Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
File: KcIQP9JBfIhpFFYX3pT8yROwhe8.mft (raw, json)
Hash identifier: B7Np/O885aWfoK3y2HwLNF6THcPddz5FI3lQxGFn0vM=
Subject key identifier: 7A:D6:49:62:04:C1:3D:E2:12:65:33:FF:B3:B3:46:77:52:89:05:3B
Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef
Certificate serial: 018F87B6C7F5682C6C0FE21B3A32773CFE0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
Manifest number: 0EFC
Signing time: Fri 17 May 2024 18:00:53 +0000
Manifest this update: Fri 17 May 2024 18:00:53 +0000
Manifest next update: Sat 18 May 2024 18:00:53 +0000
Files and hashes: 1: 1-z0VFzM_9cX7udLeF8Djz6cbsgc.roa (hash: 83UoHtw8nDkwGide2JoUFtdknM1a/lgZvCtKE4bjRdQ=)
2: J1uk3AeynBXMMtIuSSNkGgZJOLg.roa (hash: lACUqTNKkDnhF0lhKQ9/HN46DSL7xQHIKNUVEx0Jrj8=)
3: KcIQP9JBfIhpFFYX3pT8yROwhe8.crl (hash: C1KZCn9vftgLhi2pmlmx81HxlzrJlRGg1UGd2AUQo1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:b6:c7:f5:68:2c:6c:0f:e2:1b:3a:32:77:3c:fe:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef
Validity
Not Before: May 17 18:00:53 2024 GMT
Not After : May 18 18:00:53 2024 GMT
Subject: CN=7ad6496204c13de2126533ffb3b346775289053b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:64:a8:fe:9c:8a:31:da:88:5a:97:1d:f9:df:
40:78:1a:3a:85:19:b9:78:03:9b:dd:28:5d:f2:b4:
03:8a:02:3c:d3:a1:8b:5d:e7:ce:fa:46:30:ba:aa:
1e:46:e2:11:bc:ae:76:36:47:d6:d2:57:02:f3:e5:
46:87:2d:93:e7:ad:7d:cb:19:b8:9f:d2:b4:be:a1:
c8:34:ab:3b:6b:0c:0b:60:95:0a:38:43:7f:da:9e:
a3:4d:c6:82:dd:2b:10:89:0c:e8:07:d4:68:a3:0c:
b5:d4:a8:91:7c:c1:b4:40:e6:19:23:85:47:a8:59:
98:6b:1c:f8:c2:a9:57:18:96:74:09:c7:11:bd:69:
e1:8b:c3:85:ba:6c:54:e7:21:fd:7f:55:0f:af:73:
8d:4f:e9:2c:53:52:64:05:a2:6d:70:46:2a:c4:e3:
32:c0:c4:09:f8:9d:de:b9:b9:9f:3d:cb:0a:5f:11:
73:67:4a:38:5b:7c:c3:cf:70:6b:c0:4f:1a:76:2e:
13:d0:10:23:e4:f1:4f:b8:22:56:f6:26:4f:cb:c7:
b8:ca:3b:b0:ad:2a:77:16:64:89:34:18:81:5f:2c:
e4:3c:1c:6d:7c:74:9c:01:80:b0:8d:4c:b2:2c:4a:
84:88:5f:dd:ed:6f:d0:b9:eb:a0:9b:89:c4:61:99:
ef:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D6:49:62:04:C1:3D:E2:12:65:33:FF:B3:B3:46:77:52:89:05:3B
X509v3 Authority Key Identifier:
keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:20:a8:34:d0:a0:5e:30:e6:1a:d9:04:4c:c3:d4:68:35:0d:
cd:fa:81:8d:f6:7c:8a:41:79:13:4c:10:9f:54:d8:12:7a:26:
02:39:af:95:92:33:16:8f:06:77:6f:b2:a6:5c:d4:54:54:68:
63:51:f6:97:a4:35:3b:1e:f5:e4:24:16:9d:18:30:6b:9a:e9:
4a:33:09:58:b4:37:e7:6a:c3:2f:66:ec:66:07:bf:ae:b2:aa:
8d:4c:6d:2e:bb:c4:9b:66:2d:99:76:e3:ae:ce:32:d4:f3:39:
ff:d7:5b:f9:a4:de:73:5a:b3:e5:ef:d1:e0:ff:29:34:cf:2a:
b0:f6:17:30:a7:76:1c:d2:3c:a0:a3:59:15:a6:31:de:b9:ae:
e0:48:77:00:98:de:65:ef:a8:7f:9f:25:25:ff:20:0b:34:dc:
9d:4f:a7:e3:69:fa:63:ba:e4:77:77:aa:d3:44:5b:61:f7:6d:
4d:27:3a:01:da:08:6b:44:df:04:53:1b:f7:37:0a:24:5e:4f:
f1:ed:36:13:3e:17:1b:b5:b1:5f:d7:70:a1:0b:68:f8:3d:66:
f9:e1:05:5a:bd:4a:ec:a1:e9:06:47:b2:e6:a4:60:3a:92:9d:
a5:d9:79:3e:5c:de:3d:26:b6:ff:fa:30:c1:a7:8b:7b:0e:ee:
6b:ed:38:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:36:00 2024 by rpki-client on console-fra.rpki-client.org