Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
File: jxKyaetwOrwSLUeFE7CBcdTJba0.mft (raw, json)
Hash identifier: JKj1/hmdbwno+WqmcNbIOl/f19TodiRBS5qmMJX69CM=
Subject key identifier: 84:A2:51:90:5C:F6:9B:0A:5C:23:36:70:3E:29:3B:8D:8B:AD:A3:CD
Authority key identifier: 8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
Certificate issuer: /CN=8f12b269eb703abc122d478513b08171d4c96dad
Certificate serial: 018F87B65E356DD998518C430C628A05C89B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
Manifest number: 1176
Signing time: Fri 17 May 2024 18:00:26 +0000
Manifest this update: Fri 17 May 2024 18:00:26 +0000
Manifest next update: Sat 18 May 2024 18:00:26 +0000
Files and hashes: 1: jxKyaetwOrwSLUeFE7CBcdTJba0.crl (hash: z5E4qPrssKlHrLqbTuPxjThkdUTIKZuaK85sqdTrddM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:b6:5e:35:6d:d9:98:51:8c:43:0c:62:8a:05:c8:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12b269eb703abc122d478513b08171d4c96dad
Validity
Not Before: May 17 18:00:26 2024 GMT
Not After : May 18 18:00:26 2024 GMT
Subject: CN=84a251905cf69b0a5c2336703e293b8d8bada3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:36:44:1e:59:e1:6d:c6:b5:25:fd:30:3a:be:
e6:40:46:02:60:8a:55:96:45:2c:fb:3f:60:0d:c3:
bb:48:e6:1f:6e:3f:db:99:0d:35:9f:a0:ad:3c:fb:
d0:08:d8:d9:4b:4e:b7:85:31:21:2f:f8:8a:2a:71:
7a:1c:bd:79:eb:cf:44:e1:0b:b7:13:0f:40:66:05:
74:3d:e8:a6:28:0a:bd:fc:0e:5e:84:67:4b:3a:dc:
b3:cf:ea:77:a0:a1:6c:b0:9a:08:d6:fe:22:e7:fa:
2a:d2:a0:0e:f9:de:5d:00:af:ed:91:12:91:4b:b7:
c0:5c:91:76:10:65:24:59:40:61:3c:8d:0a:e2:52:
c7:5e:4b:2b:7b:24:37:1e:e0:e7:e4:71:5f:d7:09:
86:f6:54:d6:fe:c6:7c:7d:d9:45:5c:3c:1f:49:6f:
a5:d2:6a:47:f7:a2:ab:c5:81:6a:b4:e2:ae:6e:b8:
9a:17:ce:f1:32:fc:09:23:62:62:12:93:d3:e2:02:
f3:39:0d:ca:fc:35:f3:cb:ff:c1:31:e2:f2:56:66:
ab:06:f3:af:80:af:ba:60:a6:52:4c:f5:eb:68:e7:
f9:5f:b3:26:30:ed:2a:d1:7b:e6:3a:bb:5c:b1:fb:
87:bd:3b:81:d0:cb:a0:dd:34:b5:ff:31:d9:e1:d6:
5c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A2:51:90:5C:F6:9B:0A:5C:23:36:70:3E:29:3B:8D:8B:AD:A3:CD
X509v3 Authority Key Identifier:
keyid:8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:39:d0:4f:b0:a7:a7:6f:98:cd:17:91:87:5a:de:26:94:0d:
bd:4b:cf:10:9a:c1:fc:67:77:d8:c8:0a:ab:e4:68:34:1e:f2:
04:56:b7:91:82:2e:16:95:6a:b7:42:1d:0e:1c:d4:cf:9c:6a:
43:40:1b:26:b5:77:b8:84:ca:ad:db:74:84:7c:5c:cf:89:1d:
ab:dd:f7:7b:f1:c6:20:46:9f:5d:cd:26:cf:95:e0:94:de:9c:
98:18:4b:97:54:5a:57:78:92:ee:70:57:a8:87:8f:32:99:8e:
9e:a9:31:25:91:c5:ee:b8:cf:2f:d8:01:44:ed:a2:83:60:c4:
08:17:37:06:8a:6a:45:31:20:25:d3:c7:d1:4f:eb:17:df:43:
5c:4f:e6:cf:e3:1d:1a:bb:c0:49:be:66:42:61:35:81:fd:86:
8d:96:f6:16:77:08:b3:6c:07:07:7f:3a:b4:46:02:6f:fb:2b:
0c:5c:a8:67:d6:cc:34:72:5e:2c:2f:bf:9b:84:b8:c3:2d:3d:
b2:f4:ab:80:e7:f0:6a:0e:ba:85:e7:cf:2f:e1:0f:c2:4f:ca:
ca:3d:76:38:d1:b5:7b:1f:74:aa:61:db:c3:14:73:df:3f:4a:
d6:6f:74:1d:75:e4:62:24:35:9a:19:8e:ed:44:ac:c7:7a:29:
9c:74:1c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:58 2024 by rpki-client on console-ams.rpki-client.org