Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
File: KcIQP9JBfIhpFFYX3pT8yROwhe8.mft (raw, json)
Hash identifier: bYYCSJF6kkjkmps60PtSfTqn8gFIZNxEOdNTJhbE0P0=
Subject key identifier: 30:85:42:A6:A4:10:50:30:77:59:01:48:97:8E:87:48:D8:6E:90:66
Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef
Certificate serial: 01901E58D5C15F808C4313CF6635227AB6F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
Manifest number: 0F4A
Signing time: Sun 16 Jun 2024 00:00:56 +0000
Manifest this update: Sun 16 Jun 2024 00:00:56 +0000
Manifest next update: Mon 17 Jun 2024 00:00:56 +0000
Files and hashes: 1: 1-z0VFzM_9cX7udLeF8Djz6cbsgc.roa (hash: 83UoHtw8nDkwGide2JoUFtdknM1a/lgZvCtKE4bjRdQ=)
2: J1uk3AeynBXMMtIuSSNkGgZJOLg.roa (hash: lACUqTNKkDnhF0lhKQ9/HN46DSL7xQHIKNUVEx0Jrj8=)
3: KcIQP9JBfIhpFFYX3pT8yROwhe8.crl (hash: ZPYfXXlWcAoQgiV9z0lY3hL7szAobY4Tl3ZfHg9rGzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:58:d5:c1:5f:80:8c:43:13:cf:66:35:22:7a:b6:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef
Validity
Not Before: Jun 16 00:00:56 2024 GMT
Not After : Jun 17 00:00:56 2024 GMT
Subject: CN=308542a6a410503077590148978e8748d86e9066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b2:52:2b:1b:13:7b:ed:73:91:46:55:13:30:
2b:a5:6d:1a:11:3e:66:3b:e0:e6:cc:83:b7:08:da:
cc:0c:70:33:34:c8:a8:37:0a:1c:80:ff:d6:ec:24:
c0:ab:ac:6c:48:9d:32:b5:54:08:e4:90:22:40:80:
e2:ce:74:34:47:0e:33:d8:5b:11:93:34:ec:3b:b5:
5b:48:7b:93:20:36:9e:e7:e3:f1:90:1d:74:3e:3a:
75:13:3a:c1:24:ae:99:da:ae:49:ec:88:28:ed:83:
25:a6:5d:bd:76:fd:1a:11:1f:ae:20:a0:01:6b:50:
04:a9:eb:bb:c7:52:40:68:f1:ea:41:18:8c:c2:d2:
23:63:a9:11:97:3b:36:6d:e1:31:77:3b:29:5a:9a:
81:c6:1a:61:b5:f1:0b:ce:d0:9d:5d:f3:69:0f:6f:
d0:5d:45:ce:91:5f:7f:df:c4:de:42:8a:76:3f:9f:
1a:28:dc:8c:ee:f3:29:05:86:98:1d:7c:5d:ec:bf:
e3:4e:cd:43:31:c3:5b:d3:be:cc:bb:aa:21:cd:28:
c4:5c:eb:9e:69:67:12:b7:cb:24:f7:9a:0c:d6:9c:
7b:2b:f0:5f:5e:f9:16:9f:7e:98:20:61:cb:6b:de:
c3:75:29:be:99:8a:82:97:3b:e4:fb:f8:d9:b9:70:
5b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:85:42:A6:A4:10:50:30:77:59:01:48:97:8E:87:48:D8:6E:90:66
X509v3 Authority Key Identifier:
keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:72:b1:3b:c4:77:79:99:bc:63:2f:95:73:84:bd:1a:dc:43:
33:ed:73:74:b6:b3:f3:f5:f1:6a:76:0e:22:f9:31:f0:bd:fe:
07:99:29:ef:2a:b5:3e:48:28:e4:1e:db:5b:7a:81:7a:20:5c:
1a:c1:26:61:ec:22:f1:f8:55:cb:05:0f:33:fe:37:8d:ab:8f:
4a:b7:b6:c5:78:07:d2:47:47:e4:e2:7a:25:77:fd:3d:ed:d9:
e2:6d:5c:d0:40:0c:e4:3b:c4:59:e0:1c:1e:4a:1c:16:d9:bf:
5d:91:7e:7b:99:36:59:1c:8c:a9:1b:4d:86:f5:14:f5:d6:52:
49:92:ca:fe:59:34:81:8b:73:db:cd:02:a1:b4:7a:85:2a:89:
1c:d6:79:73:93:70:00:f9:d1:df:35:39:16:fd:0b:b3:94:41:
1b:e6:d5:a0:c8:57:c5:c6:68:d7:3b:f3:fd:4f:09:a5:a3:c4:
78:0d:93:a3:c9:97:55:e2:14:bb:a0:34:08:f3:b8:cf:f4:59:
c2:1d:0a:aa:d2:e9:fa:35:b0:52:13:ef:ee:14:28:3b:6e:e6:
87:31:02:f6:4f:15:f8:f2:a2:92:08:53:92:b0:ab:be:40:20:
b3:0e:c5:f6:c8:d6:18:01:d9:cd:c1:ca:20:30:90:96:60:16:
70:fd:35:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:36:54 2024 by rpki-client on console-ams.rpki-client.org