Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
File: KdLa_xxbthoKyLPK6tS4ofooTQ8.mft (raw, json)
Hash identifier: mnjhmFe0+75lwokImI6s8ZScijaWONIDAinHH1eMROY=
Subject key identifier: 4F:CB:17:A9:AB:7A:E5:CD:FA:2B:9E:1E:2E:7B:F3:A6:2E:5C:C1:E8
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019045D4B4125E6C202E929AAD40EEB3887B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
Manifest number: 0F69
Signing time: Sun 23 Jun 2024 16:01:25 +0000
Manifest this update: Sun 23 Jun 2024 16:01:25 +0000
Manifest next update: Mon 24 Jun 2024 16:01:25 +0000
Files and hashes: 1: 0POLPyGh8X6gsCr_Wk8vU9kyTCc.roa (hash: meXkx0tk2+2Z74IpkYHsOxvZy1wu+eWD+9v6AvLyA50=)
2: Do8TOfszJ8hxo42NdxiQJECEVYY.roa (hash: RFKIBqdbWCvs+EOGOYUv59hY4xNcxnj2UIHj9APQvgs=)
3: KdLa_xxbthoKyLPK6tS4ofooTQ8.crl (hash: YLMuSrGDZMmaln5U4z4CnjZLviyS/y8cJK3tPB7Rd8U=)
4: M4GEJKjgavQtnF96rCATgPuzg3A.roa (hash: Rj2wmDBxv8t7qCAhCgAxwV/oZ9QuRDWkuSAznm5MC34=)
5: YMHctJC6wJ_jf-ssAiTCKTZcETE.roa (hash: Umb4KNfCbjZZKAfzjISSupIYr/uKgM7zzQhUvGoJYHc=)
6: cwwMsBQmt2dSzB3OXM--el6uqFw.roa (hash: f6hqMPjXek9jX4nemiOBC8Ph9Z9g+3IduQ/lM811QOE=)
7: pnyLK-cCrpC-aZcmFOyWa274QQ0.roa (hash: 1KFKPNAeLr8tpodqVnznn9n/rkyNL6UvSpc9mQwbJfI=)
8: sYgBlVxRGU0_jLn26MbkQRDKnyg.roa (hash: K3gkw8A60MaDwI9rUYYJrkFJX0rXDtIAsZCAuaSWgeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:d4:b4:12:5e:6c:20:2e:92:9a:ad:40:ee:b3:88:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Jun 23 16:01:25 2024 GMT
Not After : Jun 24 16:01:25 2024 GMT
Subject: CN=4fcb17a9ab7ae5cdfa2b9e1e2e7bf3a62e5cc1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:52:e9:ac:c1:8e:ee:67:76:5c:3b:02:92:63:
9a:a8:d6:ac:28:52:3e:8c:7f:5b:07:1a:c8:75:52:
a5:82:77:8b:3b:59:75:fa:85:c9:e0:d6:0c:6b:80:
e4:d8:8c:d0:17:31:73:a6:4c:0e:17:c8:4b:b1:7e:
75:11:a0:07:2d:1a:95:a7:86:f1:a6:2e:c3:29:3c:
80:bb:4f:9e:7b:03:85:76:30:96:73:63:4c:c1:71:
b6:d6:f7:53:96:ba:b8:c2:77:56:3b:da:22:9c:08:
84:5b:2c:e4:45:f8:e0:96:ef:a2:f6:d9:1a:ed:b6:
9f:4c:8a:3c:6a:ea:f2:f8:f4:9f:94:ac:a0:bc:96:
16:ba:88:2f:ec:67:63:61:89:36:50:3f:04:88:b6:
f3:4b:cc:26:cb:e6:65:84:27:ef:00:b6:72:2e:c5:
a6:a7:68:c5:01:ac:2d:59:83:47:4e:eb:bc:4f:5f:
6b:35:19:ed:0e:83:d8:82:aa:be:0b:1d:5b:b1:18:
f3:b0:71:39:c8:84:33:80:b0:7a:ca:da:ca:a0:11:
7b:39:ef:c2:5f:d8:63:df:26:79:32:02:9a:dd:6c:
81:6b:0e:e0:0a:3d:b9:72:42:ff:99:ac:c2:56:a5:
e2:94:1e:18:f2:08:d6:d4:e3:c0:a0:07:84:6f:02:
91:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CB:17:A9:AB:7A:E5:CD:FA:2B:9E:1E:2E:7B:F3:A6:2E:5C:C1:E8
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:70:2e:c5:bc:46:b3:66:e9:e3:de:aa:79:c9:3f:3a:96:d4:
1c:75:dc:48:9e:70:4c:af:16:66:44:17:b2:45:6a:68:eb:17:
ea:3f:e2:2a:7b:1f:20:2c:ed:c1:5f:1d:be:41:6e:e7:b7:09:
31:f4:2b:09:ba:1f:23:16:19:aa:43:f1:06:29:21:96:c0:95:
19:5c:c2:44:f9:ae:d1:24:1b:c9:c1:da:3f:d1:a5:0d:9b:36:
cb:b7:d5:19:8e:af:8f:8a:05:57:8b:02:56:f9:20:c5:8e:18:
a0:77:d7:06:c1:31:07:0a:d3:1e:2b:55:8b:92:cd:72:c1:37:
8e:e4:d4:03:7a:23:a6:1f:e4:b6:50:a9:78:f8:8b:1d:00:ea:
1b:5a:da:0d:84:a8:c7:9b:27:cf:98:15:87:60:af:cd:cc:35:
3b:4f:6e:7f:96:08:5c:e0:4b:1f:03:48:17:22:7a:b6:64:ad:
69:05:84:49:65:1f:f9:79:86:71:6b:a7:54:bd:a3:1d:6a:0d:
bd:d1:de:98:f5:bc:a1:9b:d0:2b:fd:67:a3:87:f9:40:a8:33:
52:a2:e2:cc:9f:e8:8c:44:ba:31:f6:5e:cf:31:a4:23:3f:89:
bc:72:9a:54:5d:57:0d:9c:74:d2:72:ee:50:85:cb:6c:cb:26:
ca:be:67:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:24:31 2024 by rpki-client on console-ams.rpki-client.org