Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
File: jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft (raw, json)
Hash identifier: p9+9BBC+EkWhhfUP6iqPeEzhg+mV23Ng2B+IenN3ysQ=
Subject key identifier: B1:82:02:6D:20:89:8E:6B:59:12:1E:03:32:1A:13:C1:25:66:DB:1F
Authority key identifier: 8D:3E:59:4B:B2:6E:9C:08:E6:FC:47:36:CA:A5:D3:C2:00:85:4D:EA
Certificate issuer: /CN=8d3e594bb26e9c08e6fc4736caa5d3c200854dea
Certificate serial: 019352AD487A6713AF19D87D1B6D8C4DDB92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
Manifest number: 136E
Signing time: Fri 22 Nov 2024 07:01:48 +0000
Manifest this update: Fri 22 Nov 2024 07:01:48 +0000
Manifest next update: Sat 23 Nov 2024 07:01:48 +0000
Files and hashes: 1: 4i1V55osIwjerc4Ci4M2UPpCaec.roa (hash: BRBqlMg5goGVMzHwmwO4dVEfIaqrPx34524cSrnFBuY=)
2: jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl (hash: mbFnx2CS0HUVGYYxlG/gxuk3bGfq/3w4tw2JxZqxT7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ad:48:7a:67:13:af:19:d8:7d:1b:6d:8c:4d:db:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3e594bb26e9c08e6fc4736caa5d3c200854dea
Validity
Not Before: Nov 22 07:01:48 2024 GMT
Not After : Nov 23 07:01:48 2024 GMT
Subject: CN=b182026d20898e6b59121e03321a13c12566db1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:14:3a:fe:92:40:4a:d9:f7:48:62:73:1f:7b:
cf:07:4b:be:5e:9f:71:52:76:a1:60:02:5b:7d:c7:
1b:96:78:77:de:2c:45:05:8f:21:77:63:0c:62:6b:
a0:ba:83:9c:1d:0b:05:e5:40:2c:9d:b4:bc:ff:c4:
dc:ff:0a:a5:4d:e9:8f:f2:51:4f:31:69:10:e4:ec:
14:dc:c8:52:74:65:d1:e9:0d:be:1d:4d:7a:5b:da:
55:37:6c:05:53:3a:3a:b2:bc:4c:1b:3a:0b:24:45:
39:ba:f2:4f:37:7a:d4:22:f5:91:31:6c:87:86:9b:
96:7e:4b:a6:8e:b0:6f:bc:3f:be:32:86:38:c9:e3:
0e:7b:ec:99:27:53:60:ef:c0:a3:8f:70:59:a2:bd:
dc:9b:89:a5:fd:1f:6b:58:9d:fb:0b:c2:df:62:b4:
f2:12:b2:fd:90:55:4c:9c:40:38:4c:fd:68:24:e8:
a9:4e:87:6d:96:c2:c6:18:19:05:6b:83:5e:5b:c2:
bb:ab:de:22:27:2c:f3:cc:dd:cf:d6:f6:d8:b1:df:
4f:b9:22:c4:4d:ae:5e:80:17:aa:52:b7:3b:15:db:
ce:11:e4:1b:66:f1:20:fb:e3:e6:4f:a2:78:10:22:
43:14:e1:9e:e2:15:6a:f8:c0:ae:1b:e3:76:e5:94:
be:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:82:02:6D:20:89:8E:6B:59:12:1E:03:32:1A:13:C1:25:66:DB:1F
X509v3 Authority Key Identifier:
keyid:8D:3E:59:4B:B2:6E:9C:08:E6:FC:47:36:CA:A5:D3:C2:00:85:4D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:7e:22:d9:2a:82:aa:08:f6:20:8f:82:17:60:09:86:94:b0:
26:a5:1d:0f:3a:c7:b2:9b:a7:13:00:37:f2:c9:18:91:3d:10:
12:21:31:0d:48:f7:c9:18:a8:33:82:d2:b1:83:a8:cd:cf:75:
9f:b3:d7:f0:d9:70:c2:49:bd:6e:58:72:bb:52:4a:ab:9d:63:
c5:45:a8:76:ff:ce:e6:a5:8b:cb:59:b0:ef:0a:b0:bb:95:e8:
1f:a1:35:ee:77:f6:bf:61:76:f2:52:09:03:be:29:ff:23:94:
15:3b:35:0b:d2:97:57:9b:8d:7c:40:5f:01:8d:05:fd:db:fd:
58:58:30:3e:52:d7:33:62:4a:87:91:cb:d5:3b:c8:74:e3:f2:
9c:11:80:94:16:ae:3f:57:8c:e5:a5:97:cc:04:a0:8b:18:06:
43:7d:17:8e:e7:11:5e:8b:8c:8b:b4:9c:ef:4b:c0:0c:52:1e:
30:a0:67:66:60:83:7e:2d:a5:90:d5:d3:b2:03:cd:11:0f:e3:
78:c7:12:2d:a1:e9:4b:c3:c4:3a:17:46:ed:9a:d7:21:2d:ca:
50:8a:c4:df:1d:0f:cb:a1:4e:7b:92:94:c8:1c:df:df:dd:5b:
98:b3:32:dc:2d:b2:a1:20:ec:21:c1:40:98:ec:48:78:96:db:
d4:6c:a7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:45:08 2024 by rpki-client on console-fra.rpki-client.org