Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
File: jTN8DIVpRrj72vKF9Syt3POK0Kg.mft (raw, json)
Hash identifier: grBp7rCKL5hM4yfdMCA6GXau09yTM3cI9ze/qLH1BDw=
Subject key identifier: A9:AD:82:B0:E0:BC:1B:6D:82:DC:39:0A:11:CD:50:E5:A3:06:31:86
Authority key identifier: 8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
Certificate issuer: /CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Certificate serial: 019357D258DE50D7EAC09BB7B885DCA50BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
Manifest number: 1225
Signing time: Sat 23 Nov 2024 07:00:23 +0000
Manifest this update: Sat 23 Nov 2024 07:00:23 +0000
Manifest next update: Sun 24 Nov 2024 07:00:23 +0000
Files and hashes: 1: iBekzwBerB8Kha4gnuUWqpyYRac.roa (hash: VBLTyNeMCZdYkxBDpwinANf9uwQNP3y86x4TyImoPPc=)
2: jTN8DIVpRrj72vKF9Syt3POK0Kg.crl (hash: UpFtZInF3TlbbWSl+gPajooqW+jGYxn84Uo98X0tYZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:58:de:50:d7:ea:c0:9b:b7:b8:85:dc:a5:0b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Validity
Not Before: Nov 23 07:00:23 2024 GMT
Not After : Nov 24 07:00:23 2024 GMT
Subject: CN=a9ad82b0e0bc1b6d82dc390a11cd50e5a3063186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f9:c6:ed:7c:2a:e9:fa:0d:72:7a:ff:33:ca:
d8:99:91:71:de:23:5f:a1:9c:f2:ae:3f:f6:d9:ee:
61:01:e9:2b:77:34:00:80:f8:17:58:ff:3f:0d:a2:
ce:4e:fe:3b:27:00:0b:a2:1e:73:65:9b:c4:fa:ad:
96:89:86:a2:55:b9:d7:02:c2:67:20:84:72:e2:6f:
ef:e5:99:8f:a6:b8:69:48:a9:b3:82:d6:67:a7:44:
6b:66:9c:c1:92:2c:13:41:24:4c:8c:b6:ca:16:ed:
fd:a5:48:45:b8:67:92:95:14:60:e0:ed:d6:3f:84:
85:6e:86:11:24:29:f3:2d:70:bd:6f:a0:b5:60:f2:
03:a4:10:9a:2a:9c:b4:1f:39:7e:22:5e:55:05:0f:
1d:be:e6:80:25:75:0d:5c:ff:da:c6:09:fa:57:ab:
4b:a4:44:2d:a4:12:d5:a4:aa:d5:7a:d1:b3:3b:18:
67:c5:c5:1b:77:80:c3:ae:f5:89:97:91:5d:ac:89:
44:cd:6c:bf:e7:b2:58:80:b4:e8:43:57:88:87:c0:
32:b9:67:03:da:5a:32:be:37:23:b4:2d:55:8e:a8:
3e:73:87:10:f4:e1:13:88:ad:65:09:1a:1c:54:51:
9c:e3:d1:b6:16:97:a3:30:37:38:41:56:2a:51:17:
1a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AD:82:B0:E0:BC:1B:6D:82:DC:39:0A:11:CD:50:E5:A3:06:31:86
X509v3 Authority Key Identifier:
keyid:8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a5:f9:6f:59:33:37:4d:e9:a6:a4:61:a3:bf:43:7e:3e:da:
8a:f7:b4:4c:11:7b:2a:21:00:73:72:c6:11:dc:02:08:6e:b9:
37:b6:9a:b0:7a:9b:58:6b:5b:d6:57:29:0c:eb:24:78:b4:97:
5b:b8:96:22:81:7b:21:f2:8c:79:61:ce:30:12:ea:c6:bb:c4:
87:4a:1d:dd:67:47:e6:49:2f:4a:3a:d2:3a:63:36:82:c9:a7:
b2:cd:bf:3a:6e:1a:5f:87:58:66:9a:aa:e4:4a:1f:62:f6:77:
4e:5d:b6:e6:bc:74:f7:78:f8:9b:92:0b:3b:85:74:76:d8:6c:
00:30:2c:10:38:0f:dc:77:d4:57:a9:6f:82:08:98:f7:b8:c6:
81:44:e2:84:55:26:83:9c:1b:3d:77:d5:95:b6:ad:5b:72:8c:
b9:8a:7f:29:33:0c:52:eb:09:c9:1f:46:9a:23:63:6e:40:ac:
3c:0a:80:44:c4:27:da:13:ff:ea:ad:f6:86:9c:62:c5:4f:d1:
c4:c7:b7:fb:c1:16:c1:47:74:84:8f:32:9e:18:22:28:1f:c7:
85:b5:2a:cd:86:02:14:19:d1:7b:d8:f8:dd:30:9c:9e:e5:9f:
e5:2f:d1:1a:54:f7:de:0a:6e:66:2b:11:d8:e9:73:d2:9a:ac:
b0:fe:40:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:45:16 2024 by rpki-client on console-ams.rpki-client.org