Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
File: KXNk9QJTTodxoMYll5TCbibUvKQ.mft (raw, json)
Hash identifier: cdxqWCcQpZ7RYJmrYe9y5ySrxYeI4YrpunIGlf0gPsY=
Subject key identifier: F6:F3:A8:57:55:CB:69:DA:86:09:18:5B:30:3A:0A:AB:AD:C4:B9:47
Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
Certificate issuer: /CN=297364f502534e8771a0c6259794c26e26d4bca4
Certificate serial: 018F855BBED9436FCC7AA4B272E0CA78EB43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
Manifest number: 0FE2
Signing time: Fri 17 May 2024 07:02:13 +0000
Manifest this update: Fri 17 May 2024 07:02:13 +0000
Manifest next update: Sat 18 May 2024 07:02:13 +0000
Files and hashes: 1: 0uZ_81E-aEBMHX6dZ6efu60Xfg0.roa (hash: L6uioRLfv8ukNb9irfp63+sGqiDtGyMvcrx9h0Tdlg8=)
2: E8CAkQ4LJUcQaWtspCNeYcPI85s.roa (hash: Vp6sG1GuE3ENUqREFocKIM9fHT4AHMy8iYVQD7bKIL8=)
3: KXNk9QJTTodxoMYll5TCbibUvKQ.crl (hash: w5i/wz7XK61uaPx+HeXldDiP5hLZGHItQW/vi2JIGC4=)
4: T1NeGE98oOylZOGfWhPHxvKxkSw.roa (hash: hHSKAXzTpsoZOszTpVgTJecL4NSKa2uAjcwrDoCYbiw=)
5: _EzXQ96pOS2QwTQMqye_Bj0PsXM.roa (hash: C8mvVtMxqjzoZXooEtLw2Q/N6Lhp5sPcTUspZ2/jnq4=)
6: m6gVz404FioMKAvRIrGtOCv7MGU.roa (hash: 6dF/3slugrIKRmGc8ixVcD4fl2cILY2OcJZQ/DlL4qo=)
7: nrU7JcSwbPFoXvW4YdUedQ3XMZE.roa (hash: U5fVVEEDXRDvSyRVaarpbuLbFCPqd2tzZJpPWHnipuc=)
8: ylSqRAU8TDvYnpp3xgEE8eOXK84.roa (hash: P7AJEPUgG3VwJhcoBPvJLvG0/uwPluFWWOqQGCt2rzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 07:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:85:5b:be:d9:43:6f:cc:7a:a4:b2:72:e0:ca:78:eb:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4
Validity
Not Before: May 17 07:02:13 2024 GMT
Not After : May 18 07:02:13 2024 GMT
Subject: CN=f6f3a85755cb69da8609185b303a0aabadc4b947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:55:48:4b:c2:e9:98:da:00:67:f4:19:08:88:
8b:f0:77:f7:37:5d:81:c9:99:a7:a2:50:95:82:00:
09:0d:00:d8:b0:1e:7b:9b:42:95:71:12:02:f3:6a:
25:67:41:3d:08:a1:62:28:8c:70:bf:53:ff:cb:18:
61:b4:3a:9c:a1:b0:f5:39:47:2a:e7:fc:d8:aa:95:
3c:70:b2:2b:e8:c6:2c:04:5f:ef:f7:82:aa:eb:29:
ab:88:08:f8:39:77:79:e0:0c:4d:3d:f8:b1:ce:1a:
15:a6:31:76:21:88:86:d1:df:77:0e:8f:93:a9:36:
3e:b2:bf:1e:f6:a1:1e:0e:ff:db:8e:4d:33:19:8d:
d4:ba:70:73:3b:71:4d:34:80:19:56:16:fa:22:ff:
81:ad:61:8a:bf:3e:82:42:24:df:e3:90:e3:f2:b8:
49:8e:bf:6e:86:ef:87:2e:12:31:d3:fc:3a:6a:b3:
78:a7:3a:4e:76:c2:f1:b6:55:c0:1f:f7:ba:9e:40:
db:a4:e9:c6:6d:e9:68:b3:3c:a5:a4:fc:36:7d:34:
f8:7b:32:c3:44:70:dd:c2:97:04:2a:f4:e1:84:04:
64:54:c9:f0:76:19:2d:c4:1f:36:9a:e0:52:4b:2e:
01:9f:5d:36:2f:d6:d8:27:dc:a9:43:1c:4f:1e:27:
47:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F3:A8:57:55:CB:69:DA:86:09:18:5B:30:3A:0A:AB:AD:C4:B9:47
X509v3 Authority Key Identifier:
keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:44:fe:ed:1b:69:72:ae:eb:5c:f6:b5:66:5a:ed:b6:87:77:
ce:50:eb:fd:eb:12:fc:78:2d:63:2e:c7:de:3a:47:52:e3:9f:
43:f4:57:66:b9:9c:8b:72:2b:9f:8e:05:84:8e:84:74:dc:8a:
e1:1f:95:9d:95:d2:7c:7d:5e:72:b1:03:10:10:9c:23:04:75:
df:08:25:4c:68:02:8f:05:b1:5d:4c:aa:34:a7:2f:fb:23:fe:
fa:fc:f7:b1:f3:0f:22:c7:da:cd:d4:b4:7f:5a:51:f2:b1:c3:
bc:3d:2d:9a:30:6d:47:80:c9:b7:10:79:17:e8:29:43:ac:bb:
3d:d5:99:27:bc:9c:39:3b:59:9a:5e:5d:8e:fe:07:bb:c2:4c:
45:17:e0:7c:03:d1:1c:df:b2:26:6e:a2:20:17:0c:43:2f:e6:
45:dd:59:a7:d5:f2:23:95:3e:af:f9:d9:14:d8:ff:ae:45:8b:
1d:ef:e6:47:a8:c2:83:ca:56:b9:ba:41:b4:27:cd:60:f5:7e:
d2:fc:71:4d:64:b5:46:38:c5:35:c2:35:b6:ca:be:2a:fb:3f:
0b:ea:4d:e7:29:f8:fe:5e:74:7b:7c:c4:5a:dd:f1:fc:9e:87:
9a:86:44:d2:31:6a:15:cd:97:64:e2:25:2f:3d:53:e0:6f:9b:
17:b9:d2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 15:42:33 2024 by rpki-client on console-ams.rpki-client.org