Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
File: jYkiPB8zXAzFaTWfot2jSaIjbMs.mft (raw, json)
Hash identifier: cHLuSw/23nro14jkHRV1GFDAoXW9LR9tl2ULIyzjDX4=
Subject key identifier: 8C:DF:7B:F2:15:27:2F:7E:D2:24:0B:91:76:15:9B:E9:55:FB:72:29
Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Certificate serial: 0192358074C474E150EBB8F179FC49376593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
Manifest number: 0C98
Signing time: Fri 27 Sep 2024 22:01:03 +0000
Manifest this update: Fri 27 Sep 2024 22:01:03 +0000
Manifest next update: Sat 28 Sep 2024 22:01:03 +0000
Files and hashes: 1: gojNHpj46uDqsEnrNt_pEMKRTYQ.roa (hash: cNBsHoI0ZaBUjB+vbHIDSFg/HyQmBSbW2GFsYbv2rUg=)
2: jYkiPB8zXAzFaTWfot2jSaIjbMs.crl (hash: sLTifylS+hFFS8OtlkVeJ5ij2Bes6vNnlRT4lEaUgL8=)
3: kQ5yRwTUMffUn-57_rCna6ff3sI.roa (hash: VoojJa6myjzN5C3xIahHNlsSjYskbbel1ejzSWEWH9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:35:80:74:c4:74:e1:50:eb:b8:f1:79:fc:49:37:65:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Validity
Not Before: Sep 27 22:01:03 2024 GMT
Not After : Sep 28 22:01:03 2024 GMT
Subject: CN=8cdf7bf215272f7ed2240b9176159be955fb7229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:27:33:25:6b:6a:7d:21:bf:31:25:e0:dd:78:
39:fd:d7:a7:49:c4:df:8b:9f:da:73:ec:b6:63:29:
12:a1:2b:e2:4f:05:0a:a7:23:ca:0d:9e:8b:d1:1d:
8d:07:4f:e2:61:a4:d3:08:a7:8d:65:29:6b:9c:20:
45:73:50:16:00:d5:38:56:eb:0f:d7:16:94:b7:18:
63:9c:46:f7:94:4c:4e:c7:4c:00:d2:53:e6:c1:c1:
ec:d0:c0:66:27:fb:b6:f9:4d:49:63:07:16:62:eb:
2b:cb:d5:45:df:04:ba:e1:49:51:4b:50:fb:ba:02:
da:98:d5:84:00:37:75:72:2d:9d:28:33:3b:e3:0c:
bb:93:37:20:a1:55:f6:d8:62:32:cd:fa:31:0d:89:
f0:67:d9:20:f5:34:81:c6:8a:a7:1d:32:37:ce:9d:
24:39:95:6e:e5:b3:46:32:51:74:ff:ff:1c:00:93:
51:73:55:73:6f:64:60:2f:4e:c6:fb:7b:3d:fc:ff:
98:2d:0e:5b:ea:2a:70:46:7d:78:65:0f:68:b1:6b:
36:65:0d:43:57:40:cf:e6:a3:43:4a:53:be:01:2f:
38:b5:62:2a:64:42:5c:48:5a:17:13:4a:72:d5:5d:
35:89:0b:40:53:4e:c8:1d:ea:3f:15:3d:c2:6e:c2:
ba:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DF:7B:F2:15:27:2F:7E:D2:24:0B:91:76:15:9B:E9:55:FB:72:29
X509v3 Authority Key Identifier:
keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:77:e6:f8:21:50:23:68:2d:8c:ee:2e:db:cc:22:53:79:c1:
5b:c1:d2:60:77:cc:8f:95:1a:46:0a:a9:45:ef:22:bd:a9:8d:
86:68:14:e7:71:1e:85:25:cc:0e:bd:4d:ad:de:76:73:1b:f8:
ba:4e:7b:fb:73:26:5c:10:e2:63:18:62:7b:c1:f0:16:b4:f2:
c2:4e:e0:b5:49:00:29:59:10:96:0e:c4:91:df:03:74:5f:e0:
79:8f:78:9d:2b:7a:14:dc:63:35:5b:91:84:4c:40:bf:db:6a:
2d:56:ec:c3:62:bc:69:29:12:a9:f3:b5:9a:ad:8f:68:01:6f:
cc:21:a7:e6:91:11:c8:aa:d8:1f:59:9e:08:42:ad:4d:04:db:
03:88:19:1c:4b:5b:4a:28:26:dd:75:9a:56:74:49:36:34:64:
fe:bc:d5:d9:6d:a4:e1:d9:65:af:35:71:d9:c2:e3:41:3c:f7:
a9:18:72:b5:01:7d:eb:50:08:e1:05:47:0e:2b:ea:34:e7:ab:
e0:e8:fd:79:27:74:98:dc:d8:6c:0a:b6:36:42:80:c0:c3:90:
6f:9b:ad:99:e0:60:6e:fd:02:00:02:72:e2:41:44:19:b4:5e:
a5:e2:59:37:f3:00:2e:f8:11:9d:04:29:69:cb:78:dd:c0:d4:
9e:3c:9f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:26:45 2024 by rpki-client on console-fra.rpki-client.org