Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
File: kd0jFN2bfGHXHU2-2o-jllxCRXA.mft (raw, json)
Hash identifier: WfRN4d9WHbCuHhaISW8RTBUX6SM89tTLmzEPuvsOBnI=
Subject key identifier: A1:B0:AF:79:98:06:73:D7:FE:08:6D:F3:E0:41:4F:D8:8E:68:D5:D9
Authority key identifier: 91:DD:23:14:DD:9B:7C:61:D7:1D:4D:BE:DA:8F:A3:96:5C:42:45:70
Certificate issuer: /CN=91dd2314dd9b7c61d71d4dbeda8fa3965c424570
Certificate serial: 018F88247643D2E5865953BFBE7F27AB7709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kd0jFN2bfGHXHU2-2o-jllxCRXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
Manifest number: 0E35
Signing time: Fri 17 May 2024 20:00:41 +0000
Manifest this update: Fri 17 May 2024 20:00:41 +0000
Manifest next update: Sat 18 May 2024 20:00:41 +0000
Files and hashes: 1: 7qc0Hlc62z5Fv4N4LQuJefLhjFA.roa (hash: /N00yeSECcMe8P8ZcFEYULrS/A7POeUoWR0cJz47glU=)
2: kd0jFN2bfGHXHU2-2o-jllxCRXA.crl (hash: LCyI2INqD5uz0oRRrF5zP/E5W6sG+U4YJJjglqMB67U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kd0jFN2bfGHXHU2-2o-jllxCRXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:24:76:43:d2:e5:86:59:53:bf:be:7f:27:ab:77:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91dd2314dd9b7c61d71d4dbeda8fa3965c424570
Validity
Not Before: May 17 20:00:41 2024 GMT
Not After : May 18 20:00:41 2024 GMT
Subject: CN=a1b0af79980673d7fe086df3e0414fd88e68d5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fc:2d:c7:f5:f4:e9:4f:4a:49:d0:a3:fe:41:
34:2b:9d:e7:e6:d3:79:c8:0c:8c:93:1e:85:fc:33:
86:7a:53:65:05:f5:1d:87:12:b3:d3:ec:e2:65:89:
55:6a:37:48:da:52:71:90:8f:fe:b7:cd:f2:86:cd:
cc:5a:a2:6d:b8:3d:bf:26:2c:e2:23:83:18:6a:3f:
18:a9:7f:e0:80:34:78:8f:66:fe:a5:b2:c6:75:4f:
0f:81:80:be:10:a5:38:56:e4:ee:ec:03:91:b0:51:
ce:e4:ea:44:5a:32:31:3e:e3:13:6d:94:80:2d:30:
d1:13:59:ca:14:c4:d5:f4:99:ee:7d:c5:96:29:de:
2a:af:45:1f:52:cd:aa:35:cb:39:6c:48:49:7c:7f:
66:d8:8a:55:25:42:0d:d6:ab:31:bb:bb:77:1e:19:
6d:46:8a:d7:2e:65:f2:9e:04:25:13:fb:05:a7:a0:
82:34:9a:f5:76:33:e2:02:bb:74:83:40:0d:68:a7:
e0:d0:58:41:92:90:9d:e0:64:e0:0d:d1:2f:68:1c:
78:32:37:18:25:27:40:c0:32:a6:d7:78:72:07:b9:
f8:aa:fc:7e:75:7b:99:db:d4:a8:40:62:f4:e1:df:
ac:36:08:b1:04:e2:f5:0c:6c:0e:65:07:f3:3c:4f:
b5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B0:AF:79:98:06:73:D7:FE:08:6D:F3:E0:41:4F:D8:8E:68:D5:D9
X509v3 Authority Key Identifier:
keyid:91:DD:23:14:DD:9B:7C:61:D7:1D:4D:BE:DA:8F:A3:96:5C:42:45:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kd0jFN2bfGHXHU2-2o-jllxCRXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:36:95:1b:aa:46:49:fb:5b:d0:4e:f2:3c:1a:bd:e9:2f:8f:
d2:37:df:b6:a5:aa:29:ab:5a:a9:0e:96:37:e6:47:e9:0d:46:
08:dd:c7:ce:03:c6:46:5f:ac:6f:32:3b:ac:66:8c:e7:03:0d:
1b:2f:f2:af:ac:fb:a7:57:ca:2a:b6:d6:59:11:15:92:ba:19:
ed:98:cd:47:c2:ec:1f:fd:ea:33:28:a9:9e:c6:6a:e3:3c:19:
ec:63:86:c4:6d:58:40:ce:ff:62:64:d1:a4:66:0d:db:52:6f:
83:3c:82:ce:48:a7:60:89:25:dd:4e:6d:5c:2b:b3:b0:1b:94:
08:1b:5e:c9:59:86:13:4b:c6:d7:a5:45:92:9a:ec:7b:82:31:
1c:6a:f7:a2:f6:2d:d3:a1:14:d5:d8:a7:58:6a:5e:d9:36:1c:
e6:7e:68:f2:d2:e8:bf:85:9c:b5:b4:c9:c3:51:b1:94:88:0b:
d6:b2:d2:cd:bf:3a:2a:aa:31:0e:25:2d:0b:56:a8:6f:8d:cb:
3d:f2:c4:3c:c0:c9:0b:db:ca:10:ed:41:1a:8b:b3:bb:80:aa:
c2:83:44:4d:9b:cc:c2:32:85:c3:ad:33:31:d9:e5:38:b2:48:
64:11:67:e5:39:49:32:51:dc:ee:32:74:65:35:a0:90:bd:de:
1a:d8:a8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:00:49 2024 by rpki-client on console-ams.rpki-client.org