Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/1d34ab-508a-4233-8a6e-f5f8b1a3b428/1/kwSWway6d4n9wOBs8hPuwB7QYJg.mft
File: kwSWway6d4n9wOBs8hPuwB7QYJg.mft (raw, json)
Hash identifier: /T3yGRQKiuMb/8KMFwypz9uMxQ5/JIazgNmGKftVa5I=
Subject key identifier: 1A:3E:B2:E8:57:23:E4:5F:15:C2:A6:76:23:21:B2:B8:28:C5:34:EC
Authority key identifier: 93:04:96:C1:AC:BA:77:89:FD:C0:E0:6C:F2:13:EE:C0:1E:D0:60:98
Certificate issuer: /CN=930496c1acba7789fdc0e06cf213eec01ed06098
Certificate serial: 01903AE4BF6B0081EBDEDED5F9B72443044F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwSWway6d4n9wOBs8hPuwB7QYJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/1d34ab-508a-4233-8a6e-f5f8b1a3b428/1/kwSWway6d4n9wOBs8hPuwB7QYJg.mft
Manifest number: 080D
Signing time: Fri 21 Jun 2024 13:03:08 +0000
Manifest this update: Fri 21 Jun 2024 13:03:08 +0000
Manifest next update: Sat 22 Jun 2024 13:03:08 +0000
Files and hashes: 1: LpTdp3zL-imhvr0a6-bW-0VuFr4.roa (hash: YesSMVOGxt2TfDyUesCYLbCZL98GythDW+w361va3dY=)
2: kwSWway6d4n9wOBs8hPuwB7QYJg.crl (hash: j8yvpr0+GKHIBJykP3BqEqWoC84smkHWQtGRN/UtxKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/1d34ab-508a-4233-8a6e-f5f8b1a3b428/1/kwSWway6d4n9wOBs8hPuwB7QYJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/1d34ab-508a-4233-8a6e-f5f8b1a3b428/1/kwSWway6d4n9wOBs8hPuwB7QYJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwSWway6d4n9wOBs8hPuwB7QYJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3a:e4:bf:6b:00:81:eb:de:de:d5:f9:b7:24:43:04:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930496c1acba7789fdc0e06cf213eec01ed06098
Validity
Not Before: Jun 21 13:03:08 2024 GMT
Not After : Jun 22 13:03:08 2024 GMT
Subject: CN=1a3eb2e85723e45f15c2a6762321b2b828c534ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d9:d8:c2:7f:2d:42:7f:eb:82:d5:4e:13:44:
74:1e:b1:1f:2a:08:ab:f7:ba:ae:0f:3d:3a:75:32:
ee:d0:d5:5e:cf:5d:8c:b6:6c:ee:44:cb:7d:a3:45:
dd:28:ae:85:3d:c5:d4:5d:b2:01:0c:e9:d2:e3:0e:
1c:f1:a1:ce:1a:e2:69:dd:59:1a:ec:43:f8:d2:76:
23:4a:45:55:e1:5e:59:d4:67:51:bf:d2:59:cd:5a:
4b:14:31:5b:5b:87:9b:ad:bd:7b:2a:71:d2:b8:a2:
82:5d:77:c2:52:e1:7b:af:59:45:e0:aa:c4:04:96:
df:a4:53:cc:dd:72:1f:4f:32:31:30:a0:2f:2c:80:
cd:2a:e1:1e:31:0c:18:84:5b:13:2d:f5:f7:a3:55:
9d:47:3b:de:d0:0f:ad:a7:a5:38:74:d0:d7:15:18:
19:b3:08:47:23:50:a9:6e:90:e6:a8:0e:4d:a5:1d:
2c:04:be:26:63:9c:6e:bc:9d:e6:e9:51:1f:71:7d:
c7:04:0b:0f:bd:66:11:16:bc:50:43:53:ad:ba:46:
d8:8f:9e:ae:6c:51:a4:27:99:4f:19:e0:8a:8b:74:
51:61:33:f8:b7:fd:d2:0b:55:8e:79:a4:35:b4:12:
38:f3:e8:1b:e4:c9:1a:9e:fe:41:36:aa:33:5f:0b:
d3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3E:B2:E8:57:23:E4:5F:15:C2:A6:76:23:21:B2:B8:28:C5:34:EC
X509v3 Authority Key Identifier:
keyid:93:04:96:C1:AC:BA:77:89:FD:C0:E0:6C:F2:13:EE:C0:1E:D0:60:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwSWway6d4n9wOBs8hPuwB7QYJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/1d34ab-508a-4233-8a6e-f5f8b1a3b428/1/kwSWway6d4n9wOBs8hPuwB7QYJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/1d34ab-508a-4233-8a6e-f5f8b1a3b428/1/kwSWway6d4n9wOBs8hPuwB7QYJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:54:7c:95:1d:ce:6a:23:69:f4:f0:80:45:3f:ba:93:cc:1d:
43:c4:08:ac:8b:e9:45:c2:d9:db:1c:9f:52:39:3c:96:3e:d6:
64:1d:24:c6:19:84:4e:87:d9:22:5c:05:a2:e1:55:47:4a:13:
40:fa:77:9a:9c:80:62:bb:24:90:87:5c:aa:0e:36:60:2b:d6:
45:d9:fa:57:bf:3b:22:6e:8c:5d:29:19:6b:66:b8:0c:c6:2d:
af:bc:7d:63:0f:f4:fb:18:00:c1:10:2e:4e:0d:91:ed:a7:1b:
0f:5a:72:ef:90:74:61:c9:d6:fe:7e:84:d5:7c:7f:4c:9f:50:
73:17:66:44:97:60:10:81:ff:8c:b5:0b:52:3c:1c:84:8d:f1:
a7:21:9e:47:4a:42:f0:09:69:aa:30:bc:99:52:47:e5:52:56:
56:6b:81:3c:08:84:92:c0:0f:4a:5d:bb:db:b9:36:10:26:d6:
b4:60:27:28:a6:08:8d:61:7d:7b:6f:bc:72:b9:48:80:bd:6b:
12:b2:c2:a6:42:66:32:15:17:52:a4:91:49:11:c1:e0:79:6d:
fe:77:df:1d:aa:6e:10:f2:2c:92:c8:5b:6c:84:11:5c:f9:a4:
9d:ba:ac:38:07:35:be:93:6d:9c:e4:59:ab:67:1e:20:5a:9b:
29:25:ed:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:49:48 2024 by rpki-client on console-fra.rpki-client.org