Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
File: ktkImo4yjTLW3hbX2iV7gRsFI50.mft (raw, json)
Hash identifier: 5iFG8FS9PRK2M60VyqiRc9hWn8TJJfNUKHejwwnweSA=
Subject key identifier: BB:A8:17:C2:52:4C:0A:D6:03:86:BE:DE:CA:86:54:18:B8:AD:47:80
Authority key identifier: 92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
Certificate issuer: /CN=92d9089a8e328d32d6de16d7da257b811b05239d
Certificate serial: 018FB910F636686802829E19BB09490722D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
Manifest number: EC
Signing time: Mon 27 May 2024 08:00:47 +0000
Manifest this update: Mon 27 May 2024 08:00:47 +0000
Manifest next update: Tue 28 May 2024 08:00:47 +0000
Files and hashes: 1: 33hLGtTlOfBUBiCHtmMi_GE4T3o.roa (hash: HYKkGn7up2kMwvN1mtbiZWOX32fMafQmlN4dT29qY4k=)
2: PDR7iFzlcevvX1CYurjtsCmFS3Q.roa (hash: pq/Wsj2UqHMOUlN0FXDQs03uYxflZiJkrRluD4xU5Ro=)
3: ktkImo4yjTLW3hbX2iV7gRsFI50.crl (hash: dG42fq01LuocL2OBBO6xCMwm4wvC+55cDWT/D+pci6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b9:10:f6:36:68:68:02:82:9e:19:bb:09:49:07:22:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d9089a8e328d32d6de16d7da257b811b05239d
Validity
Not Before: May 27 08:00:47 2024 GMT
Not After : May 28 08:00:47 2024 GMT
Subject: CN=bba817c2524c0ad60386bedeca865418b8ad4780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:86:2c:bc:39:ff:b4:d9:e0:6a:2f:5d:45:e0:
16:10:25:67:83:59:32:12:5e:f3:a0:52:1e:6c:88:
d2:0a:1a:e3:1b:57:45:20:63:1c:42:10:a6:ad:a5:
a9:a7:9b:2e:3d:39:0d:0f:64:e0:79:28:53:11:98:
85:3e:b0:a3:b8:66:00:2f:8b:aa:9f:4f:52:b2:c2:
10:c3:f9:99:7a:ed:58:9e:0a:7c:f0:ec:de:6f:07:
85:23:f3:ef:e7:d4:65:32:f2:ca:d9:b5:52:fe:13:
30:ae:19:94:d8:e0:8d:6c:8e:43:d0:1c:74:c9:c5:
96:9b:99:0e:eb:c4:3a:71:a6:81:2b:60:71:0e:1a:
86:4c:8a:aa:23:47:51:57:57:33:98:51:99:dc:2e:
11:5b:87:e3:6a:c8:4e:39:00:74:bb:b4:15:c9:f9:
0c:b4:9f:74:46:5c:8a:e6:49:44:8b:22:53:df:1b:
f5:00:a2:e2:87:dd:65:95:92:44:5f:37:b9:b0:28:
4a:00:74:33:83:24:7d:92:35:d9:18:07:a0:63:fc:
95:6c:e8:f0:80:8b:3c:67:a1:de:9d:e1:57:23:f0:
a7:02:cb:8c:61:ac:cc:06:bc:ee:74:10:24:72:66:
6a:a8:fa:a5:12:23:5d:9c:87:8a:c4:70:18:cc:3e:
4a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A8:17:C2:52:4C:0A:D6:03:86:BE:DE:CA:86:54:18:B8:AD:47:80
X509v3 Authority Key Identifier:
keyid:92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:2f:56:54:da:b3:74:74:66:16:8a:92:c0:83:14:ac:ed:13:
2a:da:21:6f:4b:bc:9e:4a:2e:bb:2a:87:1b:86:95:91:85:14:
4d:c0:64:dc:05:54:15:ac:b7:b2:e1:cb:10:e3:48:b7:3e:3c:
82:10:d1:a7:51:83:a7:c1:f1:41:64:a8:c0:c8:26:2e:6d:41:
87:7b:45:e0:cc:53:56:0d:20:cd:64:c5:ba:a9:77:4f:a0:83:
2d:4c:21:2b:81:2a:4a:fe:54:99:97:07:95:9f:9f:fa:fd:2a:
5b:c8:8c:92:0e:3f:a2:f3:f0:0e:ae:7b:70:a3:5f:ab:89:dc:
ab:01:1d:99:f6:11:c3:db:89:e3:0e:61:41:60:9e:3f:3d:de:
3a:c5:8a:92:2a:01:19:17:4e:16:ea:3e:a6:8a:27:eb:ce:bd:
da:a7:8d:f5:09:27:ec:da:10:46:1b:48:83:7b:6c:e3:6f:40:
c1:8e:b3:cc:aa:48:29:e7:26:41:59:37:43:24:f6:ab:55:65:
42:b7:b9:40:9f:a4:16:7d:37:93:ae:b4:d6:df:c1:be:f3:34:
50:4c:ba:23:6b:16:2d:67:6e:b4:73:c0:9f:f4:5e:4f:2d:92:
21:6b:51:86:af:52:f0:97:f5:50:65:2c:7a:1b:ce:fe:fe:b6:
41:92:96:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 13:00:18 2024 by rpki-client on console-fra.rpki-client.org