Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
File: jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft (raw, json)
Hash identifier: KUdqU/wl5f8AUugiZCdWwa8zd7iEQWWluskYq/T6yLE=
Subject key identifier: 4E:3C:60:50:1C:1E:70:2C:3C:75:CF:43:9E:58:6E:0C:5B:6A:A9:41
Authority key identifier: 8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
Certificate issuer: /CN=8d64e43c75bdc511d524f0c85d009cba76956144
Certificate serial: 01935689072C23AF95668FC6BDAA1D3CEFCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 01:00:40 +0000
Manifest this update: Sat 23 Nov 2024 01:00:40 +0000
Manifest next update: Sun 24 Nov 2024 01:00:40 +0000
Files and hashes: 1: FgHPz4UWWazGWPYg2sCQc-sj60I.roa (hash: MYRhEoAcFZZayKsSqGWhdoYFQKc7NGNnyowbpxLMOW0=)
2: jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl (hash: Yr/LlOjbWdTmw00E6KqEuMG6OcQi4hDFczq65S5+bqQ=)
3: oq-QCh8pxjMJkrdKDk2vTgDPv_8.roa (hash: Vrxo3Hrl0ARDcB7LB9+mha0jzr38qvwlwqolBCwTZwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:07:2c:23:af:95:66:8f:c6:bd:aa:1d:3c:ef:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d64e43c75bdc511d524f0c85d009cba76956144
Validity
Not Before: Nov 23 01:00:40 2024 GMT
Not After : Nov 24 01:00:40 2024 GMT
Subject: CN=4e3c60501c1e702c3c75cf439e586e0c5b6aa941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:67:ce:c2:34:40:f1:2b:f1:6e:8e:d9:b2:61:
ff:17:da:37:45:ba:cd:28:e4:f2:58:5d:b5:92:f9:
27:98:3c:a5:90:87:be:c3:86:f8:ac:f3:34:fd:59:
a5:58:d1:ee:84:86:cf:28:57:dc:06:68:bb:20:b8:
55:4c:f6:6a:73:7f:be:95:cc:33:08:89:df:e2:34:
73:e1:da:ee:38:fd:0e:5d:7f:50:f1:31:a1:f1:33:
95:24:a1:66:da:a1:ce:26:55:0e:99:54:22:ce:df:
f6:08:da:90:37:67:2f:17:6b:1a:b6:e5:25:0a:ac:
c7:cc:89:17:63:be:3c:82:aa:b6:80:af:ae:7d:dd:
c3:0a:79:88:17:b2:82:fe:d5:45:d5:37:75:aa:56:
33:5c:28:93:df:0a:6f:ce:7e:0a:73:8b:a4:c1:30:
ef:20:19:67:b4:05:87:b5:61:ec:0e:42:01:e9:09:
4e:af:66:06:a6:be:e6:a3:4d:8c:d6:01:9a:c9:5b:
d0:0c:c6:9f:4e:58:b5:a1:5b:8a:98:74:bd:0b:bc:
6d:fa:d6:4a:ff:c8:5b:8d:3e:d0:12:01:85:90:dd:
a7:d3:5e:ed:27:f3:74:3c:af:3d:98:93:e8:f7:fd:
19:5e:29:8c:49:27:5e:e3:f2:76:c4:1f:5e:83:d1:
54:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3C:60:50:1C:1E:70:2C:3C:75:CF:43:9E:58:6E:0C:5B:6A:A9:41
X509v3 Authority Key Identifier:
keyid:8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:22:2d:80:4f:2e:37:2b:85:f0:40:9d:47:4f:bd:0e:ee:07:
b4:1e:59:f1:b3:25:72:3c:87:a9:b0:2e:97:00:80:b9:93:7a:
de:c8:01:9c:96:ce:57:28:0b:87:69:5f:c8:9d:9c:38:2e:88:
e3:99:57:b1:35:75:18:6b:12:64:b0:9f:bc:e0:bc:e5:3a:1a:
fa:3c:7e:34:1f:e0:e7:4b:cc:81:2c:4c:95:34:ea:bc:76:38:
8d:96:9f:76:57:2b:a6:0c:a9:a7:ec:7d:b1:8a:be:6f:08:6a:
eb:2c:b3:03:7f:14:96:3e:c2:d9:c8:9c:c7:12:5c:7b:fa:89:
b3:8c:6f:fb:55:5f:e5:3b:17:e4:21:f1:80:32:48:57:87:10:
0f:5b:7a:f9:0e:5a:b4:04:be:29:38:f0:c4:15:97:0f:d4:b0:
37:6d:fc:b7:b7:7e:3b:8e:05:ad:bf:96:bd:d5:5a:ca:34:84:
6e:22:e1:8c:90:eb:88:b9:e9:5a:2e:3c:a2:c7:32:6a:ac:64:
ac:c6:49:ed:9f:e8:11:f9:27:99:19:d3:6d:10:ce:49:34:97:
38:45:07:73:79:d5:89:1a:2c:30:85:10:46:57:1e:86:c4:62:
b9:f4:72:39:7c:0a:b1:cf:30:32:9b:98:d7:cb:2e:42:85:9c:
8a:0c:47:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:42:13 2024 by rpki-client on console-ams.rpki-client.org