Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/c0147a-fabf-40a4-9ef5-2214e96e382f/1/kmzGtGKVy7wb35hjAtAnG4t9evA.mft
File: kmzGtGKVy7wb35hjAtAnG4t9evA.mft (raw, json)
Hash identifier: jPVkhR8DcP6NEj4BuW9Ip5i9yw9LKF68BJKwt04Xj8U=
Subject key identifier: C8:89:B4:06:30:12:6C:99:39:B1:E5:AF:3E:4F:59:23:52:0C:B9:8A
Authority key identifier: 92:6C:C6:B4:62:95:CB:BC:1B:DF:98:63:02:D0:27:1B:8B:7D:7A:F0
Certificate issuer: /CN=926cc6b46295cbbc1bdf986302d0271b8b7d7af0
Certificate serial: 01901CD84EB22411438B6C4CCE2FD2C87924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmzGtGKVy7wb35hjAtAnG4t9evA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/c0147a-fabf-40a4-9ef5-2214e96e382f/1/kmzGtGKVy7wb35hjAtAnG4t9evA.mft
Manifest number: 11C7
Signing time: Sat 15 Jun 2024 17:00:56 +0000
Manifest this update: Sat 15 Jun 2024 17:00:56 +0000
Manifest next update: Sun 16 Jun 2024 17:00:56 +0000
Files and hashes: 1: RsOrEI9l60OwRKyUxo1BQvtDxdg.roa (hash: pRRUSTqmEM0FNyjCOA88EXnYlk3NVFtQBv52fjtCWmY=)
2: dYiRyodnhodMDi2Ti7uTvRsl_HI.roa (hash: r/T5yjL4p8CfLW3QFj2L/TSQnQ/hf9uXqXBQcgJ9274=)
3: kmzGtGKVy7wb35hjAtAnG4t9evA.crl (hash: PPGWjItQjD3bZubbnmCVkoWlb2vJE0gbj3orKs6i2+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/c0147a-fabf-40a4-9ef5-2214e96e382f/1/kmzGtGKVy7wb35hjAtAnG4t9evA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/c0147a-fabf-40a4-9ef5-2214e96e382f/1/kmzGtGKVy7wb35hjAtAnG4t9evA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmzGtGKVy7wb35hjAtAnG4t9evA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1c:d8:4e:b2:24:11:43:8b:6c:4c:ce:2f:d2:c8:79:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926cc6b46295cbbc1bdf986302d0271b8b7d7af0
Validity
Not Before: Jun 15 17:00:56 2024 GMT
Not After : Jun 16 17:00:56 2024 GMT
Subject: CN=c889b40630126c9939b1e5af3e4f5923520cb98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2a:d6:be:78:ab:c1:ac:38:a2:8f:d5:c2:a3:
45:cb:44:c6:b3:d0:59:4d:ae:01:18:1a:a7:12:64:
eb:48:79:a8:0e:b0:d0:29:92:36:08:52:65:2e:dd:
72:fd:6f:e3:3b:4c:f1:ab:09:fd:a2:84:8e:2e:39:
73:7c:17:c5:62:3e:2f:67:ac:73:8f:5b:f5:88:24:
e0:65:e9:fc:9b:c2:63:04:93:84:b5:a1:1a:80:24:
db:d8:6e:70:38:e4:b2:40:84:75:00:6c:1a:cf:93:
ab:98:c3:97:eb:74:ec:29:27:0e:53:86:80:76:e7:
b7:87:b8:76:a1:3a:25:85:a3:98:38:a2:bb:e3:d0:
4e:dd:75:9e:ea:f3:99:a4:0c:28:6a:f3:14:f4:17:
0c:6a:9c:f0:80:cf:51:25:cc:34:43:49:c3:8d:02:
56:3c:67:11:da:5e:de:bf:de:27:3f:92:2e:40:57:
f5:81:2e:2c:95:49:37:e7:95:75:30:34:51:8e:74:
2f:c2:8f:7c:23:9f:c4:80:81:18:43:5a:18:b9:f2:
e2:bb:b3:77:05:22:46:c9:06:65:a9:3b:a0:49:fe:
99:08:d5:25:55:75:b1:35:8e:7c:ed:dc:d9:84:ce:
cc:52:00:67:91:fd:98:b2:f3:c7:c5:1a:92:2b:73:
b0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:89:B4:06:30:12:6C:99:39:B1:E5:AF:3E:4F:59:23:52:0C:B9:8A
X509v3 Authority Key Identifier:
keyid:92:6C:C6:B4:62:95:CB:BC:1B:DF:98:63:02:D0:27:1B:8B:7D:7A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmzGtGKVy7wb35hjAtAnG4t9evA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0147a-fabf-40a4-9ef5-2214e96e382f/1/kmzGtGKVy7wb35hjAtAnG4t9evA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0147a-fabf-40a4-9ef5-2214e96e382f/1/kmzGtGKVy7wb35hjAtAnG4t9evA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:fc:ed:39:2b:30:1c:67:ac:28:b1:7c:b8:ab:a0:43:54:39:
71:50:15:fc:15:71:88:4f:ab:2a:0a:90:4c:b4:36:c3:86:61:
fa:37:5f:37:23:98:db:76:b4:7b:94:93:83:c5:76:54:6b:84:
2e:37:0b:12:ce:3e:09:36:37:d2:94:3c:f7:4e:d4:8a:44:56:
3c:fb:c0:ad:6c:3e:fb:49:4b:19:84:9f:16:ef:ea:4e:df:34:
c8:2e:cf:fd:8b:18:53:2c:46:e7:29:d8:5e:98:09:d8:69:aa:
9b:d9:66:09:cb:9c:26:b3:00:b1:c3:8f:1a:e4:b2:74:f6:fe:
e6:a7:db:55:5f:a3:2d:d9:1e:dc:d5:af:83:b1:ed:fa:ae:b1:
ff:38:b3:a5:fe:84:08:ce:06:0f:70:99:a7:e6:57:32:79:21:
13:c2:a9:22:94:22:51:58:46:02:d3:18:3e:79:2f:90:61:7b:
a3:5d:19:2f:34:e4:42:4b:38:33:1c:2c:e7:3e:66:a9:79:83:
f4:57:61:57:80:c1:cb:5c:91:cd:1f:77:ef:f9:e5:f8:f3:00:
13:8c:26:8e:62:97:5a:a8:34:4d:61:29:cb:1e:99:48:2b:4b:
ce:3a:44:49:09:dd:f7:22:75:66:f8:59:99:e6:81:59:a9:7e:
59:92:a1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:46:09 2024 by rpki-client on console-fra.rpki-client.org