Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
File: kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft (raw, json)
Hash identifier: 2WP1vw/IHde6t15pfmOQRP69wcVq1ZxKgRXYQhUupCI=
Subject key identifier: 46:9E:0A:3F:39:87:7D:0C:64:3A:6D:B0:BA:6D:72:5A:B9:A9:42:CD
Authority key identifier: 92:4A:97:D9:12:D7:1F:80:FD:36:B7:3E:FC:0F:C7:96:97:62:F3:37
Certificate issuer: /CN=924a97d912d71f80fd36b73efc0fc7969762f337
Certificate serial: 0193579BD40068807810EA6A05FF003DD755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 06:00:50 +0000
Manifest this update: Sat 23 Nov 2024 06:00:50 +0000
Manifest next update: Sun 24 Nov 2024 06:00:50 +0000
Files and hashes: 1: TBs5BCnF-Kr5EkVQIIaEYLl5xN8.roa (hash: a6eqJzCDkoZFoAelXIGotGKNT32lreFzbkeSgO22Ufw=)
2: kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl (hash: 0DDw4TGF3E5ZCV2TGodR/UDKktxSbnmEzOdzdwZA+9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:d4:00:68:80:78:10:ea:6a:05:ff:00:3d:d7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=924a97d912d71f80fd36b73efc0fc7969762f337
Validity
Not Before: Nov 23 06:00:50 2024 GMT
Not After : Nov 24 06:00:50 2024 GMT
Subject: CN=469e0a3f39877d0c643a6db0ba6d725ab9a942cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:21:b5:7d:61:42:76:20:97:1c:65:ae:12:3a:
fd:55:fa:26:58:81:0a:41:87:25:4f:29:37:35:fa:
58:e2:3b:3d:ca:b2:29:c3:99:53:7b:f0:b3:3a:d1:
1a:1d:ff:42:40:0f:cc:36:42:95:17:1b:df:15:27:
89:42:51:9d:02:68:f1:4b:d8:c3:9b:3c:e7:33:d7:
0a:e8:76:36:62:d2:f9:ac:62:e1:e1:ff:24:66:b4:
22:e4:58:c1:e5:f0:ba:e6:3d:8c:05:de:29:9d:15:
26:b3:85:3a:71:2c:d0:2d:f0:be:78:08:2d:dd:f6:
1b:6f:a6:1b:e4:6d:f9:e3:4f:b2:7b:2d:a1:c7:3e:
b1:57:9c:13:1c:cb:46:7d:30:cb:fd:7d:d6:5e:4a:
d5:a5:85:74:76:29:b2:76:66:b9:15:b7:93:61:19:
b0:3e:8a:7c:c9:7a:01:58:01:eb:48:0f:2a:1b:11:
60:d8:fb:e1:34:e8:41:9b:07:53:63:65:b9:7a:9b:
14:cb:d3:41:e2:1e:85:fd:ef:9b:a5:5e:ee:30:df:
a2:fe:9b:b1:e7:c4:25:d5:26:5d:0e:a1:2e:0e:42:
c1:22:b5:72:67:dd:db:06:79:80:a7:65:a6:03:75:
15:51:a1:76:80:70:67:9c:ec:fe:ce:ac:a0:a3:f7:
f0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9E:0A:3F:39:87:7D:0C:64:3A:6D:B0:BA:6D:72:5A:B9:A9:42:CD
X509v3 Authority Key Identifier:
keyid:92:4A:97:D9:12:D7:1F:80:FD:36:B7:3E:FC:0F:C7:96:97:62:F3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:fb:50:19:84:8b:73:df:26:e6:7b:0e:c2:97:db:6f:86:2c:
d1:a9:d6:08:8a:1b:75:bb:9e:02:53:e9:91:db:39:71:d4:48:
