Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
File: kebTJCJXspZbYnj_jBfhb_PwiyE.mft (raw, json)
Hash identifier: +8FCjpJdL/iYvzLAWCfAEIt1yELswNYH0fm1rU5OZTU=
Subject key identifier: F3:D1:1E:30:6C:99:E6:BC:5C:0D:76:5E:E4:C1:63:71:4E:23:07:1B
Authority key identifier: 91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
Certificate issuer: /CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
Certificate serial: 01906D1A7AEF1124DAD7D6CF6BB987FE92F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
Manifest number: 11EE
Signing time: Mon 01 Jul 2024 07:02:50 +0000
Manifest this update: Mon 01 Jul 2024 07:02:50 +0000
Manifest next update: Tue 02 Jul 2024 07:02:50 +0000
Files and hashes: 1: QvXT26CBJOhY9PU5-s5Xj_qplxM.roa (hash: Sdh7mNsaPf//sOTtuyFGrPyb/X5NNTEMxSwwRJU5DTQ=)
2: kebTJCJXspZbYnj_jBfhb_PwiyE.crl (hash: mFaYu471oy+gohgUEiSJaQL4+uG3l9XCCamGaTjN7I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 07:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6d:1a:7a:ef:11:24:da:d7:d6:cf:6b:b9:87:fe:92:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
Validity
Not Before: Jul 1 07:02:50 2024 GMT
Not After : Jul 2 07:02:50 2024 GMT
Subject: CN=f3d11e306c99e6bc5c0d765ee4c163714e23071b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:67:30:86:e0:db:2a:47:69:13:bb:40:bb:38:
7c:3e:fc:f4:f5:86:5b:3c:f4:77:91:23:ab:fc:5a:
56:eb:db:dc:49:66:bb:32:71:b0:52:20:96:bb:75:
8a:88:17:9d:0b:5a:be:f7:89:a5:63:e8:98:49:64:
2b:d6:fe:0e:3f:ff:f6:12:6f:67:fa:2d:df:05:67:
2b:01:51:de:33:c4:80:f3:9e:8d:34:78:89:f5:1d:
1c:ce:df:82:9a:dc:c6:63:dc:85:d0:f4:96:f0:9a:
5d:9f:0f:ed:6f:88:a5:2f:cb:31:5c:11:26:9e:af:
40:1f:b6:3e:c8:c9:1a:2c:be:dd:cb:77:36:b4:33:
51:57:39:f4:bb:29:2f:5e:2a:09:9c:3f:bf:e4:cf:
c2:bb:d4:56:d3:bc:45:b0:e4:fb:a5:39:18:ea:31:
8f:44:6f:f8:c6:04:70:8c:a4:bb:e0:0c:e3:42:96:
fa:87:70:e7:57:e2:f0:22:51:cc:c2:92:23:b1:28:
c7:36:b3:99:b5:90:8d:df:77:23:e6:c2:f1:23:6a:
e4:5c:17:dd:36:15:ea:43:10:b3:4f:1c:a4:26:fe:
ff:0a:6d:30:6e:cd:8c:7c:cb:58:b8:bc:d0:23:1b:
5e:1f:2b:bd:2c:65:5b:48:7c:49:cc:0e:61:1d:49:
bf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D1:1E:30:6C:99:E6:BC:5C:0D:76:5E:E4:C1:63:71:4E:23:07:1B
X509v3 Authority Key Identifier:
keyid:91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:aa:eb:ec:5a:be:ab:af:53:46:81:74:b4:5b:89:16:ce:06:
a3:6f:fa:9b:ce:30:a5:c9:ef:eb:09:17:41:95:66:77:79:f3:
e4:09:61:6f:06:ce:76:1d:0a:45:54:ec:0d:26:21:8f:13:26:
ba:02:e7:1a:47:de:74:b9:1a:5d:69:e3:f2:ce:22:a5:3d:94:
a4:1a:d6:e0:d3:7a:73:86:eb:82:5e:30:fb:22:91:0b:32:83:
49:0b:a4:64:aa:b1:6c:ca:d1:4d:9d:c8:56:a9:ea:9d:0c:49:
14:f2:69:a3:cd:00:2b:f7:b4:0d:d5:8f:6d:ef:6d:19:fb:08:
87:25:72:86:46:7b:fc:74:de:d0:20:af:63:cc:14:ba:3a:02:
54:53:4e:36:67:29:ba:16:96:1d:1b:35:3f:b9:49:af:64:27:
ba:95:61:91:81:39:d0:ff:94:cc:53:00:11:0a:cc:53:41:9c:
c9:f4:3d:29:75:a1:a1:3a:25:26:29:0b:04:8e:3b:40:40:1e:
39:1a:6f:f0:1d:05:cc:82:ae:25:ce:a6:8f:56:90:d9:6c:80:
05:fe:10:99:c9:78:fc:18:9c:ec:93:6c:90:88:db:5b:c2:e9:
82:f2:17:d2:3f:a1:e4:3a:3b:27:83:81:da:b2:1d:91:92:37:
c3:8f:63:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 09:02:36 2024 by rpki-client on console-fra.rpki-client.org