Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
File: klEKaHHCm8ApIGipty3DT_gbT8c.mft (raw, json)
Hash identifier: NyyQFJVZKH1fF7HRprZjj5t/Pb1JmAyPccytw9Gssfg=
Subject key identifier: CA:D6:AB:84:3D:B1:4A:3D:F1:13:E6:AA:E4:2C:07:CA:B6:C9:B0:54
Authority key identifier: 92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
Certificate issuer: /CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Certificate serial: 01901EC674FB3D37552AED16112E8FC08F1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
Manifest number: 11C5
Signing time: Sun 16 Jun 2024 02:00:40 +0000
Manifest this update: Sun 16 Jun 2024 02:00:40 +0000
Manifest next update: Mon 17 Jun 2024 02:00:40 +0000
Files and hashes: 1: DxXlggjGeD8xi5Q7u5q0UdYGeD4.roa (hash: T/JuFaVlUxyTD3DkVQS50ptpTXr7nkIG3gAXWtJvyy8=)
2: klEKaHHCm8ApIGipty3DT_gbT8c.crl (hash: a6Cf7PQ3L6jnhIaZkeLMRquHbmNer1N+o6ILeraX6IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:c6:74:fb:3d:37:55:2a:ed:16:11:2e:8f:c0:8f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Validity
Not Before: Jun 16 02:00:40 2024 GMT
Not After : Jun 17 02:00:40 2024 GMT
Subject: CN=cad6ab843db14a3df113e6aae42c07cab6c9b054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:a3:de:9c:3d:ca:74:4f:f3:83:15:1f:3f:
85:56:74:21:ef:f0:64:b2:96:05:0c:fa:66:61:33:
59:9b:1f:51:c9:32:19:b6:af:1b:da:dc:f0:b0:95:
e0:62:17:2c:fe:40:d3:c4:1b:84:62:6d:8d:95:32:
12:19:51:f9:2c:23:0c:0a:db:91:7b:cf:4c:6a:1c:
05:a5:87:ff:57:8d:9d:af:11:a5:43:49:69:9b:af:
c9:3e:98:63:f8:23:42:1e:c4:ed:df:71:86:f2:e6:
bd:5f:9f:f3:a7:85:a3:d9:e8:69:a5:cb:ad:49:ce:
27:11:cc:30:a2:b2:9d:e5:ce:67:be:66:9a:b5:2f:
01:a0:72:6a:c2:3b:3a:58:71:12:75:4a:cc:7b:12:
dd:a3:d8:82:b8:cc:03:c7:01:0f:cd:32:d3:0e:bf:
a7:1c:ae:9c:9e:fb:d1:b3:fa:a6:94:ee:ce:8b:c4:
be:f9:dc:5a:f6:00:40:85:c3:4e:3f:bc:22:6c:5d:
fc:26:a0:f8:a9:3a:08:c5:57:0b:3b:dd:84:dc:f4:
95:7d:97:fc:50:f8:85:eb:a5:fd:f3:91:37:ac:a6:
cf:53:a3:d7:e1:72:23:0c:42:4e:a2:14:e8:b9:5f:
5b:e6:25:7a:73:6d:17:a5:b7:2b:48:37:a0:d9:57:
65:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D6:AB:84:3D:B1:4A:3D:F1:13:E6:AA:E4:2C:07:CA:B6:C9:B0:54
X509v3 Authority Key Identifier:
keyid:92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b5:0e:89:8e:7e:84:d8:26:a5:80:fe:3d:ac:a1:6f:c5:ab:
f5:b3:c9:d6:77:bd:f4:b5:fa:cf:8e:b8:ef:74:54:c5:ad:3f:
e9:ba:fa:1a:07:30:d2:4f:4b:c7:eb:f8:f4:d1:fb:bd:f2:18:
e7:9f:d9:39:46:eb:b9:87:23:3c:b7:ab:f1:07:7d:e5:f6:4a:
00:76:62:d2:f8:4f:5e:c9:88:08:1f:72:a7:85:8c:b9:32:9b:
83:fb:8b:4d:59:44:d1:fd:90:c6:bd:19:d7:39:16:bc:7f:0b:
ed:0d:be:35:b4:e5:95:51:66:dc:a6:56:70:56:7e:e5:18:b7:
d8:9b:f5:51:ed:40:8e:84:21:3b:71:5c:f1:32:bd:da:2c:1e:
34:61:c6:e0:78:0f:5e:88:d5:89:2b:1e:cb:7e:81:ef:31:fe:
85:71:5b:65:34:7c:c5:c3:1c:50:b9:98:1f:45:84:a9:7e:09:
41:bf:3a:0d:04:4f:2b:02:af:cf:46:61:5c:13:78:8e:b1:4a:
5a:b4:a8:e9:98:4a:69:ec:98:b3:9c:99:2b:b4:c6:ea:ce:63:
53:c0:e8:e3:77:20:0e:7a:da:59:d8:55:92:60:45:b4:a0:23:
f1:4a:d5:eb:93:51:48:fb:a6:9e:0c:c4:ee:bf:99:3b:cc:50:
e1:7e:65:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:00:24 2024 by rpki-client on console-fra.rpki-client.org