c1:72:5f:98:bb:51:05:6a:3d:8f:ca:d4:2c:90:ba:f6:54:17:
7b:73:02:0e:52:ed:f6:70:dd:42:80:bb:e3:af:3f:df:06:dc:
16:88:26:4a:60:a8:d0:e9:e7:7e:ea:41:3f:f6:c8:f0:bb:6a:
d8:44:29:29:48:28:83:91:1c:0f:81:4f:83:cc:a5:69:1a:e2:
ce:90:2c:35:6b:15:6c:c6:ff:29:2e:3f:fc:31:bd:5d:20:a7:
1d:f5:7f:82:36:3b:e4:85:7c:a4:67:6b:7b:5d:c4:7f:8e:ca:
70:e4:aa:80:a9:b7:b7:8a:e6:97:9e:69:6d:f5:f2:8c:ab:53:
60:cb:17:0b:e4:3c:14:60:42:41:a3:14:77:16:a9:39:8d:ca:
ca:51:6d:29:91:18:ce:8f:03:98:51:c6:d9:79:2c:ae:ff:f6:
71:ec:42:72:40:26:bc:91:0f:f7:a4:c9:55:3c:9a:7c:fa:78:
c2:26:44:d9:78:f5:e8:5d:c7:4a:6e:93:9c:e5:30:7a:92:7d:
39:a7:75:7c:99:8a:6b:d3:a9:14:96:e0:a8:00:45:07:46:1e:
40:4c:1e:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXm9QAaIB4EOpqBf8APddVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNGE5N2Q5MTJkNzFmODBmZDM2YjczZWZjMGZjNzk2OTc2
MmYzMzcwHhcNMjQxMTIzMDYwMDUwWhcNMjQxMTI0MDYwMDUwWjAzMTEwLwYDVQQD
Eyg0NjllMGEzZjM5ODc3ZDBjNjQzYTZkYjBiYTZkNzI1YWI5YTk0MmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCG1fWFCdiCXHGWuEjr9VfomWIEK
QYclTyk3NfpY4js9yrIpw5lTe/CzOtEaHf9CQA/MNkKVFxvfFSeJQlGdAmjxS9jD
mzznM9cK6HY2YtL5rGLh4f8kZrQi5FjB5fC65j2MBd4pnRUms4U6cSzQLfC+eAgt
3fYbb6Yb5G3540+yey2hxz6xV5wTHMtGfTDL/X3WXkrVpYV0dimydma5FbeTYRmw
Pop8yXoBWAHrSA8qGxFg2PvhNOhBmwdTY2W5epsUy9NB4h6F/e+bpV7uMN+i/pux
58Ql1SZdDqEuDkLBIrVyZ93bBnmAp2WmA3UVUaF2gHBnnOz+zqygo/fwoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEaeCj85h30MZDptsLptclq5qULNMB8GA1UdIwQY
MBaAFJJKl9kS1x+A/Ta3PvwPx5aXYvM3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2txWDJSTFhINEQ5TnJjLV9BX0hscGRpOHpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9hZDM1ODYtYTAyOC00NzQ2LWIzZGEt
ODE0ODU2ZTFiMWY0LzEva2txWDJSTFhINEQ5TnJjLV9BX0hscGRpOHpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9hZDM1ODYtYTAyOC00NzQ2LWIzZGEtODE0ODU2ZTFiMWY0
LzEva2txWDJSTFhINEQ5TnJjLV9BX0hscGRpOHpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARftQGYSL
c98m5nsOwpfbb4Ys0anWCIobdbueAlPpkds5cdRIwXJfmLtRBWo9j8rULJC69lQX
e3MCDlLt9nDdQoC7468/3wbcFogmSmCo0OnnfupBP/bI8Ltq2EQpKUgog5EcD4FP
g8ylaRrizpAsNWsVbMb/KS4//DG9XSCnHfV/gjY75IV8pGdre13Ef47KcOSqgKm3
t4rml55pbfXyjKtTYMsXC+Q8FGBCQaMUdxapOY3KylFtKZEYzo8DmFHG2Xksrv/2
cexCckAmvJEP96TJVTyafPp4wiZE2Xj16F3HSm6TnOUwepJ9Oad1fJmKa9OpFJbg
qABFB0YeQEweGQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:22 2024 by rpki-client on console-fra.rpki-client.org