Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
File: KH4cl_cfNVhn4_uHfyGqUTC2z10.mft (raw, json)
Hash identifier: apNtvTsiYGqg/FwkAuBazWLJkgxuUZipSnIgXxyiG5Q=
Subject key identifier: 3A:2C:44:DF:8B:28:CB:FD:53:47:1F:5A:5C:FA:80:DE:47:AF:06:82
Authority key identifier: 28:7E:1C:97:F7:1F:35:58:67:E3:FB:87:7F:21:AA:51:30:B6:CF:5D
Certificate issuer: /CN=287e1c97f71f355867e3fb877f21aa5130b6cf5d
Certificate serial: 01901BFE07806D12D2E23767E52019C6CE85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
Manifest number: 060E
Signing time: Sat 15 Jun 2024 13:02:31 +0000
Manifest this update: Sat 15 Jun 2024 13:02:31 +0000
Manifest next update: Sun 16 Jun 2024 13:02:31 +0000
Files and hashes: 1: IG99uHOulaa8ZLih1Q6jp8tkgSs.roa (hash: 1E/aB1+7daLduykqT14+dJBBqDfLBSeCsNhCCWIPLYk=)
2: KH4cl_cfNVhn4_uHfyGqUTC2z10.crl (hash: CiRSUs3dMr9By7rSWrm0atRAHpjcvP6OtQuSSP1kkVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 11:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1b:fe:07:80:6d:12:d2:e2:37:67:e5:20:19:c6:ce:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=287e1c97f71f355867e3fb877f21aa5130b6cf5d
Validity
Not Before: Jun 15 13:02:31 2024 GMT
Not After : Jun 16 13:02:31 2024 GMT
Subject: CN=3a2c44df8b28cbfd53471f5a5cfa80de47af0682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:17:64:19:43:a3:57:9b:a1:77:4b:5a:8d:91:
3c:94:9d:a2:b3:2d:b8:a0:c2:02:d2:4f:bf:f4:8b:
2e:82:d7:0e:22:d8:a0:d3:df:42:f1:34:27:16:cd:
a6:c4:78:75:65:3b:31:65:32:1d:93:84:51:29:3d:
8e:da:a7:be:cb:01:f8:38:2d:d5:9c:1b:f9:1f:2f:
e3:66:9e:95:bd:8d:ea:e5:a5:32:08:fd:08:59:d3:
df:48:8b:21:42:6f:a4:b9:45:44:1f:a1:fb:2e:bd:
1e:50:86:31:b2:9f:63:e2:4a:9f:6e:9f:2f:fa:f1:
5d:4b:e2:e9:20:3a:45:bb:aa:7b:3f:93:3a:9f:2d:
af:4a:53:36:ea:fc:9f:a9:12:40:e5:64:d1:36:b0:
96:c3:a4:dc:42:b7:18:2b:63:ec:68:20:9e:e0:38:
aa:f2:5c:6a:fd:fb:8d:70:3a:ba:07:5d:1d:a9:e7:
72:df:f2:07:70:c0:8c:5e:e6:b7:06:72:f1:77:c3:
81:0a:47:46:a3:19:c7:ca:e0:c0:12:6b:62:7b:58:
71:3a:03:25:16:26:15:9e:f2:29:b7:c1:5d:2e:86:
46:e0:25:cb:53:be:92:d9:86:e9:fc:90:89:77:34:
25:6f:00:03:89:ae:45:17:f5:6d:f6:a7:87:37:dd:
70:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2C:44:DF:8B:28:CB:FD:53:47:1F:5A:5C:FA:80:DE:47:AF:06:82
X509v3 Authority Key Identifier:
keyid:28:7E:1C:97:F7:1F:35:58:67:E3:FB:87:7F:21:AA:51:30:B6:CF:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:41:4a:46:43:8b:38:8a:e2:29:cd:0d:6d:24:65:67:b0:52:
fc:99:5d:93:e4:27:bb:ea:ab:f8:62:68:d2:4a:a4:39:4b:6c:
59:b9:bc:1c:bb:15:35:62:40:08:e4:8c:28:e1:99:8a:be:ce:
ea:81:4e:d8:84:00:f6:35:0d:ce:7e:8d:c8:5a:e5:e3:4f:39:
38:57:27:3f:7a:c5:30:69:e4:b5:2f:ee:ea:a5:99:18:d0:89:
19:98:49:74:b4:09:bd:ed:08:84:09:69:e4:7e:7f:04:22:db:
ea:80:eb:cb:6b:9c:c1:6f:0d:b4:92:14:34:b4:49:31:f1:9c:
1e:9c:ac:6a:29:40:67:3f:20:b5:26:a3:63:81:2b:24:5f:cd:
9e:5e:a0:48:07:90:96:63:45:0f:23:75:c8:9b:56:24:6a:a7:
b8:36:4d:f3:a2:c1:eb:3d:03:33:e7:1e:50:75:06:85:81:5a:
c9:d2:d4:91:cd:86:d2:23:a9:b0:0d:ab:79:8f:cb:55:ae:68:
4f:71:f0:4c:8d:08:38:39:b8:1f:9e:c3:42:66:03:18:e1:5d:
0b:9d:3f:e9:e2:12:a5:86:bd:09:51:55:10:b4:23:b5:c0:48:
f3:94:be:8a:dc:4b:50:c3:aa:c9:5c:88:cf:44:c6:82:5f:79:
ce:e9:9f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:29:03 2024 by rpki-client on console-ams.rpki-client.org