Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
File: KIUcb8brOBbhFsikqFHQ0XjJDzE.mft (raw, json)
Hash identifier: R0IcdEEejIHrSi0KlNIlF0ToyjJtkVuQHtL3H8chSuw=
Subject key identifier: 7E:B3:52:41:C6:33:25:61:43:C2:55:A0:E3:54:26:F4:CE:03:70:D5
Authority key identifier: 28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
Certificate issuer: /CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Certificate serial: 018FB8DA44FA120844B56037715FEFCB2DE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
Manifest number: 0F6F
Signing time: Mon 27 May 2024 07:01:03 +0000
Manifest this update: Mon 27 May 2024 07:01:03 +0000
Manifest next update: Tue 28 May 2024 07:01:03 +0000
Files and hashes: 1: 99hL1M0Kvtc8JTPpQAYPcI3Zq9o.roa (hash: A0pfMFVZTusr8PW8FcxYb99YfBgnjaJMvX5sYI5zJ+M=)
2: ADQP9eb0sJNTO5TKDJg5Hf3lwO4.roa (hash: s8eo+e5rTcDypvfHU7bpTDYeNlZnc2+W87V01eOJvDA=)
3: KIUcb8brOBbhFsikqFHQ0XjJDzE.crl (hash: TWlNDdNy6ZJcbWth3+wqXVvP5Zc2cj7BLevpbOrIbvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b8:da:44:fa:12:08:44:b5:60:37:71:5f:ef:cb:2d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Validity
Not Before: May 27 07:01:03 2024 GMT
Not After : May 28 07:01:03 2024 GMT
Subject: CN=7eb35241c633256143c255a0e35426f4ce0370d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1f:2d:33:9f:a9:c9:00:ab:e4:c8:b0:41:29:
0a:89:2e:cc:9d:c4:e1:0e:4b:f4:6e:78:42:62:fc:
90:ed:61:20:49:3d:d4:c3:a8:6f:f6:31:56:cb:f3:
74:45:26:6c:d5:e9:c1:48:d0:62:9f:ba:22:8f:fd:
6e:20:5c:13:a8:af:fc:e5:a1:9a:4d:b8:c2:86:09:
e9:25:c3:32:b5:c9:d3:5a:f3:9d:0a:0b:28:5e:ed:
60:c8:63:0f:cb:78:e7:77:22:88:b7:e9:d0:94:a2:
23:4e:02:eb:65:8b:04:31:23:9d:92:fa:16:a7:24:
12:53:73:7b:a6:3c:fd:cb:d9:66:e2:f2:1e:c7:cd:
72:ff:65:96:b3:29:31:11:6a:0e:29:41:c7:69:09:
67:20:2a:c7:12:9f:39:20:df:05:e0:7d:1e:e9:76:
5d:fe:d7:67:b6:d1:10:8c:b3:e4:3d:66:53:fb:dd:
45:e1:0b:6e:ed:26:85:56:d1:91:b9:cb:a7:8b:85:
d1:1a:b8:a2:e8:24:13:7f:4e:ca:c5:33:23:47:18:
6e:d9:ad:bd:c1:31:8d:c7:68:36:2d:ef:e1:43:77:
5a:99:c8:02:25:8a:80:56:57:01:55:e9:1a:b6:d6:
9b:75:e6:56:e3:90:0a:c1:eb:39:24:14:57:6a:93:
e1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B3:52:41:C6:33:25:61:43:C2:55:A0:E3:54:26:F4:CE:03:70:D5
X509v3 Authority Key Identifier:
keyid:28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:77:af:04:cc:25:62:ac:45:16:8f:60:a0:e8:12:09:24:b1:
b8:d2:01:8d:3e:86:13:cc:17:65:31:e7:1e:57:e0:80:50:c7:
90:3f:27:37:df:c2:36:5d:4a:60:5c:3d:42:b2:59:b7:9e:1c:
01:70:ce:df:7a:c6:75:7c:91:46:05:35:31:24:e4:27:73:32:
71:fa:8d:c2:77:65:84:d7:9a:2e:89:78:6e:87:97:c1:a7:d4:
25:12:ad:be:e8:8b:f9:21:c8:fc:4e:4b:71:94:90:02:aa:6f:
67:01:a3:20:7f:3c:b8:fe:5f:0c:0b:3e:f0:c5:f4:fc:41:8a:
43:9a:c1:22:6f:19:df:eb:ee:1f:50:49:e1:7d:50:77:82:6f:
f6:f8:29:c3:46:79:fc:af:30:5b:ce:d1:7b:4e:fc:d8:23:06:
0f:d9:63:09:75:7a:e3:73:5c:a9:8a:19:6f:d1:e1:73:0a:24:
6f:3d:a4:07:d6:dc:20:92:46:ce:4f:ba:e9:3b:af:5b:af:2f:
62:3b:27:4c:f9:ba:81:ae:c2:fb:b8:f0:09:3a:0d:41:32:25:
d9:27:08:a7:b5:6e:07:6e:eb:cd:20:3e:2d:68:1b:11:49:4b:
44:51:22:06:25:e1:2b:8b:b9:4f:86:26:94:ae:c7:1b:a3:1e:
80:e1:d4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 12:39:23 2024 by rpki-client on console-ams.rpki-client.org