Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
File: JLZgphGYDGgnMTnjKv-3S0VKnTI.mft (raw, json)
Hash identifier: Rknhtnz3cNwCP+Xh6f3jwqCgn0aIbw3l+9TxjIdhFBY=
Subject key identifier: 3E:51:03:81:32:EF:FB:FE:10:67:4E:6E:4F:E5:18:2B:BE:4E:7E:D5
Authority key identifier: 24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
Certificate issuer: /CN=24b660a611980c68273139e32affb74b454a9d32
Certificate serial: 019355AD83AAE88D6552735075969C8EB080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
Manifest number: 0B10
Signing time: Fri 22 Nov 2024 21:00:54 +0000
Manifest this update: Fri 22 Nov 2024 21:00:54 +0000
Manifest next update: Sat 23 Nov 2024 21:00:54 +0000
Files and hashes: 1: JLZgphGYDGgnMTnjKv-3S0VKnTI.crl (hash: nzsjQo6Ox4E25qZL8gI1eJX6G8D6Kdc/DdW+6p71Fzc=)
2: fAhEGn-vd-HRQRLyyF0xYKoddB0.roa (hash: XVuVMRQgIqjOGGXKmnkdaSaLSN+fGBYCWcjGaNttZ0o=)
3: u3MqeVLP6UfUDB7EejC4gUatdVY.roa (hash: b8f3wAHrAO8RX43AUTStHdHZstaDazYZvlbhrnu+as4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:ad:83:aa:e8:8d:65:52:73:50:75:96:9c:8e:b0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b660a611980c68273139e32affb74b454a9d32
Validity
Not Before: Nov 22 21:00:54 2024 GMT
Not After : Nov 23 21:00:54 2024 GMT
Subject: CN=3e51038132effbfe10674e6e4fe5182bbe4e7ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ce:bc:f1:e3:1a:48:fb:d3:4b:e8:91:d7:e9:
2a:7a:43:8c:7a:17:3f:57:7b:b3:fe:bf:e6:32:7e:
f8:1a:bd:45:b1:c3:83:27:89:88:c0:15:36:80:ee:
44:41:a5:a4:b9:ac:69:81:5e:27:38:6e:50:74:82:
90:53:0c:b3:56:31:31:8f:fc:15:4b:a6:bc:0d:4b:
bf:0f:17:3a:eb:af:d8:1a:8d:5a:8a:99:97:15:9c:
15:7b:6f:42:2e:83:e2:71:9c:0d:99:dd:58:f8:ff:
55:66:66:6d:87:81:ff:a6:e3:95:6f:49:26:60:ff:
21:e6:5e:42:ed:a0:00:34:c4:c7:10:00:49:7c:87:
b4:b9:8c:9b:4b:fc:5d:aa:6b:01:b0:fa:c9:4f:59:
6d:a1:d1:21:aa:34:28:d9:40:52:38:6d:7e:0e:3f:
4a:6b:e7:4a:5b:42:3a:c6:5b:eb:8f:9a:21:62:53:
c0:86:58:f6:7c:9c:7f:f6:78:70:08:47:26:4b:60:
0e:72:a1:d4:62:89:79:4a:40:0c:25:27:e6:09:f9:
93:f5:23:b8:2b:db:d1:f2:05:36:40:27:a1:cc:16:
94:6c:fc:d7:4c:f2:0b:eb:3f:41:6d:42:40:05:29:
92:13:80:19:b6:ea:c9:6c:3f:2e:15:df:86:1b:ec:
ff:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:51:03:81:32:EF:FB:FE:10:67:4E:6E:4F:E5:18:2B:BE:4E:7E:D5
X509v3 Authority Key Identifier:
keyid:24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:24:d6:de:7b:e4:56:95:72:65:d8:87:e4:2e:59:9c:20:0f:
63:be:12:8b:64:a9:64:1e:1c:bc:dd:50:2f:1c:f5:78:b2:57:
08:21:04:86:a2:b0:36:c0:7e:0b:c4:35:27:80:5a:99:0c:19:
7f:9c:bf:d8:4c:a7:ff:60:33:d1:46:9c:33:90:a7:3e:fe:0a:
e3:38:d2:ef:08:f8:27:95:37:41:d1:ee:c3:39:f8:ef:df:66:
98:b7:c0:40:c4:50:81:f9:61:98:04:26:d2:e5:f5:06:19:e7:
85:df:3c:84:fc:76:4c:40:60:2a:f1:40:20:6b:5e:d9:49:04:
c8:ef:c2:8a:e8:a2:57:01:6f:8b:5b:b4:ec:24:25:81:bf:bb:
17:a7:7c:97:e8:ef:bf:a2:5b:d5:96:35:1b:26:84:1d:44:42:
32:f1:3e:b1:35:c9:91:79:2f:47:16:06:c3:82:3a:1e:a0:96:
4d:63:54:63:3d:23:92:06:55:94:cc:6d:de:1b:60:d2:eb:95:
b5:bd:0a:95:7e:4d:3f:d5:e8:d7:19:84:60:e4:72:9d:d2:d5:
d6:a8:d8:2d:99:5a:4f:7e:c8:62:c3:38:56:00:95:c2:cb:c6:
4d:53:b8:c6:c3:94:45:7f:51:cd:6e:b8:d3:ba:f1:05:28:84:
44:c3:66:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:36:57 2024 by rpki-client on console-fra.rpki-client.org