Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
File: sKT8KvOK9bT1hh4n_QB-YktfmwI.mft (raw, json)
Hash identifier: fTzgUur02I3NLB6FPKhY4cAIR+vQUwdVM+MHio2k5G8=
Subject key identifier: FD:B5:21:ED:0A:48:BE:6D:7A:21:3B:0C:4A:F8:D9:4B:69:F7:93:97
Authority key identifier: B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
Certificate issuer: /CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Certificate serial: 019044C1465726076AD672388EBFBAA07025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
Manifest number: 10A9
Signing time: Sun 23 Jun 2024 11:00:35 +0000
Manifest this update: Sun 23 Jun 2024 11:00:35 +0000
Manifest next update: Mon 24 Jun 2024 11:00:35 +0000
Files and hashes: 1: CKYxHGe_r5qermXLJrW3PthgQIU.roa (hash: GuGNkGiCWUw/H93B23xCWyZe23gkcac/lftUsf3VH1s=)
2: sKT8KvOK9bT1hh4n_QB-YktfmwI.crl (hash: NOB2tENHFs57+zcin0c87sZhf6P/Sr1h/ENCy/66/50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:c1:46:57:26:07:6a:d6:72:38:8e:bf:ba:a0:70:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Validity
Not Before: Jun 23 11:00:35 2024 GMT
Not After : Jun 24 11:00:35 2024 GMT
Subject: CN=fdb521ed0a48be6d7a213b0c4af8d94b69f79397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b1:14:3e:a3:42:ba:da:ef:72:44:4f:7c:df:
71:74:27:54:8a:9a:a9:de:bb:cc:19:dd:8f:86:4f:
3f:bc:94:bf:06:1d:77:f9:7e:b0:13:b7:76:7a:07:
da:39:47:24:7f:62:a2:29:d6:3d:1b:23:68:13:87:
6d:83:e2:68:26:ac:46:19:fb:eb:5c:a5:d7:39:28:
44:0f:03:45:8b:45:d6:33:85:b0:b6:c1:7e:68:13:
c1:10:d8:71:5e:f4:cc:19:92:13:60:4f:0b:8a:0e:
d2:d9:4f:30:d1:e4:a2:17:70:df:6c:17:40:5d:a2:
0c:33:3d:c7:31:4d:4d:ca:a2:1d:d5:ec:5b:ac:c1:
ec:69:00:95:3d:6c:17:a4:c2:ec:3d:9d:38:8a:97:
1d:68:5f:a7:30:07:06:b0:f7:02:f5:8a:5f:28:fb:
5d:c2:64:db:a5:c5:b5:8f:7e:83:c6:bd:49:c4:a3:
26:75:fb:e3:81:7a:8c:26:15:1e:e0:aa:66:7c:ab:
f0:81:29:b1:6c:07:46:9e:8b:e9:cf:c3:19:89:a0:
b2:76:64:b8:e3:ea:14:b4:a1:66:30:65:3b:83:45:
55:20:d4:ab:4e:bb:e7:86:47:83:a2:9e:91:a8:2d:
7b:65:93:0d:9d:0d:6b:4c:30:75:5e:09:ea:b4:df:
c2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B5:21:ED:0A:48:BE:6D:7A:21:3B:0C:4A:F8:D9:4B:69:F7:93:97
X509v3 Authority Key Identifier:
keyid:B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:07:e7:5e:69:ca:8c:cf:1d:04:95:72:36:b7:05:60:de:e8:
1c:0a:7b:e0:fa:a2:0c:fb:87:39:2a:74:95:86:e6:2e:56:4d:
80:d8:14:07:11:4b:f6:8b:4c:be:59:67:9f:ff:86:9d:0e:d9:
3a:b8:67:7f:70:c1:88:95:e5:f7:8a:4a:c6:90:39:51:19:e2:
4c:3f:ef:9e:d1:fb:aa:a1:cd:07:50:3b:d5:6c:ff:1c:1b:23:
22:54:44:70:dd:a6:97:e1:8f:06:c1:18:5d:b4:81:e2:6e:0b:
ad:1a:3a:38:73:15:19:87:85:75:c1:ff:41:bd:c1:64:20:23:
c2:ed:0a:9f:a4:50:8f:3b:5d:44:55:c9:79:cd:5a:7b:35:62:
67:36:22:a7:13:3d:bd:bf:0c:c0:6b:a2:f7:c0:d3:cf:31:50:
6e:16:10:e6:f9:ee:eb:ec:10:aa:8c:80:21:24:64:e2:f5:72:
07:de:a4:8e:97:c3:d8:d9:90:f8:db:93:2a:01:45:1e:da:c0:
51:3a:e9:9e:1e:74:51:4e:84:f5:18:18:d0:8a:1c:27:2c:e1:
51:ee:10:14:8d:bb:22:c7:b4:87:ab:42:01:9b:c2:80:3e:5a:
60:c4:f5:3b:98:10:bd:42:25:00:9c:86:fc:24:bc:54:09:8c:
17:f2:a7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:20:22 2024 by rpki-client on console-fra.rpki-client.org