Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
File: JMxrnDf6oNo7QSAHwLELLFvyz04.mft (raw, json)
Hash identifier: vkRNXE8EYqsnH9wSCq2NtUDXMjOfzI9tMoInUO792fY=
Subject key identifier: 67:0E:D5:C8:33:1E:51:BF:A3:8D:C2:62:4D:D9:B2:6B:02:30:38:D3
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 019352E2B7D6DD97CD566A532D5546569FB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
Manifest number: 123A
Signing time: Fri 22 Nov 2024 08:00:09 +0000
Manifest this update: Fri 22 Nov 2024 08:00:09 +0000
Manifest next update: Sat 23 Nov 2024 08:00:09 +0000
Files and hashes: 1: 3LR0FE0Ix8edE_JFQ7BjwlnJshc.roa (hash: hXfYXxAaqY3XL+D4qw5Z+nqV1L/lAIY2DGY2NdL0pbw=)
2: JMxrnDf6oNo7QSAHwLELLFvyz04.crl (hash: 7lEaHmHoO8RkS9rNXEFgm95OnldfqSsjJ3uQcwvYv+o=)
3: L3mBTJ-piXdE89uy66mEx3QXFz0.roa (hash: JP9mvHIt/z4S+FHLNmEIK2so2616YMMx/UHOToEy0fw=)
4: OkABPny7_SXsY6DDa4NCobZ8c6A.roa (hash: BO9NhVwz69BaaeNN6hpOeh867H3gug3XdOUDM9RiKfc=)
5: YhyPFg3DDPFMwKSx0td1Hj01Bgw.roa (hash: JtBk8ojLbrsjZtRlGKh3sN+RjZTT2IyV4QS0Zri/CAk=)
6: kD3iBu9EXHSRWPzBrVPQmGeM3_8.roa (hash: Lx2mEprcccx64ZlCOVKeg7Me4Rl87KsXtr4ObOxqt7g=)
7: nixExACdBLCd220KvniRCymvm-E.roa (hash: BQGvtG/tYieBk5aA9d8MX/EP0n7wVkNtLzSLD3pl8LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:e2:b7:d6:dd:97:cd:56:6a:53:2d:55:46:56:9f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Nov 22 08:00:09 2024 GMT
Not After : Nov 23 08:00:09 2024 GMT
Subject: CN=670ed5c8331e51bfa38dc2624dd9b26b023038d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:ed:42:9f:62:40:44:dc:22:d5:1c:91:41:
ae:2e:2d:b0:be:2d:a5:1c:e6:fa:73:1e:69:b9:1c:
5d:14:ed:dd:44:d6:03:c7:77:74:77:b2:40:b8:c7:
08:3e:97:1d:c3:4f:f9:dc:4b:7b:90:fa:ba:3c:9c:
09:65:98:0f:8c:a0:be:bb:1e:c3:19:a3:0c:6b:49:
52:83:a4:52:03:91:5a:52:c2:58:50:3c:64:81:e5:
1b:2b:fa:83:d5:00:74:dc:15:ce:42:0a:49:bb:c3:
5f:33:ec:19:b2:c0:89:7f:57:f9:6a:fa:3a:49:5b:
48:26:3f:09:3c:16:92:23:69:99:06:ba:a7:49:fb:
34:66:c4:03:5d:1b:e5:79:83:8a:0c:d9:28:7f:66:
9a:64:a8:76:77:24:34:03:50:c8:54:8a:e3:bb:f8:
85:24:31:be:5a:d9:f8:9d:bc:00:a0:e0:d6:72:8e:
a8:fc:0b:4a:bc:45:f6:d7:e2:c4:5e:17:1a:25:11:
48:7d:8e:fc:23:f5:a1:db:84:67:76:a0:c5:20:67:
09:87:54:f0:3b:ab:66:d3:63:d1:a8:29:57:8d:d4:
86:e1:b3:e4:44:b3:b3:28:9c:c9:f1:81:51:78:97:
2e:22:ab:04:3f:4a:f6:ab:b4:0b:57:e8:8f:88:25:
dc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0E:D5:C8:33:1E:51:BF:A3:8D:C2:62:4D:D9:B2:6B:02:30:38:D3
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:58:3a:3e:f2:ac:1a:8f:f1:89:12:98:8d:2d:5d:b3:96:d4:
dc:23:46:45:7e:8c:d1:4f:ea:2f:d5:a8:23:94:3f:62:84:83:
bf:26:37:40:61:c6:99:22:ee:58:fc:8d:5b:e2:83:cf:8e:eb:
28:d4:b5:d0:26:e0:d7:35:e6:f3:3b:7a:db:a9:7e:d7:27:77:
44:7f:5d:09:eb:28:6f:bd:ff:6e:98:40:57:8c:1d:d3:01:14:
7b:4b:cf:9d:83:20:84:c0:04:c0:cb:16:91:c9:03:b1:f1:db:
10:37:2a:28:0f:33:18:cc:67:c8:e0:4e:d1:f9:04:76:3a:7d:
16:bf:36:39:6f:69:0a:65:29:52:85:16:3f:e5:be:43:2e:56:
4b:fe:9b:82:ff:45:56:16:34:93:b5:70:7a:92:4c:4b:26:ae:
0a:f8:ff:6a:74:38:27:15:08:10:8d:05:d9:cf:9f:88:74:47:
77:82:3b:e7:1d:02:13:ab:60:e5:80:6e:dd:90:44:6c:da:42:
b4:61:2e:f7:bc:f8:65:86:0b:ed:ab:45:d9:51:0f:06:18:6f:
46:16:14:5a:d6:38:99:89:cd:90:c9:cb:88:a9:07:0a:10:0a:
5e:c2:41:59:06:db:91:23:42:65:bb:5a:8b:16:b5:5c:0f:5e:
1f:e5:c3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:11:27 2024 by rpki-client on console-ams.rpki-client.org