Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
File: jl3HMsooNJc1R8eA4cOlq0eAW-A.mft (raw, json)
Hash identifier: CbPsirRs0ga1nVGt+oorznh1Lss9le4mL8FemR+2g88=
Subject key identifier: 46:A7:66:3C:46:8A:71:86:C7:7D:4C:69:15:EE:8E:C0:43:21:02:55
Authority key identifier: 8E:5D:C7:32:CA:28:34:97:35:47:C7:80:E1:C3:A5:AB:47:80:5B:E0
Certificate issuer: /CN=8e5dc732ca2834973547c780e1c3a5ab47805be0
Certificate serial: 019367EB3AD11A61A9EEEC3055F3E5E40EEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
Manifest number: 0E8F
Signing time: Tue 26 Nov 2024 10:01:29 +0000
Manifest this update: Tue 26 Nov 2024 10:01:29 +0000
Manifest next update: Wed 27 Nov 2024 10:01:29 +0000
Files and hashes: 1: jl3HMsooNJc1R8eA4cOlq0eAW-A.crl (hash: awGlupH2+GR0fTZOgK6Si2mqyewvrGhUHXxIzHAlqRE=)
2: t4qpRJ8LQQ5MoScNS9v8wlDAyQA.roa (hash: tWznTq6POTNMxZv5aLIq7TQ+5RcPAtrjqOfiqEMCX4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:eb:3a:d1:1a:61:a9:ee:ec:30:55:f3:e5:e4:0e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5dc732ca2834973547c780e1c3a5ab47805be0
Validity
Not Before: Nov 26 10:01:29 2024 GMT
Not After : Nov 27 10:01:29 2024 GMT
Subject: CN=46a7663c468a7186c77d4c6915ee8ec043210255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cf:50:54:5a:7c:82:99:02:84:df:f9:02:80:
af:89:2d:19:23:b3:0f:9d:f1:cd:81:b8:25:fc:02:
ca:fd:7b:4c:0d:1d:05:ef:70:ef:79:67:20:13:39:
0f:78:81:02:0d:e3:79:dd:6c:b5:9c:45:15:e6:05:
b0:43:36:b0:cc:78:bb:95:b1:8a:d9:81:35:05:c6:
ae:33:7c:a3:25:6b:70:bc:f0:2a:95:43:1d:9d:30:
75:e5:c4:0d:f7:2b:f6:db:68:fd:f4:a8:47:ab:87:
16:6d:cd:54:22:f6:3e:9e:bd:58:ab:f6:ab:64:0d:
99:bd:0b:85:71:fe:4d:d8:79:b5:ad:1f:9a:d8:5d:
21:d8:ea:46:77:ef:f7:64:a6:60:cb:23:84:9d:d6:
34:1b:ef:de:8b:b4:07:d3:a1:88:34:02:91:5a:09:
00:f7:ed:da:03:aa:06:c2:a3:e6:42:0d:3f:d8:6f:
a3:0d:db:de:f6:5d:9f:f5:8e:e7:fc:7c:a8:d9:b3:
da:5c:73:bc:0e:f5:a0:4a:00:db:5d:db:f8:2f:c5:
68:d7:61:d9:ef:fa:99:63:94:b2:e9:c1:69:a1:bb:
61:6b:55:0f:82:8c:2e:9b:18:e2:64:8c:7c:81:74:
60:a8:9e:b0:ba:ca:cc:95:2d:6f:86:89:68:cc:db:
37:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A7:66:3C:46:8A:71:86:C7:7D:4C:69:15:EE:8E:C0:43:21:02:55
X509v3 Authority Key Identifier:
keyid:8E:5D:C7:32:CA:28:34:97:35:47:C7:80:E1:C3:A5:AB:47:80:5B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:5d:66:ff:1c:3a:8e:a9:aa:27:83:d2:b1:b1:fc:a0:9a:d2:
1b:f7:cc:70:4e:b2:f2:66:f8:fd:4a:f0:90:ed:40:a7:db:00:
76:2b:4d:fe:c7:e8:cf:ab:af:0b:f8:86:d2:11:ec:b3:6d:ae:
46:45:6f:ac:11:f1:e1:1d:1c:05:f4:67:bf:44:a1:c1:8e:cc:
7a:cb:2d:8e:90:9c:78:3a:9f:03:b6:0a:9a:5a:a4:6d:6c:2d:
7d:f2:34:c1:13:aa:34:04:21:ec:ec:e4:31:15:46:66:b0:e8:
6a:b0:9e:81:4b:cb:85:66:2b:3b:f9:02:c0:2d:89:a2:2e:1f:
e1:b4:16:93:63:dc:70:79:42:c9:eb:4b:a1:c8:ce:6d:7a:03:
da:7d:59:da:5c:62:35:c2:33:b0:ba:ce:80:c9:17:61:15:48:
8c:da:5a:3a:6a:cd:f8:40:18:c6:bb:1b:d5:d7:a2:ed:0d:e1:
71:d8:91:3e:be:b5:a3:b3:99:8e:45:00:80:05:87:68:27:25:
27:68:82:10:ab:70:4a:e9:30:a8:6c:f7:11:27:49:ab:2b:11:
53:cb:f5:76:6a:4b:7c:c3:46:cb:57:68:cc:b8:23:a6:46:c0:
24:11:c1:fb:e9:4a:d8:68:b0:c4:0f:21:36:96:5b:ca:1c:bf:
3e:5a:71:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 19:23:06 2024 by rpki-client on console-fra.rpki-client.org