Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft
File: JxnUEBB2de7YtizK1DUzb4GeCm0.mft (raw, json)
Hash identifier: owMQG4HSY7zG9qRWsedV+IQmIPcm8ECLHS6AQeN/1zo=
Subject key identifier: F8:48:C9:27:BE:E0:26:97:C6:EE:6B:D4:F4:FA:37:F4:84:93:8A:E5
Authority key identifier: 27:19:D4:10:10:76:75:EE:D8:B6:2C:CA:D4:35:33:6F:81:9E:0A:6D
Certificate issuer: /CN=2719d410107675eed8b62ccad435336f819e0a6d
Certificate serial: 019353F5AD7CEF467DA9FA4EFF9E8E96CCF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft
Manifest number: 05AF
Signing time: Fri 22 Nov 2024 13:00:29 +0000
Manifest this update: Fri 22 Nov 2024 13:00:29 +0000
Manifest next update: Sat 23 Nov 2024 13:00:29 +0000
Files and hashes: 1: HqiXn2VdzRY4ADXh4LHC_5GDBRQ.roa (hash: DleGgOYgTUs5KdclgG1PWq0idI47KwW+2iFXOMoNWEQ=)
2: JxnUEBB2de7YtizK1DUzb4GeCm0.crl (hash: k1TTwIbPacaVj8hj3RoKUw/juqNjXhRc8BcdtP8sZ9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:f5:ad:7c:ef:46:7d:a9:fa:4e:ff:9e:8e:96:cc:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719d410107675eed8b62ccad435336f819e0a6d
Validity
Not Before: Nov 22 13:00:29 2024 GMT
Not After : Nov 23 13:00:29 2024 GMT
Subject: CN=f848c927bee02697c6ee6bd4f4fa37f484938ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1c:64:98:04:ff:ec:30:ad:55:b6:c0:2f:20:
37:75:77:a1:8f:47:21:f2:83:b7:43:45:5b:c1:ec:
23:97:ab:0f:18:c4:c6:11:d2:fa:93:35:2f:60:c4:
73:fa:9f:b6:5c:fa:92:e2:0a:3f:61:c6:19:cd:81:
b0:e5:f0:51:83:84:eb:0a:e5:e5:67:93:30:e0:a6:
31:c0:a9:07:c4:6a:79:0c:dd:97:df:61:24:f0:71:
b0:f8:90:d2:37:2d:d8:41:d8:23:b8:90:b4:b7:05:
84:38:8d:37:ba:84:4f:0b:62:6d:25:aa:f1:9c:13:
40:e6:ff:64:27:36:68:b7:b2:19:bb:df:29:6c:8f:
66:7c:ca:89:69:de:a8:55:0a:d1:a1:12:15:7d:f9:
7a:dd:21:74:c0:50:2d:e3:f8:3d:a3:0d:bd:fa:0e:
fe:b3:08:d5:38:78:15:ec:17:cb:60:1b:74:e1:42:
38:36:c3:13:a1:34:5b:80:67:a5:c4:e3:2c:45:48:
39:cf:0f:41:ca:95:e9:43:0c:0f:95:d3:b1:66:48:
20:2d:95:d5:c8:97:e4:dd:20:58:73:2f:33:cc:0b:
8d:33:1e:4c:47:72:e0:56:52:d3:52:2e:4f:bc:5c:
e9:45:c9:67:f9:35:f2:aa:98:a3:4f:c4:fd:78:6e:
c9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:48:C9:27:BE:E0:26:97:C6:EE:6B:D4:F4:FA:37:F4:84:93:8A:E5
X509v3 Authority Key Identifier:
keyid:27:19:D4:10:10:76:75:EE:D8:B6:2C:CA:D4:35:33:6F:81:9E:0A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:27:0f:42:13:c3:c6:9a:0d:e9:0b:45:cc:bb:fb:58:3c:3b:
5f:48:1c:a5:08:38:ad:7c:17:60:f6:52:01:ab:18:37:f3:51:
0f:2c:64:91:c9:e5:e3:1f:86:3f:85:1e:41:f1:0a:58:e7:c5:
04:f1:80:f4:2d:ab:64:45:de:90:4d:01:08:2f:4c:14:6c:28:
8e:d6:70:ff:1b:62:0b:86:07:59:7d:42:b1:9e:c6:fe:d8:32:
35:36:1a:c5:33:f0:53:06:4a:eb:a0:7e:6b:82:01:81:d9:73:
e3:13:e1:b6:1d:10:64:dc:1b:e0:a2:d6:ee:44:3f:2e:c2:af:
90:4f:9b:9f:fc:25:08:73:c4:22:71:ad:08:e3:90:51:e2:f1:
3f:d3:c7:8c:16:e0:19:c0:60:10:5a:a0:7d:28:70:5e:7d:34:
89:81:0b:90:1d:62:80:e1:76:3b:4d:4a:60:d2:af:f6:5c:94:
6e:ff:ae:e0:73:a4:04:ae:6f:66:6f:7d:93:64:0c:1b:43:fb:
72:70:ac:0e:38:f4:cc:f2:32:1a:c0:19:24:73:ae:01:1f:a2:
5c:c4:b9:2f:e0:3c:e8:7b:3a:ed:2c:61:0c:6c:d7:dd:ba:cf:
74:0a:4a:c5:62:c5:8d:d2:77:ef:93:a3:a1:77:c7:89:2c:f0:
2d:78:02:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:46:53 2024 by rpki-client on console-ams.rpki-client.org