Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
File: JTKlzyuhjHU-3JXuILZmKT3wLVs.mft (raw, json)
Hash identifier: MRycrRduSIIGWXtKSv6kERCFvtZ9IfI8Otuu6vknlzA=
Subject key identifier: 66:E9:04:F9:B7:DF:C5:61:5C:1A:F6:36:BD:4B:2E:77:0F:22:23:FD
Authority key identifier: 25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B
Certificate issuer: /CN=2532a5cf2ba18c753edc95ee20b666293df02d5b
Certificate serial: 018F9A996E7ED994C9097058BCBD60F8CF33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
Manifest number: 0C63
Signing time: Tue 21 May 2024 10:01:37 +0000
Manifest this update: Tue 21 May 2024 10:01:37 +0000
Manifest next update: Wed 22 May 2024 10:01:37 +0000
Files and hashes: 1: FpoZYKxOxFg3jMpa8lvYBgQBzKQ.roa (hash: HZEtRoqyT1502+XUzVa7KQ9I1dAHvP2kpkER47ed4+8=)
2: JTKlzyuhjHU-3JXuILZmKT3wLVs.crl (hash: qBVmlH3uKIrJxa3yHm3D7dUjUD3BA2XaMBSackSRGi0=)
3: oS0sKQ_YnJZGhVF4253wLpKDXM4.roa (hash: Nhr5VtYmceIz7D3wQB2+a9K1FrQ79+8D35M+b16R+xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 10:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9a:99:6e:7e:d9:94:c9:09:70:58:bc:bd:60:f8:cf:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2532a5cf2ba18c753edc95ee20b666293df02d5b
Validity
Not Before: May 21 10:01:37 2024 GMT
Not After : May 22 10:01:37 2024 GMT
Subject: CN=66e904f9b7dfc5615c1af636bd4b2e770f2223fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4f:11:53:55:80:41:e7:ac:c1:18:cf:34:57:
59:27:d3:12:2d:a0:65:91:5b:66:24:8c:74:74:bc:
c2:17:5b:e2:01:a5:d0:8b:04:c4:81:bb:53:d2:6a:
3c:88:dd:0b:79:9b:51:98:02:ef:b4:de:6f:3a:dd:
a4:88:c3:9c:d2:11:ec:a7:5c:63:74:c6:0e:9a:a5:
5b:11:f6:d3:4d:2b:93:5e:35:48:1e:f9:44:25:20:
40:5a:51:5c:46:e0:b8:7c:e5:e9:10:22:95:85:f4:
d8:71:06:ee:bc:3d:05:97:dc:cf:c9:e3:f1:69:3b:
3b:e1:6d:7e:f7:2e:14:f5:68:12:21:3d:cc:cf:f1:
39:04:71:a9:4c:ea:8d:d0:2b:45:f3:74:d5:0a:41:
c8:36:ae:28:01:80:2e:60:92:54:07:14:79:28:99:
38:af:9c:86:01:c9:71:9a:2f:0d:36:cd:74:49:7c:
9b:5c:45:df:78:0c:59:47:69:ef:83:0e:66:b5:54:
0e:99:7a:62:99:b7:f0:24:1b:6b:b1:1a:03:0b:d9:
22:c4:57:c4:88:a5:48:e3:dc:9a:49:79:1c:86:41:
e3:36:3e:d0:4e:63:22:00:64:48:3b:5e:0d:ac:9a:
a8:1c:47:67:ee:82:19:3e:a0:05:b0:54:5d:03:e7:
c8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E9:04:F9:B7:DF:C5:61:5C:1A:F6:36:BD:4B:2E:77:0F:22:23:FD
X509v3 Authority Key Identifier:
keyid:25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:84:00:0e:6b:76:5f:63:d5:b2:4a:f0:d9:61:a6:85:cd:d5:
94:4a:57:eb:64:cc:2c:6c:eb:00:91:e0:70:b7:28:84:55:13:
67:2f:cf:19:d8:67:5b:55:b3:46:50:40:c4:85:ad:d5:5c:19:
b9:75:73:cc:dc:fc:28:d0:f9:55:6c:0d:8b:aa:de:54:2c:74:
4c:86:24:06:ab:68:53:1b:01:d7:f3:2c:6e:c5:f8:7c:ba:a7:
92:92:75:00:f8:64:ff:5d:c6:cb:95:fb:f9:7f:68:3d:8c:0c:
37:53:96:ed:da:fa:52:4f:3a:74:91:f5:11:68:8e:37:cc:34:
04:e3:49:61:23:bc:5b:ec:54:e6:38:a3:94:d2:de:7f:b3:8d:
86:35:b9:8d:f7:d8:59:15:ad:dc:41:18:2f:44:89:7b:45:4a:
8b:8d:68:23:77:53:85:36:57:7e:62:d2:46:53:ff:e1:d6:f9:
80:f2:bd:d3:30:a3:ce:b1:22:75:2a:01:27:78:b0:87:9d:b1:
15:4d:5f:3f:11:20:7d:48:dd:06:54:7f:86:7d:e4:b9:4c:b8:
0a:0c:1c:58:62:6f:58:52:fa:4f:09:64:ad:6b:9e:d7:67:c5:
e1:0a:7b:7c:ae:bf:e7:ba:46:ec:65:c9:cc:d8:1c:18:37:11:
d7:18:8e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 17:14:46 2024 by rpki-client on console-fra.rpki-client.org