Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
File: jWYDLgiJQRjXmYxcBgykbrOHEzg.mft (raw, json)
Hash identifier: j3DcIO8oHYEIUPdF3hxtAu7GhBFdHGhYAMX6mP9wkDA=
Subject key identifier: 78:38:D5:C2:24:A5:85:A4:3A:1A:44:49:27:AD:19:D0:04:89:11:BE
Authority key identifier: 8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
Certificate issuer: /CN=8d66032e08894118d7998c5c060ca46eb3871338
Certificate serial: 0192346D95C1A7BBA558B552A0F704A7D4F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
Manifest number: 12DD
Signing time: Fri 27 Sep 2024 17:00:49 +0000
Manifest this update: Fri 27 Sep 2024 17:00:49 +0000
Manifest next update: Sat 28 Sep 2024 17:00:49 +0000
Files and hashes: 1: _-0M0FWoGC3JdZf56S3jra7cLtE.roa (hash: vdoF2MYwDsIhxiar1LJ0MLv/FzzSRUZ72GzNlBhZ8Aw=)
2: jWYDLgiJQRjXmYxcBgykbrOHEzg.crl (hash: UWVSBdogBEeQUCTK+Gpj0DkU2HJyta5VfEiXvjhbL6A=)
3: tyIUU96WkQEIp4T-oqSr-Lz10LA.roa (hash: nEPW/3NDVCXo+yl4QkJ03iNc/Lr7c6o839ZVghHojVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:34:6d:95:c1:a7:bb:a5:58:b5:52:a0:f7:04:a7:d4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d66032e08894118d7998c5c060ca46eb3871338
Validity
Not Before: Sep 27 17:00:49 2024 GMT
Not After : Sep 28 17:00:49 2024 GMT
Subject: CN=7838d5c224a585a43a1a444927ad19d0048911be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f6:b0:af:1c:5b:8f:b4:28:82:ae:82:b1:1c:
36:b7:55:4b:41:de:38:82:17:fb:d5:1e:dd:c5:c1:
38:85:51:27:3d:0d:75:37:b8:ae:81:51:65:f7:a1:
9b:10:be:84:a2:f6:f4:64:66:77:62:f9:82:96:c9:
c3:24:00:93:66:77:d3:2f:23:14:27:a1:eb:d2:ca:
fa:a2:5d:de:e6:b0:24:61:97:21:2b:81:d8:b7:d3:
2a:1e:cf:7e:1c:33:3a:77:96:3e:a7:25:b0:95:06:
ee:4d:9b:b5:56:9b:10:a1:4e:d6:86:d7:c7:83:83:
9a:f5:8b:0f:dc:b9:26:6b:ef:1a:5c:8a:12:09:96:
ac:8a:9e:82:79:b1:29:01:00:2e:2d:f5:ec:21:d6:
8a:8a:7f:2b:f9:dc:64:b3:f3:93:0b:d1:fa:8f:46:
7e:cb:29:f6:84:a2:05:43:03:d7:bf:d9:c9:26:a7:
40:3f:a1:96:dd:64:38:ce:1b:8d:3c:68:07:17:90:
80:56:70:43:cc:4f:aa:1d:a2:a3:ec:70:0f:38:70:
6f:72:43:3d:55:e2:28:4c:78:ae:7b:bb:10:7e:fb:
00:8b:3b:be:77:5c:61:b6:43:43:8f:0c:07:0a:db:
d0:21:f6:2d:c6:6a:9d:0e:40:68:ed:67:ac:0f:30:
f1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:38:D5:C2:24:A5:85:A4:3A:1A:44:49:27:AD:19:D0:04:89:11:BE
X509v3 Authority Key Identifier:
keyid:8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:fc:98:e3:a9:69:be:26:58:04:63:63:46:4a:95:64:b5:65:
9a:cc:50:e9:12:50:2a:67:50:51:72:af:fc:35:03:20:a3:07:
74:72:19:28:b2:1d:52:fd:49:af:eb:c9:9a:4b:df:88:4f:61:
c4:76:98:ca:c5:05:20:a9:36:18:0d:07:2e:0a:16:46:23:91:
60:6f:3f:23:14:fd:2b:09:58:ff:c3:23:b6:71:5a:61:02:52:
40:79:8a:ff:e9:7b:7b:da:f4:ef:f8:c4:8c:48:e2:77:13:2e:
3f:d7:00:ec:03:3d:25:1f:2e:eb:65:5e:42:2a:98:3f:19:bf:
b5:49:a6:ca:5e:c8:1c:0b:bd:c7:1d:6f:d1:2e:64:bb:bd:c2:
95:2a:66:26:2b:b5:74:0f:d9:79:c6:aa:78:e2:d9:42:43:4b:
fd:50:58:b7:fc:d0:31:42:5a:a5:39:cd:e3:c2:b0:1c:9f:89:
6e:1c:14:59:8d:62:48:39:87:ea:4d:e5:65:98:a8:85:91:26:
65:1d:af:da:a6:d2:21:12:ed:f0:50:3d:55:f0:bf:a7:33:3e:
58:a1:8b:a3:98:9c:da:34:96:a9:bf:3b:75:3c:1d:37:76:85:
92:76:34:49:66:9a:51:fa:cc:f0:41:42:87:d0:27:c0:cb:7f:
23:ca:b7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:17:39 2024 by rpki-client on console-fra.rpki-client.org