Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
File: JtmhbC-n1MNwtTJSFL5EILYR8fk.mft (raw, json)
Hash identifier: GC+i3YQrcgB4S0HHGhpk6WCx6bcBkOJW0L6vnRNrbo4=
Subject key identifier: 36:41:CB:E3:3C:71:6D:8D:22:F1:BB:AF:73:2A:A8:5F:CE:1F:A9:C2
Authority key identifier: 26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
Certificate issuer: /CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Certificate serial: 01936AEB42A817FE6527B84A88535C0ABF3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
Manifest number: 137D
Signing time: Wed 27 Nov 2024 00:00:23 +0000
Manifest this update: Wed 27 Nov 2024 00:00:23 +0000
Manifest next update: Thu 28 Nov 2024 00:00:23 +0000
Files and hashes: 1: JtmhbC-n1MNwtTJSFL5EILYR8fk.crl (hash: KXMlSmlaY803Kv+iKqnDX7Jej6a4W5/K7a+qSkJsXkM=)
2: YSI0imqa0lGxBBUhmNTk9jchfWA.roa (hash: AAtMMDDyJTXC5xPbb02w3K8QWsModomVNL49sPiMW5w=)
3: iCilyoJRfCcc0PPJTINmdZ6v1Z4.roa (hash: t0Uk3i6pKN2aSgsxkVFKXbtlgr5ZQRK28z06EGUBOF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:eb:42:a8:17:fe:65:27:b8:4a:88:53:5c:0a:bf:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Validity
Not Before: Nov 27 00:00:23 2024 GMT
Not After : Nov 28 00:00:23 2024 GMT
Subject: CN=3641cbe33c716d8d22f1bbaf732aa85fce1fa9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5e:e0:9e:6d:35:f6:c0:ba:28:66:ed:ce:f9:
7c:67:bd:2b:fa:44:2f:4b:07:f7:5e:21:b0:32:f8:
b3:7d:ef:0d:7e:ac:6a:41:49:c8:90:2c:86:5b:67:
1a:4f:b4:78:47:1a:24:ba:3c:53:00:93:89:29:14:
69:7f:c0:08:3f:35:47:18:58:7e:5e:4a:0c:a9:d6:
a5:05:37:86:b1:1a:db:f8:38:7f:19:5f:84:23:cb:
2c:64:d7:2c:d6:0f:3a:6f:2f:0f:16:a3:a1:67:3f:
01:52:85:5b:91:2e:53:21:bc:ff:8e:4c:49:bc:43:
a7:34:90:95:40:6b:06:c9:b9:74:d5:c0:ec:2c:1d:
fd:92:38:6d:12:a8:11:e7:b6:56:6c:38:4c:77:6f:
70:5f:c2:49:86:b3:86:70:b1:a2:f0:00:12:cb:18:
8c:20:a9:b3:e0:15:c7:dc:51:9f:11:52:da:3c:74:
e1:ad:c2:d1:58:d8:90:d9:2a:72:28:fa:d7:ee:4d:
e6:0e:94:8e:65:c8:fb:ad:44:26:0e:af:54:42:97:
ed:0e:fd:e8:32:c0:55:f4:51:37:18:53:65:26:22:
fc:5e:97:97:04:34:ba:b2:8f:7d:79:7a:99:42:9c:
07:21:91:61:a7:f5:6c:a3:1b:5d:2c:ae:df:3c:17:
11:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:41:CB:E3:3C:71:6D:8D:22:F1:BB:AF:73:2A:A8:5F:CE:1F:A9:C2
X509v3 Authority Key Identifier:
keyid:26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a7:83:12:8a:07:39:db:cd:d5:1a:c7:8e:64:d2:c5:9d:fc:
ec:3d:65:a6:5e:c6:d5:6d:1e:6c:cb:1b:f0:f0:12:77:06:f8:
31:a9:02:86:b9:d2:00:4e:e8:ca:e3:fd:56:a0:af:47:00:8e:
9e:9f:6a:8e:62:9e:d9:02:0f:7b:2c:43:d7:28:d1:2d:9d:0f:
3a:5b:da:53:5e:9b:ee:8c:83:9c:c0:b1:4c:a8:1b:d5:89:af:
be:ee:ea:cc:86:fd:7a:3d:e3:e1:a2:92:13:3e:4f:71:32:ba:
3e:e4:37:98:39:2b:ad:66:70:9d:d2:c9:d8:df:4f:0e:47:86:
34:61:f9:0e:4a:12:02:9c:3a:16:4e:a9:77:bf:13:b3:db:eb:
a3:c7:02:7f:2b:bb:f5:9e:20:2e:21:3c:41:3e:75:0a:3d:a6:
b7:8a:bd:aa:78:f3:e5:02:dc:8b:8f:0d:69:f4:bc:a9:c6:ab:
54:5e:fb:76:06:55:8a:5e:d8:96:1c:a7:4e:05:99:b6:b6:9f:
74:bc:3b:87:c2:b4:fa:c8:61:5c:9d:36:c5:73:22:a9:9d:22:
a1:bc:9c:5d:a9:aa:3f:7d:b9:fa:14:10:5b:32:29:22:ba:c5:
39:1d:2b:c2:e4:25:ff:db:4e:6e:ec:87:c7:30:b7:7a:aa:b7:
68:de:04:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:52:46 2024 by rpki-client on console-fra.rpki-client.org