Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
File: mk123S9GBosIca1FAKxuV3r-Rpw.mft (raw, json)
Hash identifier: ydXEdnSV9TIGXHV02/d1InuBceJd1U3NEyjXdSelTQI=
Subject key identifier: 29:A2:EF:1E:BA:0C:9A:2E:C4:F7:A3:08:0A:AC:50:59:74:BA:B3:1D
Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
Certificate issuer: /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Certificate serial: 01901D7CE3EF52D01C88BD7BA9C3C2FB8C19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
Manifest number: 11CF
Signing time: Sat 15 Jun 2024 20:00:42 +0000
Manifest this update: Sat 15 Jun 2024 20:00:42 +0000
Manifest next update: Sun 16 Jun 2024 20:00:42 +0000
Files and hashes: 1: LPsCS7FLfHSisbPRU7jsmHTJbf8.roa (hash: rdqooSA2ushWxelR9N5DAHKj5gcFOBavV0gt7Qqk0Dg=)
2: liPbIzkz79MDLIxDc5Q1z4LPdSM.roa (hash: BiV1dA+mvXWAkFGjfyWJPrCby1Fn3sF4fAf0tp9W+R8=)
3: mk123S9GBosIca1FAKxuV3r-Rpw.crl (hash: jHwcjjp+Faq2ro0/SNNjArnDYJvGMvMtDs05alKCYWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:7c:e3:ef:52:d0:1c:88:bd:7b:a9:c3:c2:fb:8c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Validity
Not Before: Jun 15 20:00:42 2024 GMT
Not After : Jun 16 20:00:42 2024 GMT
Subject: CN=29a2ef1eba0c9a2ec4f7a3080aac505974bab31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:60:a6:1e:e3:18:dd:0a:f8:63:70:9c:87:df:
4a:49:ea:8e:9c:67:17:94:09:d6:43:e8:f0:b0:73:
68:1c:cc:ea:af:00:57:7e:b0:80:01:98:64:f3:27:
2a:9f:c8:d0:1e:32:ea:03:15:e9:b9:a7:61:91:74:
86:96:b2:19:10:b4:32:e0:bc:bd:4b:83:91:df:45:
62:3c:bc:9e:f3:39:67:49:e6:49:80:e7:60:86:f8:
cf:3c:50:57:a8:ad:ba:18:9f:cb:04:bd:75:79:cf:
97:99:f9:05:9d:6a:22:61:8f:5a:dc:e2:0e:c8:52:
71:ea:8d:00:f6:d8:3d:70:99:f7:28:df:93:83:36:
b1:c8:01:5b:fc:13:c8:46:60:36:1a:8a:b6:8c:aa:
7a:22:4b:1c:ce:ba:c1:1a:b3:b4:5e:2a:92:4e:d8:
ca:78:6e:6d:31:69:89:8e:d9:22:6c:15:73:0b:c3:
bd:68:d1:b8:72:90:7a:cd:53:f0:ee:38:28:5f:99:
5d:2c:de:fd:8e:df:d9:ac:93:a8:2d:c6:a7:ec:e2:
84:4a:cf:ec:23:04:17:2b:06:46:d9:30:84:82:aa:
85:8e:c7:d2:f2:92:b5:10:a5:be:6e:7e:3b:5d:64:
5a:ae:9e:18:45:35:b7:01:2a:9f:92:36:69:0a:ec:
9a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A2:EF:1E:BA:0C:9A:2E:C4:F7:A3:08:0A:AC:50:59:74:BA:B3:1D
X509v3 Authority Key Identifier:
keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:88:02:f5:47:1b:56:b6:9c:27:01:6b:7c:a6:60:6e:de:20:
89:12:f7:e8:78:2c:86:64:20:dd:ea:05:31:c9:82:80:07:a8:
c5:3b:02:28:1b:41:b2:f2:bb:fb:e2:ed:8f:af:e8:0a:a1:9e:
cf:90:c4:a0:3b:a7:a9:70:ff:82:db:5b:ba:a3:13:58:e6:7c:
67:b0:3b:75:56:52:f7:ba:d6:17:41:da:53:5a:4b:32:80:6f:
d4:51:2b:0f:e3:9b:19:2e:31:d5:13:ce:24:d6:6c:70:89:77:
b9:d3:da:10:c0:1e:3a:be:4f:6e:06:16:c2:5f:ef:5d:64:10:
93:ce:de:53:ab:86:9f:51:33:e8:45:18:46:1b:29:06:50:a1:
84:e1:c6:1a:31:22:2f:3f:f3:93:36:14:e5:07:27:12:b8:b4:
0e:2c:c5:31:a8:c9:24:fd:47:2c:4e:87:bc:d2:29:4f:5b:b3:
ab:b3:be:62:a3:83:83:c6:73:f7:7b:24:c5:e7:4f:b8:07:76:
1c:98:95:2c:ec:c4:d8:20:16:0a:e4:73:88:1e:c6:ed:f7:b9:
12:9e:f1:cd:5b:d0:c1:bf:1e:a9:bc:eb:27:47:f6:2c:7a:b4:
09:a8:18:68:2f:32:6a:e9:5f:d0:62:b3:3f:11:ab:62:f0:28:
38:fe:14:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:35:11 2024 by rpki-client on console-fra.rpki-client.org