Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
File: klbbNIe0xbrLMAF3BXzzF0z3dHc.mft (raw, json)
Hash identifier: /f0jvaXVEZgM5OvBMurZTeDZSITAEkP2QxOqxVB04eY=
Subject key identifier: 78:33:B3:2C:93:36:51:BD:86:0A:C5:B3:7E:97:16:ED:65:B4:EE:56
Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
Certificate issuer: /CN=9256db3487b4c5bacb300177057cf3174cf77477
Certificate serial: 019044F8C943F2B4591CAB0E29A9BC630747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
Manifest number: 11DA
Signing time: Sun 23 Jun 2024 12:01:13 +0000
Manifest this update: Sun 23 Jun 2024 12:01:13 +0000
Manifest next update: Mon 24 Jun 2024 12:01:13 +0000
Files and hashes: 1: 9z8yesdQDaakV7eFodyeaXffF2U.roa (hash: 2Oqz1mNeSW6Jl2J+rZ/uMCdFBLQAWqmMztTp2zOYrU4=)
2: D2Uq83wKts-XekegUv_UOul35WY.roa (hash: eUBLf5xddO/u+0pxESNZxCQdCXxRqZ6lJOJL0PB+eYM=)
3: klbbNIe0xbrLMAF3BXzzF0z3dHc.crl (hash: tr8R8sHRwbflHtjU8rz1FFbYNXnUnyLa/sSo/lF5hPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:f8:c9:43:f2:b4:59:1c:ab:0e:29:a9:bc:63:07:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477
Validity
Not Before: Jun 23 12:01:13 2024 GMT
Not After : Jun 24 12:01:13 2024 GMT
Subject: CN=7833b32c933651bd860ac5b37e9716ed65b4ee56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1e:97:9b:09:00:5d:94:32:9b:eb:2b:fb:6e:
43:06:a3:32:9f:ee:b2:77:d9:3e:18:49:4d:8c:3f:
20:97:f3:1b:37:89:6e:3b:31:4e:cc:e9:bc:1b:f2:
4d:97:84:13:7c:5f:76:95:06:17:15:ec:c7:a1:2a:
4b:6f:35:35:f0:78:75:1c:8b:45:c4:d8:f3:41:20:
d9:b6:31:cf:98:61:b5:31:a2:c9:b2:97:b8:94:42:
fd:05:79:70:17:52:f9:16:00:e1:4b:65:f9:5b:e5:
d2:0f:d0:00:f2:62:a9:3f:fe:9f:11:26:16:34:68:
3f:96:02:be:34:79:f6:bc:44:9b:46:cd:5e:74:43:
c0:79:81:b4:a2:66:5c:e5:01:6b:14:dc:ff:6d:5d:
ed:16:1b:17:95:01:5e:35:09:ab:72:2f:39:9e:be:
0d:b6:51:f2:ca:6a:34:67:f4:d2:19:a1:eb:f4:c2:
23:be:a5:4a:79:27:42:c3:a3:7c:72:18:33:30:b7:
fe:a6:ab:c4:99:0c:8e:56:5c:33:02:01:8e:47:86:
f5:76:c5:37:8f:cc:ba:bd:7f:6c:11:47:28:cf:fe:
84:07:0b:35:44:08:f9:3f:40:48:9c:8e:c7:33:00:
82:ab:9b:31:63:88:90:91:1a:0d:35:63:74:e2:62:
6f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:33:B3:2C:93:36:51:BD:86:0A:C5:B3:7E:97:16:ED:65:B4:EE:56
X509v3 Authority Key Identifier:
keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d5:d9:d9:b0:d7:36:56:86:3e:c8:3f:21:c8:e8:6a:d5:4b:
58:5d:b6:03:05:b3:fe:df:f4:62:db:d2:b7:b9:1d:ba:c4:07:
f7:28:4f:17:7c:0a:24:2b:d5:ca:a9:72:f5:97:e8:97:97:87:
1b:f6:e8:05:f7:df:8a:b4:62:8d:dd:49:91:eb:e9:cd:b7:28:
ab:2f:d0:55:0b:bf:3d:fe:e0:9b:2d:d4:d1:3e:e4:e6:ab:66:
b3:4d:7b:c8:d0:85:ac:71:ff:96:c3:16:26:be:9b:0a:a9:96:
99:05:12:42:f6:d2:2f:eb:69:2b:f0:46:48:24:83:aa:de:7a:
2a:b6:1f:77:ca:2f:38:44:15:3e:77:91:69:92:e0:e0:77:63:
c4:58:d8:80:fd:45:59:f5:ba:88:0f:b9:e6:80:4b:d1:79:95:
ed:24:fa:fd:ec:ed:89:96:ee:56:26:9b:b7:a3:52:ba:11:48:
b4:e6:4c:5f:98:ea:36:35:26:83:a9:35:ec:e1:af:df:bc:8a:
5a:b6:0b:ef:4f:bf:f9:de:be:00:4d:d6:b1:9b:84:7a:2c:c7:
68:2f:6c:8a:95:14:a2:65:a8:52:e2:55:93:39:62:b2:49:54:
2f:0d:71:54:8c:b7:84:57:51:f6:b4:3c:a4:b3:f7:9f:4c:6d:
b1:72:80:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:57:59 2024 by rpki-client on console-fra.rpki-client.org