Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
File: kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft (raw, json)
Hash identifier: LZgbrjnaVgLjWtH05GdPDJh9byoljW+hGYnKdrnb19E=
Subject key identifier: 9A:AF:46:68:A5:E8:00:9E:EC:7E:A2:5D:09:83:52:62:94:B3:44:86
Authority key identifier: 90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD
Certificate issuer: /CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd
Certificate serial: 018F87ED4D3B526FA422F8E5BC6719C6E3BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
Manifest number: 1179
Signing time: Fri 17 May 2024 19:00:26 +0000
Manifest this update: Fri 17 May 2024 19:00:26 +0000
Manifest next update: Sat 18 May 2024 19:00:26 +0000
Files and hashes: 1: L8csQ-lCUZiBgdJf6j4u2sFv5EU.roa (hash: jVNITNkvHVGp/GCaoGOwq3zLDOaNiCIsOWaaxtwNGZY=)
2: b0nIRToXgBPb0YIHM6WWl5OeP20.roa (hash: EdheXZF1H7vIdx/QmejPVNWQI+ipQ3+6twnXn8IkeUY=)
3: kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl (hash: CIdiO06Mj3fP5EoASUFHiNxI8qFspm0heb+2spaeUB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:ed:4d:3b:52:6f:a4:22:f8:e5:bc:67:19:c6:e3:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd
Validity
Not Before: May 17 19:00:26 2024 GMT
Not After : May 18 19:00:26 2024 GMT
Subject: CN=9aaf4668a5e8009eec7ea25d0983526294b34486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:48:d0:6f:8a:8b:49:5c:20:37:cb:7e:d9:a0:
02:8f:74:0c:28:a2:80:69:89:20:c9:08:89:8f:af:
19:89:db:d6:7f:ae:f2:74:fc:01:03:9b:95:cc:eb:
f0:84:86:a3:97:10:3d:33:38:5a:7c:6a:ae:cc:3e:
a5:8b:c5:be:dc:9f:54:c4:51:0e:44:e5:31:8d:24:
5a:27:f3:21:6e:ac:d6:b1:72:f1:27:15:ff:cd:c1:
97:12:a2:14:90:87:2a:7f:c0:a3:5f:68:81:1b:ef:
93:4d:f9:12:37:1c:14:7c:f1:ee:40:4e:ee:dd:d1:
5d:b5:12:ef:63:24:21:66:5b:dd:9d:d6:65:e0:aa:
a1:3d:82:2a:5f:0c:a9:66:bb:b4:6b:49:93:ef:fe:
e9:da:de:40:10:18:29:1c:f6:93:29:68:3a:97:ab:
98:ca:3c:ad:bb:bd:b7:f9:e9:1b:57:b5:f6:5a:41:
4d:d2:0d:f5:7c:be:f4:2e:76:ad:66:42:04:46:77:
2d:08:85:36:01:b7:56:77:e6:82:26:95:14:1b:eb:
49:73:2a:54:37:4a:ea:3d:9e:e1:1b:bf:f4:20:e1:
a1:64:63:ce:83:a4:d4:a4:b4:23:9b:04:e8:1c:5a:
3c:25:66:71:f2:f5:16:47:af:b6:fe:27:e6:5c:43:
3e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AF:46:68:A5:E8:00:9E:EC:7E:A2:5D:09:83:52:62:94:B3:44:86
X509v3 Authority Key Identifier:
keyid:90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:94:09:3f:0f:0d:8c:24:20:59:e8:44:6b:42:7f:6a:1f:fe:
40:99:a6:a9:16:1d:89:bb:39:54:4e:81:fa:90:75:d8:1b:57:
32:67:9b:f3:3e:b9:ec:45:9a:61:ec:b7:ae:4e:42:b7:9a:0b:
20:fe:38:b7:90:69:9c:ef:9c:46:41:c1:f5:63:a7:61:43:ec:
ef:68:ac:54:09:d0:b8:d6:ec:e1:85:47:2c:75:9d:6b:f6:c4:
0f:1d:21:b4:f8:4b:ce:4f:ab:4b:0d:c4:3d:5b:5a:8c:7a:56:
e0:03:d0:59:46:7d:a7:24:cf:bc:fa:62:43:21:49:2d:a0:aa:
cb:83:5a:95:b1:13:0a:ca:79:62:58:1a:08:39:4d:a6:70:53:
ac:db:3f:bc:c1:18:73:a5:bc:da:e7:6e:2b:d8:6d:14:8c:aa:
b4:c4:b0:99:1b:d2:f4:41:6c:99:dc:a3:21:63:a7:4f:08:76:
e0:65:27:52:55:9b:e6:f0:8d:92:19:f7:e5:c0:9e:be:71:5b:
4c:66:a3:47:c2:1b:02:a6:b6:d7:7a:b4:dc:32:9e:68:5e:d6:
0a:49:e4:28:2b:6f:e8:ef:86:70:83:9e:1a:48:41:ff:4b:7e:
ef:f2:c7:3f:ed:76:db:61:58:c1:74:24:84:fa:27:8d:0d:44:
99:e7:0c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:07:55 2024 by rpki-client on console-ams.rpki-client.org