Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
File: JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft (raw, json)
Hash identifier: itwC0iE5XyFsra0K7z8bPL7NwLEA8a1J701xjgaaons=
Subject key identifier: 43:F8:EB:F6:76:19:8E:BF:17:20:40:DE:1B:5A:49:B0:27:BF:AB:25
Authority key identifier: 25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
Certificate issuer: /CN=25292652a9ecd9c6bdc8264b9948df6212207624
Certificate serial: 019352E2E76230881C117E9DCDADF4C2F1D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
Manifest number: 01FD
Signing time: Fri 22 Nov 2024 08:00:22 +0000
Manifest this update: Fri 22 Nov 2024 08:00:22 +0000
Manifest next update: Sat 23 Nov 2024 08:00:22 +0000
Files and hashes: 1: GBaIq9Q0xFK_FpS8t-YRhdxGvi8.roa (hash: EHdbpoCkCVPmFsf8k7X5liVRA+AGR0wAVGnYfp99Q+Q=)
2: JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl (hash: qf6G9Wx/aPVUbircgCUb6guXUddK7pp5cNNI7DjM4+A=)
3: p0oZ4q6lHrN2uY6gOzA5xnEORLo.roa (hash: +3pVCZ5GKtwQuNKqa60g7O/l0ZyA3msRy8do5+lhnMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:e2:e7:62:30:88:1c:11:7e:9d:cd:ad:f4:c2:f1:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25292652a9ecd9c6bdc8264b9948df6212207624
Validity
Not Before: Nov 22 08:00:22 2024 GMT
Not After : Nov 23 08:00:22 2024 GMT
Subject: CN=43f8ebf676198ebf172040de1b5a49b027bfab25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bc:9b:d1:37:a9:a1:6e:7e:3f:c4:53:09:7f:
79:df:1e:b6:e3:1e:7e:23:de:09:b3:e4:2f:7d:67:
1a:14:c2:3f:00:5f:38:08:fd:af:77:56:ff:58:d8:
52:3d:65:8d:88:df:c3:72:5d:fc:44:d7:57:27:68:
f3:db:ff:2b:dd:ec:b3:72:2b:e0:c3:1f:b7:f4:83:
42:ed:f7:58:f3:28:7f:7e:22:27:35:10:46:98:53:
13:5c:a9:f2:ca:8c:3d:7e:7a:fd:1e:e3:a1:73:57:
66:bc:5e:bc:e4:4b:c5:c7:4b:cd:02:29:9a:05:0d:
b5:2d:bf:db:25:cf:2d:af:e9:3b:27:55:2e:be:4b:
94:ac:3f:ca:df:e0:7c:28:8b:2d:65:a0:df:d9:10:
a5:9b:db:78:76:18:d3:8f:5c:62:9d:f4:1c:44:a3:
bf:f8:f5:5a:f3:dd:f1:ca:27:b3:2b:ae:96:e3:d9:
9a:52:2b:9a:8d:c0:0e:60:23:71:e8:50:31:ae:50:
e5:c0:1c:2a:61:4f:e8:91:1a:81:b4:65:a5:3f:5b:
38:1f:bd:a3:25:45:5c:6f:4e:e2:bd:04:fa:1f:c3:
4c:2f:5b:08:41:2b:e7:39:30:ab:ec:fb:09:92:fe:
54:6a:5f:1e:95:90:7b:83:c6:9d:26:98:d7:5b:1f:
e3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F8:EB:F6:76:19:8E:BF:17:20:40:DE:1B:5A:49:B0:27:BF:AB:25
X509v3 Authority Key Identifier:
keyid:25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:07:1e:18:07:5f:92:bb:45:77:88:17:be:3b:25:31:70:e2:
