Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
File: JTKlzyuhjHU-3JXuILZmKT3wLVs.mft (raw, json)
Hash identifier: UOUkq6KLlGpkCPilGtFcUh7kDC9XwFQxofBznsn2HTQ=
Subject key identifier: 35:AF:64:75:E4:E0:2A:C8:F8:86:78:41:37:49:E9:38:47:63:F2:AC
Authority key identifier: 25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B
Certificate issuer: /CN=2532a5cf2ba18c753edc95ee20b666293df02d5b
Certificate serial: 01935688FC9C488FC3C1D834ECB5CE1EC1A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
Manifest number: 0E52
Signing time: Sat 23 Nov 2024 01:00:38 +0000
Manifest this update: Sat 23 Nov 2024 01:00:38 +0000
Manifest next update: Sun 24 Nov 2024 01:00:38 +0000
Files and hashes: 1: FpoZYKxOxFg3jMpa8lvYBgQBzKQ.roa (hash: HZEtRoqyT1502+XUzVa7KQ9I1dAHvP2kpkER47ed4+8=)
2: JTKlzyuhjHU-3JXuILZmKT3wLVs.crl (hash: 2CWU1ql6w/Dw9mqmudKcedSnMzSehomcs32NHaEKWnQ=)
3: oS0sKQ_YnJZGhVF4253wLpKDXM4.roa (hash: Nhr5VtYmceIz7D3wQB2+a9K1FrQ79+8D35M+b16R+xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:88:fc:9c:48:8f:c3:c1:d8:34:ec:b5:ce:1e:c1:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2532a5cf2ba18c753edc95ee20b666293df02d5b
Validity
Not Before: Nov 23 01:00:38 2024 GMT
Not After : Nov 24 01:00:38 2024 GMT
Subject: CN=35af6475e4e02ac8f88678413749e9384763f2ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:34:21:30:39:49:f2:d2:3f:9b:8d:b6:59:6a:
5d:2d:82:c7:ec:68:bf:7a:68:93:c9:e5:93:60:4e:
a7:4b:19:3b:43:fe:dd:d3:71:11:6b:ec:89:92:f7:
ca:93:93:d6:8b:e6:66:98:ab:4a:fe:e9:e7:8b:e5:
38:9f:be:29:00:0d:05:25:72:d0:c9:45:12:52:e4:
5f:61:a4:d1:4f:d0:da:2b:a1:7d:0e:af:f5:34:ce:
1e:8c:8b:6b:17:64:f4:fc:60:27:6a:3e:cc:75:a2:
ba:c3:7d:a9:41:4c:21:2f:59:e6:0a:04:19:92:7c:
7c:72:e3:80:ac:4c:01:a8:68:8a:20:27:2b:60:e8:
94:a2:8f:bc:99:03:0c:05:92:ac:ed:08:4a:94:ab:
e3:09:b2:66:d6:46:5e:8c:e4:88:1d:21:cf:88:1b:
1b:de:e1:5b:09:7a:fa:ab:f1:fa:ee:cc:c5:c9:ef:
d0:55:48:d0:b4:74:94:f2:be:5f:eb:64:97:28:8c:
80:d0:ac:16:1c:a2:bc:da:26:f9:40:bd:53:61:f0:
65:98:bc:2a:82:a9:ce:7a:2e:a6:11:4c:03:c4:c9:
db:4c:8c:62:11:ba:78:a0:c7:4a:a5:48:05:82:2b:
4d:e0:b0:f0:a8:cd:1e:b9:78:61:36:ed:6f:ed:da:
3b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AF:64:75:E4:E0:2A:C8:F8:86:78:41:37:49:E9:38:47:63:F2:AC
X509v3 Authority Key Identifier:
keyid:25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:1a:80:1f:70:d1:04:9c:5a:ec:cd:fa:f9:24:32:ea:5a:5d:
45:af:00:c8:fb:08:ed:ed:27:a3:01:42:58:2d:83:50:3b:e4:
ef:9a:3e:32:cb:40:42:a5:c4:4e:ae:b1:a9:a0:de:84:56:bf:
e3:41:e9:3d:97:c4:35:02:05:0e:7c:fa:e7:cf:d4:a1:e7:55:
2b:86:f2:c7:5d:77:79:91:20:ab:57:58:25:9d:45:7f:86:4d:
4b:63:02:99:e9:07:fa:1f:19:aa:1b:96:0a:ed:14:1a:10:07:
7e:73:24:51:02:fe:28:2f:69:5d:ac:d3:b8:49:69:53:c8:04:
73:4c:cf:3b:ac:0c:3f:41:f0:15:95:cd:a2:df:3d:23:cb:f1:
92:44:d7:8e:a2:4b:c9:4d:1f:b2:68:a4:07:55:7e:3c:87:b9:
8a:d7:8c:cc:44:b6:9c:01:62:c8:d4:13:3e:39:b2:f0:09:11:
8f:6a:31:e4:89:ae:ed:8d:9b:76:ea:36:79:f6:89:9e:5b:ea:
e7:b2:cc:2e:d8:7e:ed:47:8f:ac:44:fc:03:0f:e2:c3:8c:69:
21:ea:4e:c1:ec:72:9b:75:d8:63:68:44:ea:63:55:15:45:73:
8d:96:8a:8e:90:9c:cb:72:12:0c:3d:89:2b:ef:4e:c7:45:61:
35:db:d3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:02 2024 by rpki-client on console-fra.rpki-client.org