Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
File: JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft (raw, json)
Hash identifier: IyI2q/160AI+S1Dx5uKUNSpQrzdFdkMIUJXVle2x9x0=
Subject key identifier: 82:39:30:C6:7F:93:EB:CB:FE:D0:5A:1C:14:E2:66:9A:2E:7A:09:DE
Authority key identifier: 24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
Certificate issuer: /CN=24d906b90c1d856673e414f39805be583d230ba7
Certificate serial: 018F874B6A2C77FB0486AC66275423C4423B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
Manifest number: 0332
Signing time: Fri 17 May 2024 16:03:37 +0000
Manifest this update: Fri 17 May 2024 16:03:37 +0000
Manifest next update: Sat 18 May 2024 16:03:37 +0000
Files and hashes: 1: IbrZwl2n5IYDkHWeTnnEevzphQc.roa (hash: b1fQ3soIwAiNc4DdsoMpPaJhCnM+WfgOAAQJ3B4KaGs=)
2: JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl (hash: hpuXlE9vbaAd/9i9hyyTu1jEZYxOs7JjJULXzS1E3Zw=)
3: QmlXxflJkt_fFVq2C1zRMxXieDg.roa (hash: SIqdEtrHHNbtKuXCYM8lg0OJ244TpdjoFBoYig2EKRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4b:6a:2c:77:fb:04:86:ac:66:27:54:23:c4:42:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d906b90c1d856673e414f39805be583d230ba7
Validity
Not Before: May 17 16:03:37 2024 GMT
Not After : May 18 16:03:37 2024 GMT
Subject: CN=823930c67f93ebcbfed05a1c14e2669a2e7a09de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6e:32:be:37:31:dc:50:84:d9:76:88:d3:1d:
ef:e5:ba:f2:7a:29:9d:0c:91:93:21:43:5c:db:0a:
9f:10:c7:a1:ad:62:70:44:4d:d3:6d:54:1a:7f:61:
47:3f:24:74:fb:fa:0d:a5:de:f0:59:62:10:2c:df:
95:07:25:73:3b:b4:6b:37:b0:c5:89:09:a5:7c:13:
99:5c:31:3c:31:f8:d7:0c:b3:aa:89:54:c0:e4:2b:
9b:3f:1d:5c:b9:48:c2:96:bf:d6:74:23:29:c7:fe:
1d:07:0e:7c:2d:92:b6:72:31:78:d5:ad:ea:df:2f:
2b:75:35:a4:25:f0:61:c9:b1:8b:cb:cf:cd:0f:fe:
22:3e:19:32:5c:f6:e8:c6:38:f5:48:db:15:66:d5:
f3:45:d8:4f:5b:43:82:53:06:6a:5c:b6:33:ad:f1:
ca:d6:22:02:dc:3c:d5:82:89:36:a0:fc:b8:21:15:
35:f8:13:c4:2a:05:0b:f1:89:63:87:94:24:7e:6e:
d8:30:5b:6f:31:ca:ef:08:d1:ba:5d:13:f3:09:99:
76:a7:4e:82:d7:99:c6:f6:c3:54:df:66:66:fc:8d:
19:bb:f2:bd:1d:f0:d0:6d:59:ac:7f:51:f5:a0:11:
9a:0d:4c:d3:57:2d:c6:b7:98:53:22:3a:b9:a8:5d:
5e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:39:30:C6:7F:93:EB:CB:FE:D0:5A:1C:14:E2:66:9A:2E:7A:09:DE
X509v3 Authority Key Identifier:
keyid:24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:88:cf:e8:b9:ec:83:d7:4b:9a:63:91:62:34:7c:48:c3:31:
81:10:0d:eb:e1:4c:52:a2:4f:51:b0:1b:f2:30:52:dc:3a:b8:
4d:97:74:7b:33:59:e4:4c:2c:fc:c0:cc:8f:17:c5:cd:cb:10:
ef:79:34:14:e5:34:ef:a8:6b:f0:8e:3e:32:68:97:33:a3:e7:
1a:3f:f5:10:0b:df:2a:1a:5d:0e:45:60:85:e5:fa:39:23:17:
f0:fa:43:47:1f:e7:52:7a:42:12:6f:8c:a5:74:d8:4b:84:fb:
95:7e:99:f8:bd:7f:2d:d1:e8:8b:cc:fe:0c:56:30:ed:e6:b9:
14:6f:cc:68:61:bd:5c:53:f6:85:ac:cc:46:59:23:35:6c:15:
78:45:c4:5f:a9:43:a6:e3:17:ee:1d:de:a3:32:0c:c5:3c:8a:
5c:fb:f5:43:fe:0e:91:8d:42:b0:4d:6a:9e:54:af:a4:71:c6:
c6:0f:9f:d8:75:dc:e5:2c:80:c2:e2:b5:03:3c:66:78:fa:3b:
32:72:0e:56:87:e5:78:b4:87:ff:a3:74:42:61:83:75:ae:f9:
cc:17:f4:bb:88:5c:84:22:59:91:df:6e:99:a9:07:5f:d4:7e:
7a:df:1a:5e:7f:04:10:0d:7e:49:11:f0:9b:81:07:b0:2b:26:
63:d1:e5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:05:01 2024 by rpki-client on console-fra.rpki-client.org