:de:16:f5:3c:e9:76:c5:30:95:e0:11:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25292652a9ecd9c6bdc8264b9948df6212207624
Validity
Not Before: Sep 16 05:00:49 2024 GMT
Not After : Sep 17 05:00:49 2024 GMT
Subject: CN=8d3286b27f4db92299d27236b9eaae967a76ed22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:91:1d:16:3c:64:45:3e:50:e5:35:96:4f:a5:
8a:89:55:19:c8:96:bc:5a:10:68:7b:fc:f9:6f:df:
2d:53:31:1d:25:5e:7c:6b:22:21:b5:9d:68:49:9b:
80:b1:37:6c:bf:5f:8a:30:a2:89:3a:56:79:c0:85:
13:91:88:55:c6:00:8e:a7:86:b0:b5:83:97:3f:57:
be:a4:18:96:0a:69:82:be:2b:53:e9:65:ae:1e:db:
84:8b:64:cf:2b:04:89:90:0e:1f:7d:27:cb:c1:7f:
af:d1:4a:16:2c:15:4b:2a:de:d1:c2:0c:fa:52:f1:
51:60:6e:64:5a:21:92:93:07:fe:ac:c7:1a:d7:54:
27:b1:cf:9a:8a:1d:e9:8e:09:fd:69:44:c3:5d:5c:
46:da:37:87:4e:a7:3f:d2:e1:da:e4:30:0f:30:b2:
5f:5a:e9:26:18:01:31:ea:d3:b2:cf:9b:ef:a0:29:
2c:46:73:0c:c2:a6:c4:96:03:09:7c:f1:85:9c:ab:
c0:0b:6b:03:4d:0f:3b:3b:84:63:76:60:7e:61:44:
37:d8:e8:c2:d2:2b:8f:8f:43:8c:d9:aa:3b:63:94:
1b:4c:8f:18:7c:be:4d:bd:36:ff:b1:4d:4a:10:02:
f4:86:17:45:c2:09:88:4b:36:f5:27:ca:88:83:77:
b0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:32:86:B2:7F:4D:B9:22:99:D2:72:36:B9:EA:AE:96:7A:76:ED:22
X509v3 Authority Key Identifier:
keyid:25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c7:ef:d4:55:2e:06:b6:d7:3e:90:5d:d6:f1:64:d6:98:20:
e3:25:49:13:c2:09:07:b9:f4:e2:e6:f8:9a:d3:09:8c:a9:eb:
9e:7d:cf:ef:47:c6:6c:49:a4:61:eb:ae:b0:57:84:25:73:41:
bc:ba:f7:60:f0:a2:9a:0d:42:67:5e:d3:69:7c:12:8f:14:54:
96:d7:d3:f3:99:57:39:a5:31:4a:15:6f:3e:ad:35:f0:a7:ed:
cb:c8:06:9e:07:07:67:ad:5b:7b:49:5c:b5:1a:c6:d0:71:e9:
1e:48:c1:47:ce:03:62:96:11:87:11:78:c3:f4:18:2a:73:b8:
a8:b3:60:f7:38:70:14:be:a7:2c:4b:b4:a9:34:43:10:49:88:
4e:69:87:6d:79:9a:5b:70:64:eb:3e:f7:2b:31:f5:14:08:e0:
d2:5d:7d:c9:07:ba:76:a0:3f:b6:aa:e2:04:9c:6c:58:cb:c3:
90:a8:7b:d9:9d:46:6c:10:7f:32:c1:27:d3:e5:c1:4c:ff:12:
44:6e:26:6e:56:ca:0f:a6:fe:67:bc:a9:c2:d4:06:0c:b9:1e:
bf:48:1d:bc:36:aa:7c:2e:28:a6:c5:6d:da:e4:37:db:92:27:
8d:36:c5:53:e4:7b:d4:71:a9:24:71:0d:f6:60:d9:b7:05:cd:
93:22:ad:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----