Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
File: klbbNIe0xbrLMAF3BXzzF0z3dHc.mft (raw, json)
Hash identifier: xsMDsbrZUl1BPrtD9rYT7hPUNH9HS0kbpig1+/t9xB4=
Subject key identifier: BD:A0:52:83:CC:05:71:16:4D:FF:65:36:9B:FD:AD:DB:E4:27:90:5D
Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
Certificate issuer: /CN=9256db3487b4c5bacb300177057cf3174cf77477
Certificate serial: 01901E58920117B96BB41746F02DE6FE315E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
Manifest number: 11C6
Signing time: Sun 16 Jun 2024 00:00:39 +0000
Manifest this update: Sun 16 Jun 2024 00:00:39 +0000
Manifest next update: Mon 17 Jun 2024 00:00:39 +0000
Files and hashes: 1: 9z8yesdQDaakV7eFodyeaXffF2U.roa (hash: 2Oqz1mNeSW6Jl2J+rZ/uMCdFBLQAWqmMztTp2zOYrU4=)
2: D2Uq83wKts-XekegUv_UOul35WY.roa (hash: eUBLf5xddO/u+0pxESNZxCQdCXxRqZ6lJOJL0PB+eYM=)
3: klbbNIe0xbrLMAF3BXzzF0z3dHc.crl (hash: uY2yuIVMch/7gw+edDVlsEr+YGTdaqX4fBxd2svmOts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:58:92:01:17:b9:6b:b4:17:46:f0:2d:e6:fe:31:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477
Validity
Not Before: Jun 16 00:00:39 2024 GMT
Not After : Jun 17 00:00:39 2024 GMT
Subject: CN=bda05283cc0571164dff65369bfdaddbe427905d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:41:71:d5:20:17:80:d9:b6:5c:d6:85:79:b5:
29:51:3f:d4:fe:43:e3:33:5b:b1:c7:23:54:6f:c8:
5b:3c:44:b5:c7:6e:a6:30:c5:00:18:d3:ab:78:6d:
72:75:79:1f:55:b1:3b:8b:58:13:63:76:d0:5f:a1:
01:17:43:5c:ea:31:af:11:b2:08:98:a7:ac:d6:07:
3b:12:2d:88:56:9c:e8:da:1a:8e:e9:8f:65:4d:6c:
c9:0c:75:9a:5e:c7:f7:44:5a:7c:f8:0c:72:64:ea:
2c:a5:86:87:85:7f:f5:e1:e4:1e:b3:fa:f6:e7:db:
23:22:39:20:d3:25:3c:72:2b:49:96:88:cc:7e:da:
50:f4:d4:6d:6f:e2:f0:31:db:f6:cd:2c:e1:71:f1:
32:5f:e2:90:fb:16:63:ab:61:dc:5e:7f:9b:f1:b3:
35:19:ed:54:06:76:dd:93:c9:dc:ad:eb:47:f6:f3:
ff:0a:4f:44:d4:99:55:b9:b0:30:07:2f:88:69:b7:
d5:e6:49:87:67:24:84:df:e3:7c:7a:9a:7a:ca:8d:
41:59:d3:95:81:29:f1:7d:b3:31:01:15:f0:da:cc:
4b:2a:19:a7:26:c2:c0:f8:3e:e8:2a:32:39:97:ac:
cb:9f:f9:50:f7:01:b2:6f:34:77:70:9a:69:aa:68:
43:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A0:52:83:CC:05:71:16:4D:FF:65:36:9B:FD:AD:DB:E4:27:90:5D
X509v3 Authority Key Identifier:
keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ec:83:45:4b:e2:42:98:47:d0:0f:1d:cb:70:d9:fe:92:0b:
64:3f:4d:56:bf:25:5d:60:85:0c:ec:c9:41:74:01:8c:10:38:
ba:53:ae:24:c9:9e:b4:f3:12:02:cf:eb:e3:d5:4f:80:ec:de:
e3:c1:0d:72:c6:ef:79:cc:83:81:76:a6:1e:ba:03:59:27:aa:
a3:4c:1c:a1:9a:9b:12:e9:c2:78:cc:86:7c:79:fc:4b:2b:87:
a6:ab:10:b5:7b:80:a3:f1:d9:7c:fa:34:3c:05:59:2d:42:7d:
f3:80:5a:20:06:9e:14:1c:00:02:e7:98:2b:17:0d:42:5e:e8:
74:85:1a:bb:8a:54:6f:68:a7:1a:dc:a4:dc:c7:b6:3c:ba:9f:
2c:65:1e:3f:19:2a:63:9c:80:e8:ba:9f:2a:83:2a:6d:12:c1:
80:5d:bc:c6:eb:c9:34:74:83:58:2a:2d:2c:96:5f:1b:bd:e2:
5b:7e:49:64:5f:fe:b3:7f:6c:f2:8f:c3:33:dd:31:00:7e:5c:
5b:8f:a9:b7:8a:b4:97:27:86:d6:59:f8:f5:20:85:e8:a6:f1:
c5:26:82:f0:6c:99:88:ec:7c:4c:1d:89:e4:57:c5:c4:5f:46:
19:3a:b9:7d:88:58:78:c3:ad:02:cd:97:0c:9b:d5:4d:fc:f9:
85:80:ee:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:41:04 2024 by rpki-client on console-fra.rpki-client.org