Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
File: KSjbJBVB1ramSQAEBgqnGtbsGJw.mft (raw, json)
Hash identifier: OY5DLk9t1Da76m2MgHsbgcGBY0oMlsBYsdDBhxb/nI4=
Subject key identifier: 14:C5:1E:94:E6:CB:66:37:4B:3C:FA:59:DA:F5:0A:63:91:AD:CC:B5
Authority key identifier: 29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C
Certificate issuer: /CN=2928db241541d6b6a6490004060aa71ad6ec189c
Certificate serial: 018F87ED48AB734366DF69E42CF72BFCB740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
Manifest number: 0F82
Signing time: Fri 17 May 2024 19:00:25 +0000
Manifest this update: Fri 17 May 2024 19:00:25 +0000
Manifest next update: Sat 18 May 2024 19:00:25 +0000
Files and hashes: 1: 3oG6-cbrHjZ7t8EX9F84J7Fteeg.roa (hash: 1uanyM3IROEPqMnrktoJlVCWETy2nq0mbitq+qxl3HM=)
2: KSjbJBVB1ramSQAEBgqnGtbsGJw.crl (hash: tC2PAOgv0xmjFxWX5GXuH8veqxMVjq6FZFUVq/6QCkc=)
3: cDk6SNrWIYfeQv6n0TF-iFDMb70.roa (hash: JF+lRWFvj3PJrLeIWoMNIbJ9ykg1P5zZJNFnrADV2Po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:ed:48:ab:73:43:66:df:69:e4:2c:f7:2b:fc:b7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2928db241541d6b6a6490004060aa71ad6ec189c
Validity
Not Before: May 17 19:00:25 2024 GMT
Not After : May 18 19:00:25 2024 GMT
Subject: CN=14c51e94e6cb66374b3cfa59daf50a6391adccb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:48:a0:3c:6c:53:97:43:a5:3c:8c:51:4a:
41:33:2c:d7:82:8d:3d:e2:2e:1f:97:eb:56:a1:ab:
69:95:e3:33:14:b2:43:7c:d3:67:35:02:9c:f8:a3:
7f:3b:b2:c8:4c:9e:73:de:19:c6:cb:72:23:fc:3d:
5e:fa:fd:dd:69:09:c3:67:98:13:ee:ec:f9:29:e8:
e6:0e:a3:de:7c:de:1a:3f:3a:92:df:38:96:5f:af:
fa:4f:58:d5:1e:e4:46:c1:c0:3f:13:af:f3:44:4e:
3d:3a:02:79:ef:d9:e0:5c:0f:21:6a:fa:23:a5:9e:
44:db:1e:09:19:9a:db:61:79:e9:20:6e:bc:0d:0b:
f1:78:ac:96:e1:8f:f5:95:97:56:1d:62:55:56:20:
62:aa:d6:7c:af:d1:af:ca:2d:3c:c5:83:f7:0d:5f:
d1:af:14:b0:18:7d:cb:c6:53:3d:ac:28:79:6c:62:
c2:f5:e8:ea:8e:df:1d:e4:a4:19:5b:a0:69:4c:0c:
c1:97:fc:49:48:c9:d4:fd:f2:cd:d7:7a:c9:62:cd:
4d:75:aa:8e:b1:9d:7f:1a:60:b7:5c:81:75:1d:fb:
87:b5:03:a9:bc:55:5e:1f:d8:2e:77:26:24:54:d9:
95:25:79:68:86:41:e3:61:d0:0b:24:09:cb:86:64:
38:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C5:1E:94:E6:CB:66:37:4B:3C:FA:59:DA:F5:0A:63:91:AD:CC:B5
X509v3 Authority Key Identifier:
keyid:29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:3e:61:16:e9:14:dc:c9:e9:dd:3d:b2:09:ef:65:4a:25:90:
16:22:4d:f9:a2:78:bc:89:d3:5e:7c:07:31:a7:2e:e7:b1:1f:
a0:ba:b7:ab:04:b1:b9:a6:da:2d:ea:ae:28:8c:df:f9:ae:fe:
d7:bd:56:b3:30:dd:de:4f:da:66:b5:54:b4:84:d8:5e:7a:30:
90:37:2c:6a:ad:c3:a5:3c:0f:cd:3c:86:59:4f:af:22:7b:5b:
0f:12:5b:6f:34:42:c2:61:f4:de:fa:74:aa:cf:75:22:4b:e2:
8b:bf:1f:b3:37:ea:ab:63:f5:d1:58:52:8b:92:d1:45:71:fc:
99:f4:4a:76:78:7f:a0:eb:f4:ee:b2:89:48:f4:db:d2:ca:44:
88:99:17:25:d0:94:4b:db:24:39:00:c2:f4:d9:7d:c6:d7:8d:
cc:2b:b8:bd:46:83:37:3e:12:fc:80:d8:71:ce:9f:95:76:97:
ac:86:13:28:3f:95:2c:20:8d:39:b2:e6:cf:49:56:c9:bc:a7:
c6:fd:2b:4e:ed:60:2a:2f:5c:72:2b:e9:7b:26:2d:6b:49:9b:
71:4d:75:f0:01:7d:7f:11:89:00:3e:0d:ed:08:8e:d1:10:f7:
bf:88:1a:4d:91:57:b8:4d:2a:5b:b1:88:4c:83:10:b3:72:6c:
e8:fd:61:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:35 2024 by rpki-client on console-fra.rpki-client.org