89:fc:74:1e:58:d3:0c:85:e5:85:11:66:72:9f:f0:2e:ff:60:
d5:db:8d:c9:10:a7:6f:78:e5:53:d1:8e:11:18:00:4b:df:da:
e2:cd:3e:3c:64:5f:14:9d:9a:a6:99:6e:99:0c:78:1a:55:f5:
83:80:91:89:e4:c7:fe:45:f8:37:6f:62:d8:5e:a5:a8:9e:43:
85:14:e2:b8:f9:c5:3c:17:ec:14:70:69:19:be:1c:7b:3d:ef:
08:b1:8e:58:b5:6f:8e:1d:84:25:dd:71:3a:b7:78:19:b8:0e:
3a:69:7f:aa:c4:24:0d:aa:fb:9f:5b:dd:c5:a5:f2:98:34:72:
10:d7:bd:37:48:f2:8c:53:01:62:2e:c4:73:a3:e8:6e:4e:b3:
c8:64:c0:4a:0f:bb:7d:d2:3f:c8:29:01:93:b2:d9:26:2c:a7:
eb:e9:57:9e:3a:83:e5:cc:17:dd:47:d2:73:3e:15:92:11:ca:
b6:64:6a:60:ba:6d:23:6a:ff:75:1b:b1:c8:fe:aa:6c:91:86:
df:99:bd:f6:47:66:4a:17:ad:03:e4:83:91:cc:de:5b:9a:2a:
a4:df:36:54:d2:81:4b:93:3e:2f:70:72:5a:93:90:1a:31:82:
25:04:e3:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNS4udiMIgcEX6dza30wvHZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MjkyNjUyYTllY2Q5YzZiZGM4MjY0Yjk5NDhkZjYyMTIy
MDc2MjQwHhcNMjQxMTIyMDgwMDIyWhcNMjQxMTIzMDgwMDIyWjAzMTEwLwYDVQQD
Eyg0M2Y4ZWJmNjc2MTk4ZWJmMTcyMDQwZGUxYjVhNDliMDI3YmZhYjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLyb0TepoW5+P8RTCX953x624x5+
I94Js+QvfWcaFMI/AF84CP2vd1b/WNhSPWWNiN/Dcl38RNdXJ2jz2/8r3eyzcivg
wx+39INC7fdY8yh/fiInNRBGmFMTXKnyyow9fnr9HuOhc1dmvF685EvFx0vNAima
BQ21Lb/bJc8tr+k7J1UuvkuUrD/K3+B8KIstZaDf2RClm9t4dhjTj1xinfQcRKO/
+PVa893xyiezK66W49maUiuajcAOYCNx6FAxrlDlwBwqYU/okRqBtGWlP1s4H72j
JUVcb07ivQT6H8NML1sIQSvnOTCr7PsJkv5Ual8elZB7g8adJpjXWx/jVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEP46/Z2GY6/FyBA3htaSbAnv6slMB8GA1UdIwQY
MBaAFCUpJlKp7NnGvcgmS5lI32ISIHYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlNrbVVxbnMyY2E5eUNaTG1VamZZaElnZGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yMWE0ZmQtYmQ4YS00YWE0LThjNDUt
NTcxMDMwNTQzOWVjLzEvSlNrbVVxbnMyY2E5eUNaTG1VamZZaElnZGlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8yMWE0ZmQtYmQ4YS00YWE0LThjNDUtNTcxMDMwNTQzOWVj
LzEvSlNrbVVxbnMyY2E5eUNaTG1VamZZaElnZGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmwceGAdf
krtFd4gXvjslMXDiifx0HljTDIXlhRFmcp/wLv9g1duNyRCnb3jlU9GOERgAS9/a
4s0+PGRfFJ2applumQx4GlX1g4CRieTH/kX4N29i2F6lqJ5DhRTiuPnFPBfsFHBp
Gb4cez3vCLGOWLVvjh2EJd1xOrd4GbgOOml/qsQkDar7n1vdxaXymDRyENe9N0jy
jFMBYi7Ec6Pobk6zyGTASg+7fdI/yCkBk7LZJiyn6+lXnjqD5cwX3UfScz4VkhHK
tmRqYLptI2r/dRuxyP6qbJGG35m99kdmShetA+SDkczeW5oqpN82VNKBS5M+L3By
WpOQGjGCJQTjOQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:49:32 2024 by rpki-client on console-ams.rpki-client.org