Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft
File: jTUmuzG54wxJBF9DaMYC7pi-wBo.mft (raw, json)
Hash identifier: 2mLxg+Yt+1zrtzRckE9eZiPfJ5vjwttH8QsxX+G8j1Q=
Subject key identifier: 3D:16:5C:0E:08:E4:06:B1:26:7C:4E:0A:03:57:0F:C5:DB:E4:7E:77
Authority key identifier: 8D:35:26:BB:31:B9:E3:0C:49:04:5F:43:68:C6:02:EE:98:BE:C0:1A
Certificate issuer: /CN=8d3526bb31b9e30c49045f4368c602ee98bec01a
Certificate serial: 0193579B7348E8A91EA73C6A4448AC4E050F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTUmuzG54wxJBF9DaMYC7pi-wBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft
Manifest number: BF
Signing time: Sat 23 Nov 2024 06:00:25 +0000
Manifest this update: Sat 23 Nov 2024 06:00:25 +0000
Manifest next update: Sun 24 Nov 2024 06:00:25 +0000
Files and hashes: 1: fN_4x_lcOU6L7RFmONZt2YTUCVY.roa (hash: 0TMMNjkdeImiUrndCx1I/NO7PaEb4Y6F/xHzSRQsxS0=)
2: jTUmuzG54wxJBF9DaMYC7pi-wBo.crl (hash: S16QaLVVcclWLI9rAr/aUggUSc8Gvif5jHLbjjZgviw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTUmuzG54wxJBF9DaMYC7pi-wBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:73:48:e8:a9:1e:a7:3c:6a:44:48:ac:4e:05:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3526bb31b9e30c49045f4368c602ee98bec01a
Validity
Not Before: Nov 23 06:00:25 2024 GMT
Not After : Nov 24 06:00:25 2024 GMT
Subject: CN=3d165c0e08e406b1267c4e0a03570fc5dbe47e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b7:04:55:13:de:de:f8:bd:cc:e2:21:3c:5a:
cb:0f:c7:57:1b:e6:2e:69:6b:dd:8a:cb:b5:32:d7:
e9:27:3e:0d:0b:f3:f0:0e:0f:03:ee:01:87:5e:f5:
bf:8a:fb:89:98:e6:b9:e2:42:1b:43:4f:45:09:79:
cf:90:4f:45:6d:06:40:04:2c:fe:89:55:8f:09:26:
2b:a3:2b:c7:e9:8a:c1:2f:d4:8a:78:12:08:df:38:
69:33:9f:be:f8:90:70:8c:86:7f:9d:3b:b2:27:94:
db:b9:d3:dc:d1:72:21:7c:30:a6:50:29:6e:9e:00:
e3:5c:1e:72:2b:74:fd:50:c5:e8:03:24:29:be:74:
24:66:a2:33:00:3f:ec:14:14:0a:36:61:71:66:17:
5e:36:81:4b:3b:66:c8:d3:ad:e4:65:50:21:67:00:
58:ec:95:5d:66:65:5d:ad:7c:d1:d4:93:15:d9:c2:
80:1a:52:52:13:53:d7:07:70:66:28:94:e8:f6:fb:
35:36:29:fc:6f:ff:78:1a:e6:33:32:07:7d:b8:6f:
a4:e2:c0:65:2e:d1:53:53:4c:e5:9b:fb:0b:bc:e2:
86:39:fc:08:7c:7d:59:7b:03:04:af:42:72:cf:e1:
a7:8a:8d:2d:7b:18:1d:6c:55:89:78:2b:6c:8b:89:
4a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:16:5C:0E:08:E4:06:B1:26:7C:4E:0A:03:57:0F:C5:DB:E4:7E:77
X509v3 Authority Key Identifier:
keyid:8D:35:26:BB:31:B9:E3:0C:49:04:5F:43:68:C6:02:EE:98:BE:C0:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTUmuzG54wxJBF9DaMYC7pi-wBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b2:d2:c6:c7:6f:8b:8f:ae:a8:f4:bb:bc:e2:74:10:e0:a8:
5f:32:6b:e7:7a:59:3e:5e:7e:7b:83:99:11:f3:9c:09:d6:6c:
4c:7a:8a:b0:af:c2:d6:6a:5f:ff:10:87:75:cf:1b:40:5a:d9:
f4:c3:2b:ed:3b:b7:04:07:f8:df:04:3e:93:2a:1c:9d:76:d2:
af:a3:8f:ef:ff:34:af:e0:12:59:be:46:cf:d7:2c:90:67:87:
4b:be:ab:72:ff:41:88:a1:ce:21:07:ee:c4:99:d4:aa:1b:c6:
c0:0d:f0:77:82:a4:ab:2b:7c:0d:92:4a:08:52:70:51:d8:75:
63:68:7f:c4:a4:df:57:9c:6e:1b:ed:26:1a:a2:46:ce:99:7f:
4d:e8:04:58:4f:13:cb:0b:45:12:59:d5:d0:f2:41:09:81:07:
bc:19:8d:5b:7d:7d:45:69:aa:24:63:0c:73:27:78:13:62:55:
4d:e5:87:72:25:e1:bd:e2:96:ba:67:d7:b9:09:6d:ec:01:8b:
c3:23:c2:45:f9:37:9b:1d:f2:88:db:fd:16:a5:cc:c0:a4:81:
38:e1:37:58:85:4d:d5:b8:21:36:e5:7f:31:87:e3:74:f4:f1:
1a:ba:d1:04:2f:07:82:75:e3:5d:ae:09:a9:37:a1:bc:84:ee:
ab:a5:fb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:55 2024 by rpki-client on console-ams.rpki-client.org