Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
File: jpC9KHAFDIRHehYesJDwXrliAWw.mft (raw, json)
Hash identifier: FVlnotx6Ikt1wxZlXBIHtjiLa6Vrmw+zOajt9/CUSYo=
Subject key identifier: 81:86:B3:59:01:9A:ED:F7:F9:D2:A9:62:81:D9:FB:F9:87:2C:E1:1F
Authority key identifier: 8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C
Certificate issuer: /CN=8e90bd2870050c84477a161eb090f05eb962016c
Certificate serial: 019356F691761FDB342ADFD4E61C6E5DA644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
Manifest number: 1302
Signing time: Sat 23 Nov 2024 03:00:19 +0000
Manifest this update: Sat 23 Nov 2024 03:00:19 +0000
Manifest next update: Sun 24 Nov 2024 03:00:19 +0000
Files and hashes: 1: h6kFpWmZXJsvpsSDZcJ8M-UXXVY.roa (hash: PqtU97xO/wTP/SHkbfREWjeVwSQUwdz+bcSygNgCPGQ=)
2: hf5Mj5DoTVCHOxxdISYw9_hXJHo.roa (hash: EFml9x8LI6U5+f+7icI+kQ3Sqo9y5E63r+I1Vw/WKWw=)
3: jpC9KHAFDIRHehYesJDwXrliAWw.crl (hash: FKeFCeHK95wXIznAVIDnT/9sbfyjsEm73Fcbg01OuRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:91:76:1f:db:34:2a:df:d4:e6:1c:6e:5d:a6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e90bd2870050c84477a161eb090f05eb962016c
Validity
Not Before: Nov 23 03:00:19 2024 GMT
Not After : Nov 24 03:00:19 2024 GMT
Subject: CN=8186b359019aedf7f9d2a96281d9fbf9872ce11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:82:f1:2e:cf:17:f9:e6:ad:91:f8:1c:33:36:
92:44:30:c8:90:f4:53:b9:b2:14:9d:83:4a:90:d5:
aa:46:86:fd:85:51:ee:02:a1:8b:ee:95:d7:bc:48:
68:41:e4:32:b9:f0:7e:6f:14:a9:d1:f0:cd:9e:3a:
ce:2f:f9:f8:e8:e6:ce:73:56:dc:c9:10:a4:38:a8:
33:81:9e:fc:b8:35:f5:7b:e8:d8:86:2d:17:37:e0:
03:a6:3a:0b:55:cd:25:8c:39:7a:43:ec:e7:18:2c:
43:54:60:da:a2:13:cc:a0:c6:10:7d:64:dc:97:e8:
3d:6d:dd:83:47:84:91:34:d6:c3:06:54:9a:ed:e9:
43:bc:98:4c:6c:0c:9d:5a:38:42:1a:b0:82:6b:ee:
bb:2c:44:8c:28:c5:a6:3f:73:94:4b:b1:4e:b8:7c:
53:76:6f:67:8f:a5:ce:7d:66:f7:84:bf:a3:b3:67:
aa:23:81:5b:8b:98:cd:cb:12:52:ea:46:bb:0c:b1:
24:ac:aa:0b:15:4e:1a:4e:c7:52:4b:a7:57:e8:f7:
7d:c7:ae:7b:38:c2:f9:f6:a7:fe:62:ac:15:2a:6a:
77:3d:88:74:1e:27:f0:67:27:e8:fa:fc:ec:91:bd:
cd:e6:5a:b2:42:28:90:f6:19:f9:6e:77:ad:6e:0a:
b6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:86:B3:59:01:9A:ED:F7:F9:D2:A9:62:81:D9:FB:F9:87:2C:E1:1F
X509v3 Authority Key Identifier:
keyid:8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:4a:5f:ad:10:eb:b7:99:d8:cb:54:04:f9:a7:80:36:95:dc:
8e:aa:41:fd:1d:9a:95:ce:1f:63:30:9b:ef:73:dd:95:c1:37:
01:33:9e:e4:37:d9:94:54:bd:9a:6d:6a:3b:ef:3a:4b:ba:52:
f7:a9:68:9d:1f:38:86:61:12:bc:be:22:8a:4b:16:30:a7:74:
18:af:f7:d1:c8:86:04:6d:f5:a0:28:01:17:d9:f5:80:9a:37:
25:72:d4:32:3a:fe:43:83:95:46:fe:b2:10:9b:a4:33:9d:2f:
9a:c7:f4:7a:3c:30:ee:af:48:95:cd:1a:d5:97:17:f3:31:ec:
5c:42:e1:e9:33:bb:55:49:74:1c:65:98:1e:ba:03:0c:d3:48:
98:09:33:9b:a1:e5:a5:08:6f:5a:98:48:3e:17:1d:f0:99:af:
55:86:b6:f1:56:c7:64:cd:88:6a:19:36:e5:64:a0:1b:b6:e1:
fa:3c:67:9d:28:04:7f:88:07:46:39:26:7c:af:5e:c6:f1:ad:
79:17:ff:b5:ae:06:2b:de:f9:00:4c:14:81:75:bb:bd:e5:d9:
48:8f:5f:c5:24:04:62:d3:e8:6f:40:de:ff:6b:2f:de:58:99:
84:bc:f3:ba:d9:26:56:54:e4:f5:72:ff:f8:cc:fe:c8:80:9a:
90:ec:64:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:43:12 2024 by rpki-client on console-ams.rpki-client.org