Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
File: KVkHdOd6iZSkKDEow1kh0DewbyE.mft (raw, json)
Hash identifier: M2VcRfTzkhpfWlyqESSETfvyVORBlDHStsx8UnfMW3s=
Subject key identifier: 98:E4:ED:4C:9F:B7:93:C2:10:AC:3A:8B:E7:23:24:7A:A3:91:67:89
Authority key identifier: 29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
Certificate issuer: /CN=29590774e77a8994a4283128c35921d037b06f21
Certificate serial: 01901DEAA5EBCBE83FAF161494DA47BD0BF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
Manifest number: 11C3
Signing time: Sat 15 Jun 2024 22:00:35 +0000
Manifest this update: Sat 15 Jun 2024 22:00:35 +0000
Manifest next update: Sun 16 Jun 2024 22:00:35 +0000
Files and hashes: 1: KIGZ9IfxocWm-0h0xo1FYKgUj3k.roa (hash: Jz2Vzn5SmBA3xSCW5L7Dzt9trl1Q8S4SNw0x6jF6jS8=)
2: KVkHdOd6iZSkKDEow1kh0DewbyE.crl (hash: lBO3/Pef10b9pv2tTFT+5Q2ric/QA2HMUkgxp6c9Bf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ea:a5:eb:cb:e8:3f:af:16:14:94:da:47:bd:0b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29590774e77a8994a4283128c35921d037b06f21
Validity
Not Before: Jun 15 22:00:35 2024 GMT
Not After : Jun 16 22:00:35 2024 GMT
Subject: CN=98e4ed4c9fb793c210ac3a8be723247aa3916789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:99:69:bb:6e:6a:69:2f:9d:95:d8:74:e8:52:
39:b9:5c:6a:2c:ed:14:75:94:04:c9:3f:ed:8e:72:
bf:1f:c1:2d:2e:32:63:ab:6a:0c:1f:fd:49:84:09:
65:3d:80:a8:8c:78:fd:9f:5b:d0:d4:74:80:60:9a:
31:78:4e:79:51:6b:cd:9b:1e:f9:68:8c:98:47:e6:
a4:3a:2c:77:d2:3a:39:43:d8:6f:cc:9a:eb:51:19:
bb:98:7f:aa:72:73:fe:95:b8:63:fe:8f:73:e8:09:
80:c2:d9:b1:5a:fd:7a:f5:4a:a6:23:0f:bf:2d:e1:
29:66:ef:07:97:30:04:a9:95:af:5e:b4:8f:1f:8d:
f1:7f:43:74:e4:b3:f6:b1:08:19:81:22:5d:85:37:
e6:68:58:0d:89:20:cc:bb:39:42:42:7a:21:21:92:
7a:a3:8c:c4:e5:a4:8f:28:51:70:51:0d:23:d4:85:
c7:74:4c:e6:17:fa:50:c5:91:e9:8c:04:d5:d2:4b:
77:5b:b3:b4:03:2b:90:0a:50:89:cc:24:bc:f3:54:
f5:2d:2f:16:4d:f2:f6:15:af:3d:e8:07:30:c9:7c:
9b:53:7e:1a:1e:14:5a:c5:f7:3c:79:ba:5d:1f:ae:
da:59:2e:4d:81:6f:04:6a:10:3f:8e:58:85:e0:27:
1d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E4:ED:4C:9F:B7:93:C2:10:AC:3A:8B:E7:23:24:7A:A3:91:67:89
X509v3 Authority Key Identifier:
keyid:29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:97:d4:e3:0c:48:81:50:59:f7:b8:b8:b9:67:87:d0:ca:f9:
b6:27:8f:f4:08:07:38:e2:70:c0:d1:88:f1:56:c8:15:8b:a6:
92:4a:52:60:80:9e:5e:0e:02:66:6f:a4:be:f8:8a:b7:d7:b6:
2f:cb:16:81:a4:fe:a4:0d:3e:68:56:19:0f:a2:d5:45:b6:88:
38:b0:cc:a4:b2:9a:4d:88:1d:fa:59:77:66:fe:5a:54:e8:f9:
87:db:51:7c:22:86:25:db:b2:6c:a4:d1:08:d1:eb:7d:8e:9d:
4d:25:81:3c:5c:ac:f2:ca:0c:6e:b5:63:db:7e:9f:02:4a:d5:
66:49:fa:84:18:f7:85:34:6b:b4:f3:66:80:02:d1:99:4c:66:
bb:ae:80:e7:11:8f:8e:35:b5:d7:7c:7d:e7:42:67:94:7c:5e:
f8:46:29:2e:93:38:ac:19:2d:f9:fc:f1:5e:a3:f2:b9:fc:0c:
5e:13:52:c4:37:18:68:fc:ac:af:31:9e:0a:ff:f1:9b:0a:5c:
a9:52:e8:e9:4b:09:14:b5:8f:f6:d1:a0:40:80:6d:b5:c3:51:
77:68:2f:2b:20:42:ac:46:12:91:3d:9f:23:45:f4:08:c5:a4:
d8:ca:7b:32:c1:37:a7:a8:11:16:a2:d0:23:62:03:71:96:3d:
2d:a1:15:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:03:38 2024 by rpki-client on console-fra.rpki-client.org