Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.mft
File: J24TUlJErw0uZAq6KbD4I2vGHiA.mft (raw, json)
Hash identifier: mX2NOzYKqp78k6eeE8VzqzPCkAtHteilsZQsdeQqi90=
Subject key identifier: 43:8E:FD:BA:93:8A:90:7E:E1:D4:78:0C:C8:9E:79:15:BD:33:CC:77
Authority key identifier: 27:6E:13:52:52:44:AF:0D:2E:64:0A:BA:29:B0:F8:23:6B:C6:1E:20
Certificate issuer: /CN=276e13525244af0d2e640aba29b0f8236bc61e20
Certificate serial: 01936C6BFF37691FF3B33F0ABBC68E146E0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J24TUlJErw0uZAq6KbD4I2vGHiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.mft
Manifest number: 0C
Signing time: Wed 27 Nov 2024 07:00:37 +0000
Manifest this update: Wed 27 Nov 2024 07:00:37 +0000
Manifest next update: Thu 28 Nov 2024 07:00:37 +0000
Files and hashes: 1: J24TUlJErw0uZAq6KbD4I2vGHiA.crl (hash: SfbbtL3Cn7KUVzyfbYP5j12uN+QyGEmCMzYHV8UyOv0=)
2: l_EZY5w4wxDMjSEhdDhvjiWXPaA.roa (hash: 0O3ZN25hdapV+usFr4R2OPkh+FsiEQ8hRp4dQBHlr2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/J24TUlJErw0uZAq6KbD4I2vGHiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6c:6b:ff:37:69:1f:f3:b3:3f:0a:bb:c6:8e:14:6e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=276e13525244af0d2e640aba29b0f8236bc61e20
Validity
Not Before: Nov 27 07:00:37 2024 GMT
Not After : Nov 28 07:00:37 2024 GMT
Subject: CN=438efdba938a907ee1d4780cc89e7915bd33cc77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4b:bb:20:65:d3:07:8b:cc:94:54:04:b7:a3:
5c:91:ff:b0:7f:fd:34:5d:5a:fa:ee:ae:88:95:03:
b8:97:44:22:de:09:06:ba:f0:c1:a2:18:77:dd:fa:
bf:38:25:aa:6f:0e:b3:cf:e0:17:e7:7d:62:19:23:
00:cb:1d:98:23:84:14:b4:26:2c:4c:d2:b0:a1:8c:
30:b2:fc:e7:d9:6b:53:1b:6c:fe:bb:92:97:64:6d:
f0:9e:25:14:31:75:ea:55:03:2a:fa:33:1f:32:e6:
88:4d:33:fe:f2:ba:61:7c:13:24:74:e3:c5:10:1a:
29:87:e5:08:13:f2:3d:e0:af:fc:3b:41:d6:50:70:
7c:83:b8:5f:78:da:8b:93:b1:79:b9:53:59:77:85:
e1:2a:43:ae:a3:06:d4:4b:ce:fc:79:a2:f7:88:77:
a7:53:cc:24:45:c3:13:34:1c:6b:92:a9:81:77:60:
9d:74:4c:60:2c:2e:37:e8:5c:73:eb:82:7b:16:08:
f8:22:5a:0f:f6:cc:6c:e4:cf:8e:aa:9d:be:3f:2d:
0f:0e:a2:b5:6a:e5:7f:fd:d7:76:d8:d0:9b:dc:5a:
c1:8f:b3:a0:95:95:d6:43:9a:73:09:e9:c0:1b:03:
b2:dd:db:3d:c4:9c:ab:9b:cd:19:82:65:c2:77:0a:
be:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8E:FD:BA:93:8A:90:7E:E1:D4:78:0C:C8:9E:79:15:BD:33:CC:77
X509v3 Authority Key Identifier:
keyid:27:6E:13:52:52:44:AF:0D:2E:64:0A:BA:29:B0:F8:23:6B:C6:1E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J24TUlJErw0uZAq6KbD4I2vGHiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c3:3e:cc:a9:56:82:cc:bb:70:65:69:5d:47:8b:01:da:63:
34:10:17:ec:89:09:28:90:95:da:0a:da:0b:7f:82:05:f2:e7:
6d:f0:e2:d7:3c:c2:b7:44:bd:fe:79:c3:3b:ff:97:83:83:e3:
24:2c:88:e1:2c:eb:f9:37:41:cb:ff:d4:12:ba:7d:37:db:b2:
ee:ad:95:95:4a:c2:a4:b5:80:40:f8:3a:38:43:b2:10:0a:45:
35:de:a0:0f:55:ff:b2:56:8b:f3:2e:de:38:2e:bf:05:ea:74:
bd:7b:49:22:6b:f6:63:84:b1:af:be:76:d8:7f:7b:dd:d4:21:
3e:c4:f4:f3:47:7c:95:14:1e:2d:2d:f0:7c:d6:b7:db:a6:5f:
10:ce:ba:ea:9c:61:b0:7b:78:e1:80:99:ea:82:54:22:a4:d9:
1f:03:2f:1f:7f:05:c0:66:cd:24:47:32:0d:d8:de:dd:78:09:
d9:be:dd:c1:d3:af:2a:dc:80:e1:2c:5a:db:f2:9b:5f:13:1e:
7f:2d:f4:9d:a7:7c:4d:5a:8a:27:3e:14:04:e5:9e:f0:67:60:
3b:34:bd:d1:f4:71:53:87:dc:52:e3:e2:c4:fc:95:58:22:61:
e1:b2:7c:eb:f8:95:b7:16:38:03:0d:bc:1b:ea:40:c9:9e:51:
6f:12:ae:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 09:32:53 2024 by rpki-client on console-ams.rpki-client.org