Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft
File: kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft (raw, json)
Hash identifier: PcO4iypUzJKjKQ72KH9Ot5JMPG4dftloIyS3Ea2yXi0=
Subject key identifier: D1:C7:6E:DE:BF:E5:30:44:11:35:92:2E:AE:D2:BC:9D:48:E0:45:6D
Authority key identifier: 90:C3:CA:E8:65:55:68:73:24:31:9D:12:26:93:8C:70:3E:E4:ED:C1
Certificate issuer: /CN=90c3cae86555687324319d1226938c703ee4edc1
Certificate serial: 0193587763EFEA19F25DE16E199DD0EA4DED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft
Manifest number: 03C7
Signing time: Sat 23 Nov 2024 10:00:39 +0000
Manifest this update: Sat 23 Nov 2024 10:00:39 +0000
Manifest next update: Sun 24 Nov 2024 10:00:39 +0000
Files and hashes: 1: QjAz9IeXGkuh2PcMhTolLRNqpis.roa (hash: ThQFpmSt1Foyss9wRQ7U7lRbA/MGQ+5sttGIXaP5ts8=)
2: kMPK6GVVaHMkMZ0SJpOMcD7k7cE.crl (hash: wFIUDxOffDXbqMKjFicQiS1c5g6KjqjtMEAzINh1iQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:63:ef:ea:19:f2:5d:e1:6e:19:9d:d0:ea:4d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90c3cae86555687324319d1226938c703ee4edc1
Validity
Not Before: Nov 23 10:00:39 2024 GMT
Not After : Nov 24 10:00:39 2024 GMT
Subject: CN=d1c76edebfe530441135922eaed2bc9d48e0456d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:71:e3:47:4f:fd:b0:9c:21:e5:e4:05:8f:
91:e4:83:7d:89:52:ea:ba:68:65:12:34:c6:2b:60:
d8:62:c6:4c:21:84:5a:13:02:02:60:5e:5c:7c:8b:
2b:7d:da:4d:f0:c5:40:24:f3:9f:ac:ae:15:f5:93:
08:c0:aa:df:2f:e4:4e:7b:a1:a2:69:fa:e3:d1:e9:
ad:73:31:72:86:b9:7f:5b:1b:eb:c3:1c:1b:87:4a:
11:5a:d9:db:75:1a:7f:62:c6:89:bb:f1:91:c0:03:
d9:1d:39:02:6c:e1:ce:94:8a:43:e6:2d:95:4a:b7:
70:33:ed:16:66:6e:c5:26:cb:ab:5e:5f:21:98:d5:
79:37:ed:ee:7d:30:7d:1a:5a:ef:1d:d1:34:78:18:
c8:00:91:cc:e7:4f:ae:61:8f:d9:a4:3a:83:fd:db:
e5:3b:f9:0f:bb:17:8d:57:72:c9:fd:66:2e:08:f6:
f5:69:d5:a1:0b:95:85:3e:9d:b8:8b:a7:3a:27:b7:
0b:30:ef:16:f8:42:70:73:1d:8e:81:a6:66:45:77:
22:52:d4:f1:42:cd:fc:87:cf:55:e8:e0:56:21:ce:
f5:40:76:44:db:8c:89:63:19:c6:3c:7b:56:92:70:
6c:bc:61:08:93:4a:31:5d:eb:24:7a:62:72:b5:a7:
a9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C7:6E:DE:BF:E5:30:44:11:35:92:2E:AE:D2:BC:9D:48:E0:45:6D
X509v3 Authority Key Identifier:
keyid:90:C3:CA:E8:65:55:68:73:24:31:9D:12:26:93:8C:70:3E:E4:ED:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:be:9a:fd:ab:12:c2:2e:ec:82:4b:96:d1:47:f1:66:66:b0:
b6:e9:40:9c:f9:5d:72:8d:73:f7:16:74:96:2b:58:52:60:79:
27:2b:5f:72:a5:b8:3f:2f:85:3b:02:b7:c2:2b:9f:73:6e:59:
54:68:6c:e3:90:b0:be:0b:6b:0a:d4:24:f4:72:98:39:c9:e6:
78:96:91:a7:96:78:de:0a:2a:5b:5b:54:07:99:f4:5c:b5:e4:
27:c7:2c:63:8d:c2:7b:1c:c8:44:c3:0d:18:ee:83:a7:58:a6:
20:3e:df:4b:55:d0:5d:e2:66:58:54:ea:40:56:5a:99:86:26:
11:eb:1a:52:0c:54:0a:bf:21:8f:3e:ad:35:39:3a:2d:66:2e:
f2:27:66:af:99:34:9d:2d:c5:8a:a9:46:66:16:a8:22:c6:ed:
dc:9b:67:cc:f2:b0:0e:d2:f0:fb:32:c1:2c:8c:19:06:81:1a:
37:4b:41:56:fc:fc:9b:e1:5f:a0:ec:18:d4:49:26:45:a8:37:
ad:5d:8b:12:25:85:26:c3:c6:2b:9a:30:1b:c1:34:84:aa:4b:
f4:8e:9a:1e:68:35:0c:38:82:b9:33:a4:67:b0:d7:5c:56:3b:
08:16:62:26:ac:3d:58:fd:8e:f2:ca:ef:64:51:2a:28:35:eb:
4b:68:4a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:00:30 2024 by rpki-client on console-fra.rpki-client.org