Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.mft
File: kd0OSNkBGt83ZmWtTWLPMc5jBYw.mft (raw, json)
Hash identifier: /13g5F3L72pDGaZoP/sdo48ID6HJcdBcCRfbI80b1G4=
Subject key identifier: 85:FB:E1:A0:B0:4E:83:64:05:6B:1A:BE:EF:D1:32:0C:2C:CF:04:27
Authority key identifier: 91:DD:0E:48:D9:01:1A:DF:37:66:65:AD:4D:62:CF:31:CE:63:05:8C
Certificate issuer: /CN=91dd0e48d9011adf376665ad4d62cf31ce63058c
Certificate serial: 01901DED3E8C25D0873AB7D1CC8F274D1568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kd0OSNkBGt83ZmWtTWLPMc5jBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.mft
Manifest number: 08E5
Signing time: Sat 15 Jun 2024 22:03:25 +0000
Manifest this update: Sat 15 Jun 2024 22:03:25 +0000
Manifest next update: Sun 16 Jun 2024 22:03:25 +0000
Files and hashes: 1: Lj8FrQTEyskp5C0NaHAX89WitBY.roa (hash: 0VvKQF3305WcNMSW50KiCBKErdX6PqYUjnlj691RARg=)
2: bw-MQalXkXYJmrXmzEKENOIK2Tg.roa (hash: bAJkw/mh+kktoYGqNhPi36g9Mk0QrQf7O1Vdl24WSjo=)
3: kd0OSNkBGt83ZmWtTWLPMc5jBYw.crl (hash: XW47g7ODvwBVujWjVSdViroqMjvFKgL/Hl7P95NJynI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kd0OSNkBGt83ZmWtTWLPMc5jBYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ed:3e:8c:25:d0:87:3a:b7:d1:cc:8f:27:4d:15:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91dd0e48d9011adf376665ad4d62cf31ce63058c
Validity
Not Before: Jun 15 22:03:25 2024 GMT
Not After : Jun 16 22:03:25 2024 GMT
Subject: CN=85fbe1a0b04e8364056b1abeefd1320c2ccf0427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c3:d0:8c:7b:12:5d:38:8c:d6:45:03:24:3f:
05:42:08:ac:cb:b8:18:e2:6e:73:e7:8b:48:82:0e:
10:c4:50:99:59:15:f1:56:f7:ea:6a:f3:ae:34:3b:
71:20:61:01:67:34:ce:96:17:d8:58:46:ff:f6:3c:
65:d8:e1:35:b6:7d:70:f3:ab:5d:f8:ad:88:38:44:
42:4d:e9:5c:f5:28:a4:9a:13:b4:ab:aa:3d:be:1e:
b8:00:0b:a4:a3:ed:ed:8c:e6:15:2e:d8:27:66:d1:
a1:0b:5a:40:95:f2:bc:62:80:f1:33:10:70:b2:11:
8b:b8:dc:88:0e:2d:6a:94:5b:9d:c9:6b:b8:cf:4c:
9c:98:54:14:1e:11:b0:04:ea:13:6a:0a:3d:0c:b3:
5d:14:51:7a:c6:03:23:4d:bb:12:20:db:ac:13:ed:
74:2c:a2:b2:bc:c9:b3:35:98:0f:fd:e5:a1:a8:70:
e6:66:52:be:c8:82:40:9a:d0:1c:49:c4:40:d8:a1:
66:6a:be:aa:ce:8c:c0:f4:72:aa:46:e9:b4:18:ae:
4a:b3:0f:9e:da:f9:6b:96:35:86:1f:4e:87:c2:27:
f9:3d:2b:e5:2f:a3:ed:1c:ba:01:c7:04:f2:44:2f:
69:3b:97:e3:22:b3:12:d0:98:12:7d:aa:a1:06:7b:
c4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FB:E1:A0:B0:4E:83:64:05:6B:1A:BE:EF:D1:32:0C:2C:CF:04:27
X509v3 Authority Key Identifier:
keyid:91:DD:0E:48:D9:01:1A:DF:37:66:65:AD:4D:62:CF:31:CE:63:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kd0OSNkBGt83ZmWtTWLPMc5jBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:58:d5:f1:03:4b:d7:dd:89:49:b9:79:4b:a2:68:83:a0:2a:
7c:b6:9e:2a:dc:dc:a4:5d:1a:9d:c9:91:17:6f:92:e8:e4:95:
28:40:da:d2:f9:0d:75:01:57:73:14:35:42:3f:3c:c2:8c:48:
ea:f7:44:c4:c3:4a:24:52:87:9d:c1:56:c8:cf:d1:ce:18:05:
fa:ec:04:28:3e:8f:73:49:8e:1a:6e:dd:17:9a:23:bc:02:6c:
e6:d1:d7:62:f2:b9:3c:b4:17:66:7b:3f:ae:37:f7:33:96:6e:
14:35:09:7b:4e:b6:47:29:df:64:17:b8:c9:d2:d2:d6:1d:1b:
d3:ee:95:6f:8b:98:09:7e:ec:c5:81:ed:7a:20:e6:6d:c5:c2:
46:ee:18:04:cf:75:00:43:3e:80:fe:23:c7:40:23:e4:1d:24:
61:b0:b0:6f:be:39:59:51:c4:4b:ba:68:c2:59:00:d8:90:7d:
e2:a4:ae:9f:75:1f:7c:dc:a1:a1:ed:e8:7a:98:b1:da:bc:51:
ca:6d:75:37:47:70:6d:33:54:ad:26:91:94:d9:7c:59:95:65:
4b:05:e8:c5:eb:9a:c2:14:b4:82:f8:e7:13:c9:99:a3:c5:59:
d0:a4:74:28:bc:f4:c7:c4:f9:e6:06:ed:65:c8:6f:34:3b:34:
62:fb:fd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:03:23 2024 by rpki-client on console-fra.rpki-client.org