Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
File: jsDMCMmOBfTh-wRACNhSoqTaAPA.mft (raw, json)
Hash identifier: xXrgsQz3ksIVPstomKJ3jurot3NjosAa+tzzT9IKJAo=
Subject key identifier: 0A:29:99:7C:60:EC:8D:01:C1:B0:9F:DB:A2:A1:FD:B7:EA:00:A0:2E
Authority key identifier: 8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
Certificate issuer: /CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Certificate serial: 0193568A7C5756146AD5FFE9AA5164108BF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
Manifest number: 066C
Signing time: Sat 23 Nov 2024 01:02:16 +0000
Manifest this update: Sat 23 Nov 2024 01:02:16 +0000
Manifest next update: Sun 24 Nov 2024 01:02:16 +0000
Files and hashes: 1: QNyewvS-F17NCLjEq6z3mq3ZCaI.roa (hash: gx/TBHydwcRghd8W1JBz2YBY39vTn2o7F9RXvUgngIQ=)
2: jsDMCMmOBfTh-wRACNhSoqTaAPA.crl (hash: kaiJvfWuACUjBeR+0jkbWr8GA7cHMsN/pPM/N6eo63o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:7c:57:56:14:6a:d5:ff:e9:aa:51:64:10:8b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Validity
Not Before: Nov 23 01:02:16 2024 GMT
Not After : Nov 24 01:02:16 2024 GMT
Subject: CN=0a29997c60ec8d01c1b09fdba2a1fdb7ea00a02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d8:81:1f:77:28:93:dc:b1:cc:03:e9:fc:eb:
ed:62:e9:f8:82:0f:cc:61:cf:de:23:49:3a:77:59:
1e:1f:1c:70:84:7c:87:66:d1:17:f6:2d:16:4f:b4:
33:85:77:bb:af:31:5a:e9:f6:17:7d:f5:21:bf:1e:
2c:bf:76:77:ba:0d:12:a8:2b:c1:e2:7f:05:ab:67:
9c:ea:fe:11:63:f8:5e:64:02:c4:b1:2c:b4:b0:e7:
bf:10:81:3c:bd:b8:5d:48:fc:31:00:8a:ee:d8:e4:
ae:e2:2a:d0:db:7a:f1:18:51:dc:8a:c3:0f:fb:ad:
c9:4a:e3:4b:08:43:1d:93:8d:c5:ba:1d:fc:1b:ea:
1d:cd:b2:bd:94:fb:1b:79:0e:71:a4:f1:b5:5a:2f:
3d:ff:e9:2d:43:08:5c:0e:22:29:4b:1a:81:da:41:
c7:e0:2e:7a:22:48:fe:09:c1:ea:ee:78:c7:25:ef:
41:a3:45:0f:a6:01:14:b0:12:03:20:e1:b7:73:fc:
9f:76:f6:c1:49:3a:e8:64:e2:6c:c8:80:2f:a6:d6:
af:96:72:30:25:37:f2:ce:f4:58:b5:61:0f:a5:34:
7a:ac:ca:a2:52:95:ce:4b:10:07:46:dd:68:bb:34:
38:3b:41:f9:b6:7c:8f:59:d2:c4:82:11:f4:63:9e:
c1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:29:99:7C:60:EC:8D:01:C1:B0:9F:DB:A2:A1:FD:B7:EA:00:A0:2E
X509v3 Authority Key Identifier:
keyid:8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:59:31:b8:e4:d3:57:c1:e4:45:3b:d1:37:a8:fc:d4:e6:6f:
e9:4f:d5:f2:56:5f:ad:4c:9f:50:d8:b3:71:fe:29:7f:f7:40:
4e:c7:f6:f6:8a:8a:97:ed:47:99:0c:69:58:ad:60:b0:c2:be:
88:49:87:c4:93:43:91:3b:ab:2a:bd:e3:2e:c8:71:92:6d:58:
a4:c5:d0:ee:cd:58:12:4a:85:18:1c:d0:26:8f:d8:84:7d:ce:
e9:c2:0f:82:c2:68:d7:84:86:59:9a:80:4e:30:4e:fb:57:64:
2d:4a:87:96:01:ba:77:4d:f1:fb:bb:62:5e:4f:b8:85:b2:7b:
11:12:c5:5d:77:5a:2f:be:28:1c:4c:fd:58:ac:62:b2:94:73:
b1:0c:b9:e8:6a:58:e2:d1:04:ad:98:23:e9:a6:27:42:e2:97:
38:e2:80:e9:23:08:f3:3b:c9:58:c7:71:2c:d7:4d:57:fd:cd:
bf:1b:56:9e:bc:9f:cf:46:ad:12:87:54:79:6c:06:16:59:32:
da:3e:3e:20:8d:52:eb:5e:d5:b4:2c:ea:6d:42:1f:64:73:ab:
6c:84:5b:d3:9d:1d:be:63:36:c7:05:9d:9c:6b:62:70:a9:56:
b1:21:f6:4a:de:4d:a0:e5:bf:15:c4:1c:89:71:b6:53:bc:d8:
96:fd:17:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:45:47 2024 by rpki-client on console-ams.rpki-client.org