Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
File: hJICE8sjC_5REhzl-03s4oAYvtA.mft (raw, json)
Hash identifier: n+wOCYClKkyk4VndaOPKi3cYdAX5l5HEnaGVj0zl9yY=
Subject key identifier: BD:CF:7C:0D:3A:74:0E:6B:A7:2D:3B:F3:AE:75:B2:EC:55:3C:70:20
Authority key identifier: 84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0
Certificate issuer: /CN=84920213cb230bfe51121ce5fb4dece28018bed0
Certificate serial: 01936AB45DBCCCDA2E1F4451848E07D6F733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
Manifest number: 137A
Signing time: Tue 26 Nov 2024 23:00:25 +0000
Manifest this update: Tue 26 Nov 2024 23:00:25 +0000
Manifest next update: Wed 27 Nov 2024 23:00:25 +0000
Files and hashes: 1: 5MSx4UxCKgoFG_9u80GPOSDkV8U.roa (hash: MC7+GIA2pPAyTEhq+eFNNIqTuofhrKdd61HTJmrsLrg=)
2: hJICE8sjC_5REhzl-03s4oAYvtA.crl (hash: iFTZESgclVE20lOSeUTiwRyfmXIwo5ha2b8/8Eqig4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:5d:bc:cc:da:2e:1f:44:51:84:8e:07:d6:f7:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84920213cb230bfe51121ce5fb4dece28018bed0
Validity
Not Before: Nov 26 23:00:25 2024 GMT
Not After : Nov 27 23:00:25 2024 GMT
Subject: CN=bdcf7c0d3a740e6ba72d3bf3ae75b2ec553c7020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bf:4c:c3:63:9a:ba:f5:e3:78:bc:cd:ef:b7:
a4:97:06:82:5c:ce:21:09:72:1c:fa:b5:58:fe:ad:
a2:9b:00:5a:c3:9c:a8:98:1d:ad:15:0e:2a:96:d0:
b8:4f:49:9d:7d:53:7b:fd:ba:f7:cb:83:40:8c:64:
2e:6b:9e:3e:05:aa:29:61:a1:9d:aa:bc:47:6c:a5:
88:6d:e0:0c:66:3b:2a:d5:fe:3f:5c:83:92:89:ae:
9e:2b:3f:8f:51:64:a5:bc:3f:d2:ed:d0:64:dc:68:
3a:fe:d1:e7:1b:ee:d6:c6:0d:0a:cf:f6:a2:2e:82:
f3:55:28:5d:f9:d5:74:41:f6:52:b2:27:cf:22:2b:
2a:68:8d:50:98:a3:ff:9f:0f:58:01:03:cf:ee:44:
32:ac:11:16:08:65:55:76:a8:0f:db:25:8e:67:48:
97:cf:ba:a9:2f:04:8e:77:61:38:09:ee:f6:27:df:
b5:24:ab:15:4a:ad:a9:5f:90:ef:11:cb:1e:dc:8a:
5b:96:87:39:5e:23:86:fd:0c:e2:49:3d:6a:d9:a4:
57:16:65:ec:d9:6a:44:46:f9:67:2b:cf:01:37:b6:
7b:e3:98:1e:00:56:98:ed:de:f5:67:af:84:e8:2f:
91:c5:ef:02:79:26:d0:4f:49:c6:c3:8f:c9:fa:a6:
0c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CF:7C:0D:3A:74:0E:6B:A7:2D:3B:F3:AE:75:B2:EC:55:3C:70:20
X509v3 Authority Key Identifier:
keyid:84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:92:fe:23:f1:dc:02:f7:a8:ab:2c:fc:29:22:18:f8:c3:20:
9b:4e:1d:d5:9a:b9:07:c9:16:50:26:fe:06:f2:fd:b6:c0:8d:
8a:7f:58:e5:e9:a7:7f:3b:08:4e:53:ff:97:65:1f:83:06:cf:
34:b6:c0:19:d4:52:23:6a:9a:b7:c4:ca:53:d9:6b:65:99:30:
5d:a9:7f:75:f6:63:3e:31:66:d6:a2:42:5b:ba:06:9d:dc:9c:
c5:9b:9b:89:f6:24:7f:67:76:6f:9f:66:3b:df:1e:31:68:b4:
d1:43:93:1c:d3:4a:27:2e:2d:76:fb:0c:3f:9e:8a:28:8e:f3:
a8:e6:52:8a:be:9d:69:d5:44:41:f0:76:c6:7f:a5:43:f8:fb:
63:6a:e4:d4:1b:3e:ba:2e:fc:86:7c:53:20:ad:51:98:58:8b:
21:7f:9e:a1:80:aa:37:4c:98:91:74:90:1c:b9:4a:7f:50:e1:
e0:99:85:2c:c5:40:eb:0b:99:60:e7:a7:00:34:ef:81:e4:a7:
8a:55:44:c6:c3:5e:d6:8f:66:25:44:54:0a:5d:42:7b:cb:40:
15:5d:a3:fe:bc:9c:97:fe:e1:08:35:eb:45:3d:60:44:3c:2b:
aa:46:39:eb:05:18:4d:37:22:9e:c4:07:13:a3:ff:24:d0:c2:
89:86:af:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:42:07 2024 by rpki-client on console-fra.rpki-client.org