Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
File: ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft (raw, json)
Hash identifier: RDMGZmBfjCsTl0FW/PO4jxVHMyL5dz0SY36Cku1g208=
Subject key identifier: 16:BE:BE:DD:78:C3:E6:4C:8A:B2:A0:E4:70:EA:8F:2F:4D:E1:1C:6A
Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
Certificate issuer: /CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Certificate serial: 019353BF178AE5516551212D3346360E9A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
Manifest number: 136F
Signing time: Fri 22 Nov 2024 12:00:52 +0000
Manifest this update: Fri 22 Nov 2024 12:00:52 +0000
Manifest next update: Sat 23 Nov 2024 12:00:52 +0000
Files and hashes: 1: 3Ov8FcMLdILK_P8_00CraiGJA90.roa (hash: Iv2o1DFtpNp2CwNa2FQQg+J211i/AB1jJgoJz/m5R5Q=)
2: ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl (hash: //CoScZoRkj+kNiiDedAgJcMXdsNpw+ZzCZz2WcuOdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:bf:17:8a:e5:51:65:51:21:2d:33:46:36:0e:9a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Validity
Not Before: Nov 22 12:00:52 2024 GMT
Not After : Nov 23 12:00:52 2024 GMT
Subject: CN=16bebedd78c3e64c8ab2a0e470ea8f2f4de11c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5f:7c:b0:e7:d3:fe:cb:7f:df:20:bb:11:b5:
7e:41:f3:9f:65:bb:05:7b:75:ca:57:0f:35:9b:9a:
94:88:ce:cf:fe:97:b9:56:b6:e0:e7:83:8d:32:e0:
6f:30:ce:67:e4:4a:9d:a0:3d:bf:8a:14:47:6c:a4:
e5:8d:d4:5d:8c:4d:01:76:5c:07:19:35:f2:80:0f:
9c:9f:59:f9:80:dc:f3:7b:81:16:91:12:01:87:b3:
1b:23:f8:48:1b:6a:95:db:08:cd:b9:19:5b:8d:a2:
e1:49:7a:98:0f:95:d4:bc:b2:f8:5b:86:4c:09:c0:
f5:65:63:01:0a:b6:82:9b:e6:73:50:e3:59:c7:18:
e3:92:a7:54:0d:5e:08:c5:9c:82:2d:8e:95:9f:62:
38:04:db:28:32:e4:4d:2b:22:a6:3c:45:52:1b:6e:
ae:e9:81:ca:85:a1:d4:f6:4b:e5:86:8b:70:aa:64:
b2:ee:1d:d9:93:29:a1:81:b3:f6:d6:34:4f:b1:37:
70:59:92:ee:a5:ac:a7:66:93:17:51:8d:ca:b2:05:
f8:a9:dd:4a:d8:39:0b:47:2e:a4:10:42:f7:92:79:
22:60:8e:1f:e2:f6:7a:6f:89:1c:f0:20:33:91:cd:
a4:82:b0:85:11:35:ec:f1:80:17:97:fd:21:e2:a7:
7b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BE:BE:DD:78:C3:E6:4C:8A:B2:A0:E4:70:EA:8F:2F:4D:E1:1C:6A
X509v3 Authority Key Identifier:
keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:0a:04:45:1e:94:6f:ae:f3:43:3c:03:9e:f8:cc:84:39:e8:
62:1a:e6:76:45:9a:3e:51:d6:ef:b2:68:7d:4a:9c:d5:b1:aa:
0b:0c:72:e3:ae:c4:22:b4:92:b6:e9:17:43:fd:a0:38:aa:50:
79:00:35:9f:4e:d0:7f:26:65:9b:48:3d:94:19:89:6c:a9:1f:
6e:ea:3e:35:89:d4:4c:4f:dc:6b:8b:3f:5a:70:11:5b:a8:4f:
67:48:c2:09:1f:42:8f:72:23:a4:45:51:d1:d6:67:2c:13:20:
8e:51:1d:b6:5e:c7:76:0b:f0:91:14:d1:4d:b5:29:9d:01:21:
4b:c8:6d:4f:96:e9:31:0c:c8:45:2b:3e:92:2f:c8:26:81:90:
66:43:ed:71:48:f4:16:0f:2d:c8:eb:c2:71:7a:8d:a7:0f:83:
d0:f2:ef:49:66:d6:e7:b7:d0:21:46:a2:1a:4d:a9:44:e4:d4:
de:b6:7b:e0:e1:c9:fd:6f:34:af:88:aa:de:48:89:11:4a:5f:
62:9a:7e:0f:cb:fb:a8:34:16:95:4e:b8:a0:dd:25:0b:0c:40:
6f:35:f8:ea:cc:a2:84:62:70:d2:c6:1f:2e:2a:b9:d7:15:fe:
aa:c5:1d:ac:82:73:7d:a3:6d:e2:55:7d:2a:0a:4c:70:f1:be:
8b:39:58:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:24:37 2024 by rpki-client on console-fra.rpki-client.org