Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
File: JnK5-1RrNl4yMjDc6puoyfvt_rg.mft (raw, json)
Hash identifier: RL8ApQCC/F3cJ/LuIfDkQgJZQS6HyOosfMU2WqUyxOc=
Subject key identifier: 7D:3A:F8:91:16:8C:9F:0F:FB:25:78:77:00:7E:1C:B4:32:A7:5B:CD
Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
Certificate issuer: /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Certificate serial: 01936255FFDF2C81BDE2B0DE9CDDBACF48C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
Manifest number: 07E9
Signing time: Mon 25 Nov 2024 08:00:23 +0000
Manifest this update: Mon 25 Nov 2024 08:00:23 +0000
Manifest next update: Tue 26 Nov 2024 08:00:23 +0000
Files and hashes: 1: JnK5-1RrNl4yMjDc6puoyfvt_rg.crl (hash: S0seczVUnpcIVFiV05KcdJ9AFLVkQy0gd2kEJ+eQM9k=)
2: QJAybcEDagp1cDbutRur8ImGGRY.roa (hash: C8rgOnUv3lG1C9Bb6TDJVxoAefsuw/zwG3q66FbcOTo=)
3: pSw0ld3YyERYYHYQY7UzIjYxmQI.roa (hash: Onq5TkYtpFOjWibAEGhRgkuMrNOsGBHvCEh9tDb2Q18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:55:ff:df:2c:81:bd:e2:b0:de:9c:dd:ba:cf:48:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Validity
Not Before: Nov 25 08:00:23 2024 GMT
Not After : Nov 26 08:00:23 2024 GMT
Subject: CN=7d3af891168c9f0ffb257877007e1cb432a75bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:05:fa:ea:a3:30:4e:46:73:bc:e2:43:80:a5:
6e:e2:89:5b:f7:0d:26:8e:12:f7:c5:62:c2:4c:be:
71:5e:7f:74:85:67:42:ba:f1:f3:22:b1:27:52:f7:
24:10:04:b3:33:56:93:02:cd:d0:98:61:0c:fc:eb:
81:ca:ca:07:6e:a6:ee:de:ca:e8:ed:49:6c:ce:d3:
b9:99:ba:f9:88:be:db:4b:95:a7:a3:1c:3c:42:f8:
3a:ec:e9:d6:e9:d8:e2:dc:a4:ef:46:07:2a:d1:8c:
ca:5d:ba:3d:c6:f9:bc:88:16:d9:a5:be:76:78:c1:
29:06:ef:9e:55:93:8f:cc:99:4b:fe:6b:00:00:05:
1e:10:ef:53:e8:a7:50:55:5b:15:87:53:52:80:6f:
68:a5:5d:74:2f:ba:05:22:78:b6:47:bc:38:81:4a:
4d:1e:02:ce:a2:e6:59:77:5a:be:f3:fc:8f:d5:fb:
8d:31:43:93:7b:f3:fe:7b:27:aa:3b:e9:cd:91:1f:
4e:f7:13:40:10:9b:68:3c:9c:48:1b:cd:27:8b:b4:
2e:ee:df:63:9c:45:f6:cd:9f:f6:14:01:bf:b1:85:
b1:b3:37:41:d7:0c:8f:91:61:fb:eb:23:2c:16:33:
9b:65:ad:27:a8:2c:a7:d1:ea:31:02:45:17:e8:ae:
9b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3A:F8:91:16:8C:9F:0F:FB:25:78:77:00:7E:1C:B4:32:A7:5B:CD
X509v3 Authority Key Identifier:
keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:de:3d:82:02:89:48:ae:fe:4f:95:50:47:e6:0d:9c:87:3e:
10:08:d9:f2:41:cf:6a:73:e8:73:c2:67:f7:9a:aa:3a:87:f0:
8f:77:c0:0d:86:d7:9b:78:cd:a0:44:3e:b4:a6:92:02:8d:bb:
a0:c0:82:ec:cb:9a:ff:b1:c9:ed:a7:2e:06:3c:0f:85:cd:a6:
0c:48:fe:8a:9c:aa:67:30:bc:c0:e2:b7:1c:e1:09:ae:27:3d:
24:c7:6f:6c:c3:a6:37:9c:42:d0:91:ef:41:f9:f3:7c:6c:85:
58:45:37:a6:c8:71:45:b1:c8:a2:43:af:b3:f7:35:b7:3e:ba:
1a:88:c1:1b:f8:61:ae:13:c5:cd:12:d5:0a:80:68:da:ff:48:
3f:82:2a:e4:80:43:69:42:92:52:37:12:c0:a1:85:13:fc:3d:
f1:41:4f:27:34:9b:1f:53:0c:48:3b:4b:ac:cb:0b:ed:16:de:
5b:fb:9a:b3:78:3b:3a:76:5a:c1:93:a3:a0:02:22:fb:75:2d:
b6:be:84:64:46:d5:c4:28:f4:66:fd:85:5d:8a:7d:05:43:60:
00:e7:a8:c6:54:b7:68:da:12:3e:ab:f3:df:20:ba:58:71:ed:
5a:9b:2e:ba:81:88:c3:25:40:bf:e0:0d:20:f4:c9:ef:af:60:
4b:5b:a0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:36:23 2024 by rpki-client on console-fra.rpki-client.org