Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
File: ktkImo4yjTLW3hbX2iV7gRsFI50.mft (raw, json)
Hash identifier: 3selWBuTXPbUouCz28FdhV43DTpD7z0wTIRNvPqF5AI=
Subject key identifier: 0D:8F:A3:36:DF:3E:84:C1:31:38:5C:B8:62:AF:CA:FB:4E:96:31:54
Authority key identifier: 92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
Certificate issuer: /CN=92d9089a8e328d32d6de16d7da257b811b05239d
Certificate serial: 0193523E01CF77980BBAABC8704608060991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
Manifest number: 02C9
Signing time: Fri 22 Nov 2024 05:00:15 +0000
Manifest this update: Fri 22 Nov 2024 05:00:15 +0000
Manifest next update: Sat 23 Nov 2024 05:00:15 +0000
Files and hashes: 1: 33hLGtTlOfBUBiCHtmMi_GE4T3o.roa (hash: HYKkGn7up2kMwvN1mtbiZWOX32fMafQmlN4dT29qY4k=)
2: PDR7iFzlcevvX1CYurjtsCmFS3Q.roa (hash: pq/Wsj2UqHMOUlN0FXDQs03uYxflZiJkrRluD4xU5Ro=)
3: ktkImo4yjTLW3hbX2iV7gRsFI50.crl (hash: uaeabOtMYGddquZWSJrrvJEXvC4vMKA32bQIaHJAeME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:3e:01:cf:77:98:0b:ba:ab:c8:70:46:08:06:09:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d9089a8e328d32d6de16d7da257b811b05239d
Validity
Not Before: Nov 22 05:00:15 2024 GMT
Not After : Nov 23 05:00:15 2024 GMT
Subject: CN=0d8fa336df3e84c131385cb862afcafb4e963154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0d:ef:87:6f:78:11:4e:8e:3c:80:ed:ad:20:
bd:87:62:cf:d6:a1:ca:53:b6:c6:c0:2d:b2:e1:2c:
1a:8c:98:dc:02:68:d2:da:b6:5f:c3:64:f2:19:a2:
55:d5:5f:2b:c1:95:b4:4d:c2:8e:d3:68:69:e1:73:
a5:37:15:e9:0c:96:f1:a6:b8:38:d5:3a:26:31:af:
1c:55:c5:7b:43:ac:8e:ed:f3:2f:1f:4a:9b:7c:a1:
cb:19:7b:b6:1c:4b:9c:90:db:4e:73:dc:8d:c6:66:
37:aa:06:eb:01:84:67:fe:9c:dc:27:89:a2:fb:82:
15:4b:82:35:51:84:22:67:b3:a9:9c:04:95:46:3e:
fa:9a:93:71:3a:69:8b:06:9d:52:1a:ab:0c:da:d9:
bc:80:d7:60:28:33:dc:35:d6:23:3c:1f:c9:61:23:
01:1c:49:eb:60:83:15:80:68:a6:de:5b:6e:0d:72:
9d:0d:19:55:ee:46:3f:f9:32:37:5b:fd:73:05:1c:
3e:64:f8:08:bb:52:5c:8a:db:f6:ae:84:ef:31:f7:
b8:22:61:12:66:37:93:a6:4c:d4:7d:48:0d:38:b0:
71:e1:32:d8:6f:be:27:7e:28:bb:6e:d5:fe:02:78:
b1:f6:2c:ec:4a:1e:ff:af:77:ed:f7:29:a4:3a:b0:
b3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8F:A3:36:DF:3E:84:C1:31:38:5C:B8:62:AF:CA:FB:4E:96:31:54
X509v3 Authority Key Identifier:
keyid:92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ac:aa:d7:92:96:fc:3a:37:bb:2e:e2:d8:2d:b1:c2:56:27:
c9:0f:93:86:c2:e0:ab:b7:e1:a6:fe:7d:2b:0f:c2:99:31:71:
28:0a:74:78:ad:88:7c:2d:56:c2:37:6f:5c:ff:e9:7c:0a:85:
8e:6d:7a:62:73:78:4d:c9:2f:71:5a:41:37:73:52:70:a7:91:
fa:03:56:f5:5f:28:2f:53:33:f6:c9:1d:52:fb:d6:1c:0f:f0:
3c:9c:a6:67:4d:68:97:41:3b:24:35:29:ce:87:73:ae:b2:6f:
9f:cc:a5:df:89:b5:19:7c:72:bc:2a:92:e4:ce:95:aa:b9:b3:
17:18:aa:52:b8:76:36:8f:1c:f3:c9:5b:dc:15:18:57:e8:46:
9a:49:94:7a:5f:41:aa:76:70:78:66:38:b7:80:44:6d:c2:cc:
fc:f8:84:df:d4:f3:52:7e:f6:ea:4b:09:b8:21:37:e7:e0:39:
3f:9d:49:94:aa:f3:58:22:e7:72:a5:06:63:a1:39:c8:db:12:
5a:38:3e:57:b9:aa:c4:16:5a:55:14:a9:d1:c2:59:53:e3:eb:
8c:3a:1c:3a:45:09:c9:00:ed:f9:ca:82:8d:55:3c:13:5b:e4:
fe:72:03:29:fb:d8:0d:99:20:b9:95:6e:e8:06:ae:bd:3f:df:
9f:dd:e6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:51:35 2024 by rpki-client on console-fra.rpki-client.org