Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft
File: ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft (raw, json)
Hash identifier: jmkjJFsJtBW7J68NWtYQDi9dRxvy3zeeA/v9PoClVVU=
Subject key identifier: 21:B0:67:A0:47:E1:93:90:E6:1A:4E:FE:24:03:20:D5:F9:4E:67:3E
Authority key identifier: 72:42:A1:37:15:FC:55:78:CD:C0:5A:AA:A6:8C:6A:41:3C:DB:C9:F5
Certificate issuer: /CN=7242a13715fc5578cdc05aaaa68c6a413cdbc9f5
Certificate serial: 01904152AE8A8D36A79E7CAD4773EA587FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckKhNxX8VXjNwFqqpoxqQTzbyfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft
Manifest number: 11D9
Signing time: Sat 22 Jun 2024 19:00:55 +0000
Manifest this update: Sat 22 Jun 2024 19:00:55 +0000
Manifest next update: Sun 23 Jun 2024 19:00:55 +0000
Files and hashes: 1: ORR2xlrxhGgbv04xpTdEmIm1wdo.roa (hash: wjnzYz92RrH8gchoTBMBWcZzKVL6neVyvShnEezsMLI=)
2: ckKhNxX8VXjNwFqqpoxqQTzbyfU.crl (hash: 1igTQJZ8CtQu1ACIIhTrdEk78E2dFXYt+sbIeOTjQ/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckKhNxX8VXjNwFqqpoxqQTzbyfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:41:52:ae:8a:8d:36:a7:9e:7c:ad:47:73:ea:58:7f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7242a13715fc5578cdc05aaaa68c6a413cdbc9f5
Validity
Not Before: Jun 22 19:00:55 2024 GMT
Not After : Jun 23 19:00:55 2024 GMT
Subject: CN=21b067a047e19390e61a4efe240320d5f94e673e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:64:b3:a6:ce:84:ca:d6:a8:ed:bd:9b:32:
72:90:e3:92:e7:6c:1c:ec:35:6a:f6:6a:f8:2d:07:
a1:fa:97:86:44:64:a4:d9:60:aa:64:de:9d:5b:e1:
61:6f:57:78:1f:77:5b:63:8b:ad:77:5b:14:b8:92:
e3:4a:44:5b:2b:f8:19:6b:26:a4:5c:86:3c:f1:9b:
59:b9:6e:9e:c8:24:39:cc:32:a7:9d:ec:2b:9a:6e:
cf:e1:64:b2:74:38:00:de:46:d7:8b:fd:45:62:f0:
49:f8:a1:ab:2d:8c:9f:0d:db:bf:9d:df:99:a0:44:
eb:8d:49:94:ba:69:e2:d4:63:3a:8f:d9:75:24:7a:
67:e5:5e:f6:7c:e9:82:31:a0:b6:4a:57:17:21:60:
97:62:ac:ca:99:49:ac:57:fc:43:d7:72:f9:83:48:
59:a7:d6:09:e4:e3:89:b1:a2:fd:20:d8:cb:54:0a:
24:7f:16:0f:f2:80:a2:42:1c:29:7b:d8:5b:95:7d:
d6:75:30:73:8a:d2:53:a3:8c:e9:74:97:d2:ad:cf:
e2:af:04:1f:c2:8c:6e:9d:a5:b7:3a:e6:f4:e4:30:
02:80:08:b1:2a:9c:cb:98:56:fd:d9:f8:d6:62:cf:
0c:d2:1f:93:87:29:bd:00:9a:2d:d7:40:63:84:bd:
6a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B0:67:A0:47:E1:93:90:E6:1A:4E:FE:24:03:20:D5:F9:4E:67:3E
X509v3 Authority Key Identifier:
keyid:72:42:A1:37:15:FC:55:78:CD:C0:5A:AA:A6:8C:6A:41:3C:DB:C9:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckKhNxX8VXjNwFqqpoxqQTzbyfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c7:84:c8:63:16:eb:f6:07:a7:16:8d:a2:70:dc:ed:e4:82:
a9:90:a4:44:58:87:87:65:9e:ff:c6:7c:99:a0:4e:a0:af:20:
13:8e:09:25:72:94:19:70:e5:43:e4:16:8a:47:d9:0f:e8:24:
74:03:51:23:ee:74:5c:71:da:de:e1:c7:49:6f:35:e8:e6:c1:
10:ac:85:1c:31:63:dc:85:e2:a7:e4:ac:47:52:34:db:c5:2b:
20:1b:af:47:0c:54:d2:c8:cd:f0:09:51:29:da:fe:36:e9:68:
ca:c4:7f:06:5f:a7:10:21:b7:11:4d:48:bb:70:7e:98:87:24:
84:91:4e:61:a1:fc:a9:5b:e2:8a:65:f5:d3:bc:54:65:a9:72:
d5:ef:aa:f4:61:a9:8f:44:49:d1:65:2f:86:44:a1:05:4a:d2:
3e:a1:67:93:41:d7:7e:de:e5:76:c6:21:60:62:b6:60:cb:d0:
9d:e4:88:9d:01:8c:c1:42:40:88:38:a6:be:7a:2a:de:eb:bf:
83:46:40:32:3e:41:2a:69:97:3b:1f:f7:94:fa:1e:4e:c9:1e:
cd:35:50:29:81:99:5b:4d:fc:60:63:08:52:21:c0:75:b4:47:
50:8e:06:5c:e6:26:69:c6:5c:f1:e1:d8:53:3e:b0:71:38:2e:
a1:d4:b9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:29:10 2024 by rpki-client on console-ams.rpki-client.org