Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft
File: JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft (raw, json)
Hash identifier: l5ujR0UZe3y31gHCfkYOOWruRPdMWsX6H9m/C4ckVqc=
Subject key identifier: 62:CD:2C:8D:F3:20:54:E3:9C:16:31:EC:A9:31:C4:3B:9D:8A:E8:4D
Authority key identifier: 25:F3:FB:2B:1C:B5:0A:3F:CC:64:26:08:63:3F:51:23:75:22:6D:1F
Certificate issuer: /CN=25f3fb2b1cb50a3fcc642608633f512375226d1f
Certificate serial: 0193617A95B60A6425050DFB4823CA806377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft
Manifest number: 0387
Signing time: Mon 25 Nov 2024 04:00:43 +0000
Manifest this update: Mon 25 Nov 2024 04:00:43 +0000
Manifest next update: Tue 26 Nov 2024 04:00:43 +0000
Files and hashes: 1: JfP7Kxy1Cj_MZCYIYz9RI3UibR8.crl (hash: zxQGikVmURvf021XrnKyY7Ag5YAR7D/Cmdoc42rAejc=)
2: sxOFH4MOBGXtcvWAh6J2OV0WdEw.roa (hash: aKN6bay7mqmSDZAiQTj84pTwFHi4EARHsCazqSfnyHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:61:7a:95:b6:0a:64:25:05:0d:fb:48:23:ca:80:63:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25f3fb2b1cb50a3fcc642608633f512375226d1f
Validity
Not Before: Nov 25 04:00:43 2024 GMT
Not After : Nov 26 04:00:43 2024 GMT
Subject: CN=62cd2c8df32054e39c1631eca931c43b9d8ae84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:20:35:3d:3c:dc:a1:7e:f9:a3:b5:af:f1:02:
24:bc:1e:f6:ff:1b:c6:d5:bb:40:a3:bc:c6:7a:01:
25:99:18:a4:7d:c9:82:d3:b3:74:ba:bc:cc:ac:31:
ac:0b:1e:3c:69:fc:f7:c7:f9:80:26:67:51:b3:56:
5f:50:2a:d1:29:ff:05:9a:9d:f7:6f:e2:cc:12:0a:
c4:b0:b1:44:2e:53:9b:15:03:f4:73:85:33:23:6a:
ec:6f:3a:ec:2f:1d:57:d0:7c:b7:f6:52:b0:a7:75:
df:88:fc:84:d2:3e:bb:aa:1a:fd:63:de:44:cd:37:
b5:c0:40:7c:d3:bc:7a:39:49:43:8f:75:ac:3b:03:
e2:56:c1:c9:f0:40:1f:8a:cd:78:f7:cf:1c:e7:2e:
12:39:23:ce:71:55:ce:bd:e0:9e:5d:67:2f:1e:ca:
a2:45:5c:7e:bc:ca:ce:bb:41:bc:6f:93:ea:e5:66:
c2:c4:71:c5:21:7d:1e:e1:77:95:18:ad:c0:74:0e:
33:de:a8:77:98:e2:da:9f:d9:86:c1:ad:c4:8d:1a:
26:78:b0:7c:c6:63:36:9b:70:c0:1b:ee:6d:0b:03:
ad:4e:c8:ed:6b:f3:5a:5d:f1:08:6f:f2:7c:1c:55:
7b:69:9f:22:19:70:f9:f6:a3:fb:2c:9b:43:76:5d:
96:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CD:2C:8D:F3:20:54:E3:9C:16:31:EC:A9:31:C4:3B:9D:8A:E8:4D
X509v3 Authority Key Identifier:
keyid:25:F3:FB:2B:1C:B5:0A:3F:CC:64:26:08:63:3F:51:23:75:22:6D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:47:e8:95:3d:ee:8f:83:09:4a:dc:56:03:3b:9d:29:ae:73:
36:35:92:e6:ab:41:32:10:7d:dd:75:2d:9b:9e:2b:70:ed:e1:
96:0a:9b:53:51:49:ec:e8:44:1f:9e:2c:99:13:ff:d1:48:6d:
e9:36:98:72:80:7e:58:3b:67:20:de:e9:e3:5d:74:49:9b:9b:
19:fa:85:a9:b6:8e:39:74:ac:fa:e5:25:ef:6e:c8:9d:31:2c:
e3:f2:9c:3a:f8:4a:9f:cd:bf:6c:30:e0:e1:3a:18:66:d5:a9:
e2:a3:98:e8:63:ae:ba:a7:5e:91:09:25:8f:50:b9:1b:00:5f:
fe:0d:27:2e:65:61:d9:0a:83:b8:50:34:26:77:ab:8d:86:c4:
9d:fd:85:6d:e1:e7:b8:8c:e2:f2:c8:15:22:60:13:1c:fb:b2:
de:3d:1c:06:40:41:69:7f:61:f7:c5:55:e8:11:43:79:0a:ee:
2d:6c:ca:80:04:19:c0:a5:f1:0b:ef:2d:46:45:02:d5:ab:18:
90:e0:c8:0e:62:06:42:44:54:7b:b0:f4:95:5e:42:a6:ab:92:
8e:81:fb:c1:8a:6f:e2:1d:b1:d2:bf:9d:df:11:71:c6:76:28:
7f:62:c4:16:2c:b1:1c:b7:32:4c:1d:8b:1d:c0:d0:f8:0d:d9:
43:ca:03:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:33:07 2024 by rpki-client on console-fra.rpki-client.org