Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
File: j_QxWS3s8oXDMtMGJTHA589hAsA.mft (raw, json)
Hash identifier: 9zoSDrc0mkLPZuUo7DORWWdugjTkYwQz06b5AkOxx7A=
Subject key identifier: 60:FE:BE:00:C8:8C:4E:04:0E:9B:04:FD:59:99:B0:00:A9:ED:F0:FC
Authority key identifier: 8F:F4:31:59:2D:EC:F2:85:C3:32:D3:06:25:31:C0:E7:CF:61:02:C0
Certificate issuer: /CN=8ff431592decf285c332d3062531c0e7cf6102c0
Certificate serial: 019357D2C072EC13B949FA8C004F1BEB655B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_QxWS3s8oXDMtMGJTHA589hAsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 07:00:49 +0000
Manifest this update: Sat 23 Nov 2024 07:00:49 +0000
Manifest next update: Sun 24 Nov 2024 07:00:49 +0000
Files and hashes: 1: j_QxWS3s8oXDMtMGJTHA589hAsA.crl (hash: o5LA3Xqh0BSe6Z5eE1XO8azgEXX3dhp0KNdiHy9LsRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j_QxWS3s8oXDMtMGJTHA589hAsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:c0:72:ec:13:b9:49:fa:8c:00:4f:1b:eb:65:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ff431592decf285c332d3062531c0e7cf6102c0
Validity
Not Before: Nov 23 07:00:49 2024 GMT
Not After : Nov 24 07:00:49 2024 GMT
Subject: CN=60febe00c88c4e040e9b04fd5999b000a9edf0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:87:35:ad:e3:44:da:3b:11:e0:d4:38:27:9a:
ea:ec:db:13:90:52:de:f3:ad:28:6f:d7:2d:85:0a:
6b:52:b1:47:cd:8d:9f:5a:13:fc:9a:32:db:75:ba:
e8:6f:d8:59:c6:92:ed:a0:a2:19:25:9e:50:94:84:
e7:a0:70:b7:fd:d3:05:28:51:0a:0f:aa:37:12:9f:
f1:d4:b6:6a:c3:a7:1c:5b:23:96:44:ee:aa:9b:b3:
2e:f8:66:0f:79:0a:16:12:32:b0:d1:80:ab:94:fd:
8a:1b:75:73:a6:ac:14:d8:27:87:62:89:fc:34:6e:
00:22:66:5b:d7:ed:ea:d4:64:35:1e:b3:9e:9d:d2:
9e:0a:78:17:78:17:1e:9c:72:2c:77:23:01:97:62:
6c:53:94:f1:ca:c7:30:cf:db:b8:d7:8b:dd:4f:e3:
6b:ed:d1:fd:f2:3c:e1:83:09:32:d9:cc:b0:dc:48:
a9:1c:b9:10:03:d5:03:4d:1c:70:ae:0d:3a:d2:32:
ac:e1:20:d6:6c:54:09:7a:aa:08:7f:7b:00:65:3f:
4c:60:90:f0:a0:76:e0:90:f2:b1:fb:40:ed:51:32:
57:be:ff:9b:1e:66:03:9f:0d:c5:4c:05:84:0c:98:
b2:2e:a6:a5:b3:32:6f:8c:48:91:f9:ab:c1:1f:b2:
29:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FE:BE:00:C8:8C:4E:04:0E:9B:04:FD:59:99:B0:00:A9:ED:F0:FC
X509v3 Authority Key Identifier:
keyid:8F:F4:31:59:2D:EC:F2:85:C3:32:D3:06:25:31:C0:E7:CF:61:02:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_QxWS3s8oXDMtMGJTHA589hAsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:bc:bc:a5:69:2b:ea:d1:16:9d:7a:6e:48:64:8b:fc:5f:50:
38:ac:25:ae:18:fe:25:78:49:8f:08:d7:2c:70:88:eb:0a:9a:
d7:eb:5e:4e:9f:fb:78:8e:de:2c:42:c9:38:11:fd:a5:d7:e1:
4e:2f:f9:18:20:d2:6c:c5:66:bf:33:b6:a0:e7:43:47:35:51:
6c:be:5c:93:be:9b:3e:71:44:48:fb:33:42:63:b6:7e:33:bd:
9c:21:dc:09:94:ef:ea:ee:7b:42:08:09:13:a9:4f:00:ae:97:
ad:ad:21:e5:c6:8d:9a:47:1f:77:4c:00:b4:bb:62:4e:d3:3f:
4b:ec:f2:ff:3b:05:d3:c5:07:10:67:01:35:fa:33:73:f0:f4:
44:d7:18:22:80:2d:42:0d:e3:c8:e6:5d:b1:a3:b7:49:a7:6e:
19:89:04:49:c9:52:42:b2:a9:51:bf:09:99:83:16:d9:ac:d0:
a1:0d:77:ea:ea:c7:80:64:60:97:34:01:80:1f:51:21:f8:4c:
e1:49:9f:38:51:58:d2:a5:14:96:92:71:5a:fc:f6:bb:0d:4f:
6e:b6:44:76:cc:06:2a:4f:2a:67:91:bf:23:04:ce:cf:1a:69:
4a:8f:6f:1f:d4:fd:71:b7:cd:f0:37:5f:72:0a:bb:ba:2f:d5:
6a:cb:19:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:19:14 2024 by rpki-client on console-fra.rpki-client.org