Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
File: J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft (raw, json)
Hash identifier: 8XKBmwyjVdOfrjYSHIPWAGeKzWvTNe7h8IaxYec3gsw=
Subject key identifier: 0E:75:85:96:E2:ED:39:2E:B0:74:94:34:98:C8:36:AB:80:1E:D4:E9
Authority key identifier: 27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A
Certificate issuer: /CN=278901c061a355a3fdaace0c80b967ad1cd3717a
Certificate serial: 01936AB4AB536960708E8C3EAB6A8B7772D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
Manifest number: 137E
Signing time: Tue 26 Nov 2024 23:00:45 +0000
Manifest this update: Tue 26 Nov 2024 23:00:45 +0000
Manifest next update: Wed 27 Nov 2024 23:00:45 +0000
Files and hashes: 1: J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl (hash: khYDk7bhSeK1irwBIvNPEmFxh1NszZvlCF+1Z8JsrH0=)
2: QnA_9GIkcmJJqPS_fmbK6VwKMcQ.roa (hash: HvEY9U3+aPEd3GRsve5klekiYAFYCIMGzIYkILB9tBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:ab:53:69:60:70:8e:8c:3e:ab:6a:8b:77:72:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278901c061a355a3fdaace0c80b967ad1cd3717a
Validity
Not Before: Nov 26 23:00:45 2024 GMT
Not After : Nov 27 23:00:45 2024 GMT
Subject: CN=0e758596e2ed392eb074943498c836ab801ed4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:92:ef:40:2b:3a:df:ce:49:6e:bc:94:ba:d3:
61:fa:39:1a:9c:e3:6a:09:f7:7b:3f:1b:7e:53:30:
8d:b5:53:62:13:36:51:ce:ed:79:4b:a1:10:8e:b0:
09:6b:5f:46:69:8d:4d:82:de:b1:bb:a9:11:bc:a7:
f5:a5:e6:29:e4:cc:dc:4c:56:80:cd:19:a1:77:13:
61:ee:12:3a:90:97:3c:07:79:76:4e:ca:e5:9f:2f:
67:0c:de:e2:54:b5:ba:72:48:2e:96:95:de:7d:05:
f2:7e:5a:2f:62:20:c7:23:ae:0c:eb:bd:06:af:e6:
80:c2:c7:84:81:97:2c:30:69:23:d6:3a:37:5e:fe:
48:5d:c0:11:5b:0f:cc:df:5f:ed:13:6f:4a:bc:69:
a8:f1:67:36:02:49:c7:ec:51:42:ae:b9:d0:4c:e2:
dc:e1:f7:f3:00:f9:64:46:49:d2:2b:cf:0b:d2:8c:
b1:d4:6b:80:7e:d7:88:f3:30:e3:39:8a:61:45:f3:
d1:55:a1:e6:b9:22:6c:ad:bf:9d:8b:a7:f3:62:fd:
94:44:6c:23:f4:ac:65:56:9f:d7:51:03:8d:22:3e:
6c:8e:d9:96:98:44:76:3f:db:1d:9e:5a:c3:13:cb:
86:94:66:54:19:03:03:19:55:58:e4:6a:cd:35:09:
44:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:75:85:96:E2:ED:39:2E:B0:74:94:34:98:C8:36:AB:80:1E:D4:E9
X509v3 Authority Key Identifier:
keyid:27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:7e:47:04:3d:68:50:25:f0:05:7b:d3:cc:4d:64:f5:8a:07:
46:84:70:4c:ad:52:a9:b8:5a:fe:44:ff:67:d5:af:31:89:9f:
90:8e:5f:d3:4f:25:cb:30:1a:66:7b:94:49:7f:f4:fd:3a:d2:
22:ef:48:d3:6b:12:57:57:83:c8:2d:5c:52:8e:01:06:30:16:
0b:3e:04:cf:70:bb:15:f3:9e:24:90:5c:a5:27:cd:34:8a:56:
df:1e:6f:16:bf:83:e5:c0:d3:97:b0:85:65:bd:32:26:87:ff:
ea:e2:0a:c8:d6:3c:3f:b6:83:2b:05:49:cb:28:c4:ed:7b:96:
98:56:25:03:cf:89:54:df:ab:4c:1d:4b:7c:a3:b0:4e:00:ec:
95:9d:7e:03:bd:77:22:70:57:f5:89:c4:ab:67:e3:87:3c:45:
e8:38:c4:e1:17:9c:9b:a3:b3:bf:c9:81:73:24:70:0b:72:cd:
f7:ef:5c:51:ad:89:6f:c7:20:a5:a4:c3:b6:90:86:6b:af:1f:
cb:bb:89:f9:60:f1:c3:8f:45:3a:02:e4:76:5b:93:30:f2:c9:
07:af:29:82:89:64:9d:1d:f5:ed:a8:af:16:71:b9:96:f7:04:
ad:05:1b:78:e8:6f:37:3a:ca:96:a2:8b:6d:34:c0:7e:f2:84:
f0:20:ac:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:33:24 2024 by rpki-client on console-ams.rpki-client.org