Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
File: khkujXhVgfcrGGRCJL2MP6ii0Rs.mft (raw, json)
Hash identifier: HfQyre4K3zID2xakXiAMcS0WroZPZAAKTDWRwJrfjNM=
Subject key identifier: FB:99:F5:D6:4E:3E:85:1F:42:02:1C:21:A2:29:C5:16:6B:20:1E:8D
Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
Certificate issuer: /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Certificate serial: 0193561AE00F0FA37B94A764712FA67EE757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
Manifest number: 0DB3
Signing time: Fri 22 Nov 2024 23:00:22 +0000
Manifest this update: Fri 22 Nov 2024 23:00:22 +0000
Manifest next update: Sat 23 Nov 2024 23:00:22 +0000
Files and hashes: 1: butqp2C9emGgLbINDlgW07IY-aI.roa (hash: yny8MOti7gF09RYgqlB7sr01tBP+C6E77lLfHyRawnA=)
2: khkujXhVgfcrGGRCJL2MP6ii0Rs.crl (hash: S0LmFNSgcYAiyY/nmql9nkvtRKP8CY9gk9Dq+syrntA=)
3: yABts4yKPRnbR_pWhkzwRRhbAVo.roa (hash: p8P6cR3zys3xQPApgcpqIHM4OhIXerb+tR1TFXXddtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:1a:e0:0f:0f:a3:7b:94:a7:64:71:2f:a6:7e:e7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Validity
Not Before: Nov 22 23:00:22 2024 GMT
Not After : Nov 23 23:00:22 2024 GMT
Subject: CN=fb99f5d64e3e851f42021c21a229c5166b201e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:30:49:0f:13:45:fd:25:88:45:43:89:75:3a:
aa:41:16:ac:c3:6a:77:a6:dd:3e:3f:8b:f3:dd:98:
b3:1e:e0:6a:92:d2:71:a0:11:40:1d:0e:b0:33:f7:
67:6e:bf:25:05:70:7c:7f:0f:5e:97:0d:6b:db:f9:
0f:a7:85:85:f9:23:6d:11:93:19:5c:83:a5:58:aa:
0b:5f:64:b3:53:51:b6:e3:f0:bf:c3:9a:83:7a:ee:
5a:8e:d5:38:b8:27:88:5f:db:84:3e:9f:e3:ef:56:
f7:3c:09:fc:ed:9d:ac:42:7d:16:e6:26:12:cb:ff:
7d:ec:bd:c1:4a:5a:a6:53:8c:e8:39:c3:ca:1f:9c:
c4:c7:d6:17:07:77:42:fb:84:55:24:e3:e2:70:a1:
05:3c:42:0f:24:78:b9:05:82:86:43:79:12:ee:3b:
dc:5c:5b:7b:c7:65:83:b7:64:5f:2e:db:5c:d0:72:
fa:b3:40:b2:d2:5e:b0:d2:fd:b9:2b:9c:9b:b0:d7:
de:a1:a4:55:62:9a:4a:0f:af:29:a8:01:97:6a:36:
1e:79:32:15:4b:14:f3:c9:9f:6c:83:d6:84:9e:0a:
20:b7:b6:1a:3c:81:3b:ef:bb:87:8b:69:54:a1:3d:
ff:5a:9b:a1:74:0b:97:b5:0f:9a:da:98:ad:e8:ef:
6c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:99:F5:D6:4E:3E:85:1F:42:02:1C:21:A2:29:C5:16:6B:20:1E:8D
X509v3 Authority Key Identifier:
keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:3f:4f:66:93:89:04:a1:d5:41:b0:06:47:19:35:0d:c1:9f:
19:8b:5e:d2:ce:4b:ef:5c:2a:29:67:68:e3:2f:f3:60:93:a0:
ad:0b:2e:45:a6:f1:0f:44:9d:e4:95:82:95:92:ba:83:52:f1:
08:04:8d:1c:a3:23:e5:b5:b0:56:b4:9d:31:37:db:65:3e:91:
4a:c8:17:f2:b6:12:dc:33:57:60:d2:45:e6:97:b6:7a:17:bc:
59:ad:7f:9d:04:5b:ac:87:41:67:a8:fe:8d:ed:67:a6:28:09:
b7:59:21:80:04:34:4c:d2:9e:2e:86:d3:7c:2c:d3:1d:be:df:
eb:5e:70:d9:2e:1f:0a:c2:5b:fe:e4:94:b9:d8:12:5a:b5:ab:
e2:68:3f:8d:28:1b:10:10:5b:85:5b:ef:b0:39:3a:ca:7f:72:
97:41:9b:83:5f:74:2d:cd:73:9b:b4:51:55:a2:f2:a1:57:b9:
b3:c2:40:ca:74:cd:22:9a:91:3b:76:38:d7:44:29:67:17:28:
8d:23:8c:b3:b9:8f:94:f4:53:b1:29:85:f6:15:77:2f:48:34:
ff:48:dd:41:a4:cb:39:0b:40:05:4b:91:06:a4:06:d9:cc:e0:
a8:77:7f:ac:3b:f3:aa:1f:44:32:88:9e:5e:2f:29:e6:47:3c:
00:46:fb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:09:06 2024 by rpki-client on console-ams.rpki-client.org