Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/902301-5676-41fc-8ebd-7f17066957af/1/kCvbgcrzPxCwX4dnsajhiLB-NBs.mft
File: kCvbgcrzPxCwX4dnsajhiLB-NBs.mft (raw, json)
Hash identifier: iQrBBOZB9mJdA4vH2TkPqzVaHQMla8Bis5icMCJinvs=
Subject key identifier: 42:2B:B6:67:A8:B6:1C:0A:7E:DE:69:69:13:0C:F2:33:F3:8A:7D:7C
Authority key identifier: 90:2B:DB:81:CA:F3:3F:10:B0:5F:87:67:B1:A8:E1:88:B0:7E:34:1B
Certificate issuer: /CN=902bdb81caf33f10b05f8767b1a8e188b07e341b
Certificate serial: 01904867E44FCE518F1169AB8B3CD9027D37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kCvbgcrzPxCwX4dnsajhiLB-NBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/902301-5676-41fc-8ebd-7f17066957af/1/kCvbgcrzPxCwX4dnsajhiLB-NBs.mft
Manifest number: 0869
Signing time: Mon 24 Jun 2024 04:01:26 +0000
Manifest this update: Mon 24 Jun 2024 04:01:26 +0000
Manifest next update: Tue 25 Jun 2024 04:01:26 +0000
Files and hashes: 1: kCvbgcrzPxCwX4dnsajhiLB-NBs.crl (hash: NUWtZcdabyBYz2V8zIGfU51GhtkoaDLNG+md2lnJB9M=)
2: tbbst5Gbem6SMB-jQQT4kh35Has.roa (hash: 0Ulyhk8+dChE5L7M6RDZT5EE3J/X0MtT7u389avLlM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/902301-5676-41fc-8ebd-7f17066957af/1/kCvbgcrzPxCwX4dnsajhiLB-NBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/902301-5676-41fc-8ebd-7f17066957af/1/kCvbgcrzPxCwX4dnsajhiLB-NBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kCvbgcrzPxCwX4dnsajhiLB-NBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:48:67:e4:4f:ce:51:8f:11:69:ab:8b:3c:d9:02:7d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=902bdb81caf33f10b05f8767b1a8e188b07e341b
Validity
Not Before: Jun 24 04:01:26 2024 GMT
Not After : Jun 25 04:01:26 2024 GMT
Subject: CN=422bb667a8b61c0a7ede6969130cf233f38a7d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:39:30:5e:bd:c7:6e:b6:fb:a6:89:54:7d:b1:
8d:71:16:2d:81:8e:c7:23:3a:75:ab:e4:13:89:d2:
51:5e:b8:67:3e:4c:e8:5a:62:3e:ba:3c:24:e1:05:
63:98:18:fa:ec:e2:43:b8:4d:7e:9d:e8:84:52:1b:
1d:2e:9a:a9:55:0a:5b:31:4b:49:fa:ea:15:4e:25:
d9:d9:eb:03:06:20:7c:7b:e0:ad:2c:0f:a5:da:48:
97:41:83:dd:4b:c7:a3:56:1f:5f:11:48:86:43:d8:
bd:62:09:33:5e:fb:fd:ce:b6:71:10:2d:ca:b6:97:
9c:84:76:3a:1d:06:54:92:9b:1d:d7:0e:27:d2:16:
76:3b:b5:0e:17:99:8d:e2:de:26:a6:32:fc:dd:66:
9a:2e:1a:ad:34:17:43:7f:54:06:08:1b:07:07:7f:
4b:4d:5b:4b:84:20:10:77:1d:1b:86:bc:8c:8c:e0:
f8:e5:ff:47:66:10:01:9c:51:c9:f7:40:b2:b2:9a:
e1:d5:35:44:aa:a8:a3:a6:18:97:aa:78:d6:68:ba:
81:05:33:13:eb:da:b2:15:14:97:d8:46:0a:2d:34:
e0:9b:e3:c3:8c:3e:39:0b:35:3b:30:a5:83:9b:94:
54:c1:e7:30:e3:f8:8e:91:33:04:12:d1:fa:52:ce:
53:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2B:B6:67:A8:B6:1C:0A:7E:DE:69:69:13:0C:F2:33:F3:8A:7D:7C
X509v3 Authority Key Identifier:
keyid:90:2B:DB:81:CA:F3:3F:10:B0:5F:87:67:B1:A8:E1:88:B0:7E:34:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCvbgcrzPxCwX4dnsajhiLB-NBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/902301-5676-41fc-8ebd-7f17066957af/1/kCvbgcrzPxCwX4dnsajhiLB-NBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/902301-5676-41fc-8ebd-7f17066957af/1/kCvbgcrzPxCwX4dnsajhiLB-NBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:dc:fe:22:cd:d4:b5:16:75:e7:cd:b4:1f:2d:88:f2:02:06:
ab:8b:74:ba:89:43:ed:93:c9:fc:af:46:61:c5:28:3c:d0:a3:
c6:f8:f8:a9:ee:3d:3c:d5:5e:1f:2e:f7:86:21:cd:28:5e:4c:
b1:93:31:86:67:a4:04:21:3e:d9:a0:0b:8a:00:dc:92:a1:55:
7b:69:ad:a1:cf:1c:eb:ee:1f:07:04:c1:80:28:0f:ed:fa:80:
da:cc:a0:bc:49:f9:d5:0b:92:42:e8:d6:b2:ac:61:23:37:dd:
99:ac:6c:db:6c:02:60:f6:54:f2:c4:8a:4c:0b:85:f3:93:1e:
5a:c4:94:1c:77:0f:73:d7:2f:4a:8a:26:09:91:0d:c0:bd:3f:
c7:14:19:81:1f:5d:54:f4:b4:88:19:f9:74:c1:ff:23:05:a2:
ea:c0:75:37:5a:d8:d3:5c:37:47:8c:2e:c7:1c:7b:bc:62:d6:
66:5b:9e:9c:b2:ea:fd:af:30:de:34:ec:36:5e:f7:45:b9:00:
63:6d:b0:46:a2:29:56:40:60:fa:64:ee:98:0b:e4:04:55:4c:
42:1c:84:a8:76:7d:c2:d3:7f:82:d7:58:b0:12:d2:44:57:be:
51:b4:b8:b3:45:65:de:d0:05:73:a5:ec:1c:0f:5e:23:f1:44:
5e:59:60:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 09:40:33 2024 by rpki-client on console-fra.rpki-client.org