Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
File: jJbGavMxyYW4WdQDs2l0wGMuHvI.mft (raw, json)
Hash identifier: 74CaPqGJX+0UuCFaHrPP3spbwI9lsqxzi2r8ryLpqqA=
Subject key identifier: D5:9C:35:8D:A3:8C:38:C2:E4:F4:0D:EE:F6:7E:D6:26:19:8C:77:F8
Authority key identifier: 8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
Certificate issuer: /CN=8c96c66af331c985b859d403b36974c0632e1ef2
Certificate serial: 019352AC5AA87909A58BBB7302D866E160AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
Manifest number: 1352
Signing time: Fri 22 Nov 2024 07:00:47 +0000
Manifest this update: Fri 22 Nov 2024 07:00:47 +0000
Manifest next update: Sat 23 Nov 2024 07:00:47 +0000
Files and hashes: 1: aWLrGiTvKwioJpTo5bFZc5W2F1o.roa (hash: K3q9oVH5lE8w9PTO+oXZqKYCAZZ3iAfOOCfxIlf/wjk=)
2: jJbGavMxyYW4WdQDs2l0wGMuHvI.crl (hash: GtB7XjUCWbCXYvU3vm6UTvsjXALdY3CYcHtcDK+4vQ0=)
3: s5c4K7uf9-cRRmHfxBdi0q2p9co.roa (hash: XfXub7M054WBQ1tkxFvQGcH1DlPWBy53dTg6zKvq+Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ac:5a:a8:79:09:a5:8b:bb:73:02:d8:66:e1:60:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c96c66af331c985b859d403b36974c0632e1ef2
Validity
Not Before: Nov 22 07:00:47 2024 GMT
Not After : Nov 23 07:00:47 2024 GMT
Subject: CN=d59c358da38c38c2e4f40deef67ed626198c77f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5d:bc:a9:eb:4a:74:5a:fa:34:a6:d2:51:8c:
9e:9e:c5:43:48:92:df:79:ad:68:33:0b:45:17:18:
7e:02:1d:74:77:69:91:aa:6d:88:7b:cf:ba:9d:61:
17:54:fb:bb:aa:53:00:ca:ae:e0:1c:7e:f2:2a:5c:
86:46:79:f2:41:96:23:8c:84:95:52:ae:48:ae:cc:
75:10:44:6a:f7:f5:c9:45:26:8d:34:2a:ae:2f:b7:
44:90:09:48:cc:28:e2:83:f4:ee:da:64:6d:52:22:
5d:2b:70:e2:1e:67:d9:18:7a:92:a0:0e:7e:41:f9:
cc:52:12:27:dd:b2:19:2a:11:63:3e:d4:3c:d9:93:
93:de:4d:75:91:4b:a7:f9:b1:47:29:65:24:42:ec:
cf:e7:1d:9e:42:59:2e:c7:c0:0a:46:b8:34:95:77:
42:9c:84:f5:c3:b7:10:52:07:e4:42:ac:ee:7f:12:
75:75:34:34:8b:12:c7:99:45:94:8a:f8:0d:8d:96:
3d:9a:01:bf:b5:2f:5e:ef:02:14:c4:3e:70:85:fe:
5f:f0:f2:0b:0f:24:de:ba:2e:ff:59:9c:0a:bb:e0:
68:4d:dc:dd:a3:a9:84:6c:17:44:41:68:f5:f2:0f:
5b:d7:f7:6d:fd:bb:c9:6e:5c:33:96:75:d3:99:5b:
7d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9C:35:8D:A3:8C:38:C2:E4:F4:0D:EE:F6:7E:D6:26:19:8C:77:F8
X509v3 Authority Key Identifier:
keyid:8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b1:fd:1f:de:c3:7e:0a:04:ad:26:bc:a6:d4:61:0b:00:69:
1d:e4:e7:1b:ff:08:24:8a:73:1f:d5:d4:89:56:ca:32:66:f2:
fb:59:e4:12:39:b0:fa:ff:20:7d:f7:1f:ab:59:8f:29:4e:54:
2d:89:8d:53:bd:80:f4:ea:6a:cd:d7:9c:f8:95:f1:f0:e7:4d:
5f:93:c5:80:8c:cc:8d:f8:70:5e:d4:d2:bf:15:38:ab:ce:0a:
6b:fa:31:67:1a:33:61:f6:b1:f5:46:57:6f:69:fc:8b:1a:7d:
9c:62:73:e6:ca:3e:e9:e2:9e:bf:d4:7c:b5:11:df:ef:3a:0f:
00:e3:16:22:e5:9b:3a:e4:d5:4c:aa:f2:c6:fd:a3:f1:c5:1a:
e8:1d:73:f1:25:d3:f6:bb:de:2b:19:fb:5d:34:0a:cb:83:3c:
fb:f1:9b:34:9b:5b:ba:65:a1:bd:ea:d8:25:29:ac:7f:4c:50:
38:13:f6:e8:8a:18:87:ae:2e:85:11:27:be:8f:3a:11:b7:83:
c8:67:5c:05:6e:4f:b2:cb:e1:09:ec:bb:15:99:a3:5f:b6:a3:
f8:54:0b:3b:b6:fd:10:43:91:3e:4e:95:1d:f9:c0:fc:d9:c1:
a7:41:49:cd:c4:be:70:d1:6a:5f:18:83:e0:ca:c8:ac:00:4a:
58:13:40:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:40:22 2024 by rpki-client on console-fra.rpki-client.org