Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b24bdb-a604-4b2a-908f-c98b88e71948/1/krknliKgzX1YqiukNvvj8gsX6z0.mft
File: krknliKgzX1YqiukNvvj8gsX6z0.mft (raw, json)
Hash identifier: SjhrHghWWNTG/E478G2yTmUQJPNiRL8BvPAZphKa7f0=
Subject key identifier: 05:D1:F7:D5:5A:A4:23:32:6E:F9:E2:09:49:D3:52:3E:F1:31:06:03
Authority key identifier: 92:B9:27:96:22:A0:CD:7D:58:AA:2B:A4:36:FB:E3:F2:0B:17:EB:3D
Certificate issuer: /CN=92b9279622a0cd7d58aa2ba436fbe3f20b17eb3d
Certificate serial: 018F9C88AEA47295E7D8041A763193544F2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krknliKgzX1YqiukNvvj8gsX6z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b24bdb-a604-4b2a-908f-c98b88e71948/1/krknliKgzX1YqiukNvvj8gsX6z0.mft
Manifest number: 03E8
Signing time: Tue 21 May 2024 19:02:34 +0000
Manifest this update: Tue 21 May 2024 19:02:34 +0000
Manifest next update: Wed 22 May 2024 19:02:34 +0000
Files and hashes: 1: krknliKgzX1YqiukNvvj8gsX6z0.crl (hash: 4shTZJLK7xViysw1hMQOjo40YVTv3mPAKOvzcm6ldBU=)
2: ojqzm1WVnOB7vsu9340f9HR7484.roa (hash: fMJAmwD5O+Vok7lvTIFDerOXura/7Kbd0ByjbHDi0VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b24bdb-a604-4b2a-908f-c98b88e71948/1/krknliKgzX1YqiukNvvj8gsX6z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b24bdb-a604-4b2a-908f-c98b88e71948/1/krknliKgzX1YqiukNvvj8gsX6z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/krknliKgzX1YqiukNvvj8gsX6z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9c:88:ae:a4:72:95:e7:d8:04:1a:76:31:93:54:4f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b9279622a0cd7d58aa2ba436fbe3f20b17eb3d
Validity
Not Before: May 21 19:02:34 2024 GMT
Not After : May 22 19:02:34 2024 GMT
Subject: CN=05d1f7d55aa423326ef9e20949d3523ef1310603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bc:e7:b3:d0:22:9b:e1:d0:b8:69:bc:9a:36:
83:2f:f4:54:0c:ae:c9:fd:b8:9f:ad:a0:f4:8f:f3:
e2:4c:bd:a8:9d:70:11:cf:5d:e5:89:8c:cd:dd:2d:
03:b0:18:b5:5f:b4:22:d7:94:04:9c:84:16:5f:d4:
f7:f4:cf:30:f7:69:98:e3:fe:0d:6d:3f:4a:b6:75:
95:78:2c:a0:56:c1:25:19:62:a1:25:31:76:36:4f:
89:00:c6:ed:81:f9:ad:8c:0e:a2:b1:ce:19:35:cd:
83:92:e6:0e:e3:cf:cf:19:73:98:c4:e2:b0:a4:c4:
95:e3:55:fa:e4:5e:00:f4:d1:24:81:95:0f:c9:35:
fa:2a:e7:f7:05:12:24:a1:09:05:e6:db:71:f0:c0:
e1:39:ac:1e:23:09:f2:7d:d8:38:2c:2c:e5:da:1c:
f8:a2:0f:00:f8:6a:58:d9:40:50:e7:82:2d:6f:e4:
ac:fb:32:6a:41:29:bb:4c:9c:36:c1:69:e4:66:5d:
b3:c3:5e:23:06:9a:c9:fb:82:a5:bb:7a:3e:bf:0c:
ec:b7:cf:7b:87:00:e1:73:33:55:9a:d5:ad:49:43:
e1:0f:df:62:dd:bd:61:9e:61:65:e6:4a:0c:18:02:
d6:b6:1e:06:6d:92:55:2e:75:a0:f3:5e:a3:92:67:
0e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D1:F7:D5:5A:A4:23:32:6E:F9:E2:09:49:D3:52:3E:F1:31:06:03
X509v3 Authority Key Identifier:
keyid:92:B9:27:96:22:A0:CD:7D:58:AA:2B:A4:36:FB:E3:F2:0B:17:EB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krknliKgzX1YqiukNvvj8gsX6z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b24bdb-a604-4b2a-908f-c98b88e71948/1/krknliKgzX1YqiukNvvj8gsX6z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b24bdb-a604-4b2a-908f-c98b88e71948/1/krknliKgzX1YqiukNvvj8gsX6z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:38:40:f9:fe:88:eb:f4:53:45:22:03:0b:8c:93:4b:a0:3e:
36:55:71:5c:92:f5:1a:38:29:ec:b2:a7:12:8d:83:cd:52:61:
9c:28:01:d4:36:83:6b:61:eb:92:5f:e0:04:17:58:b4:de:1c:
47:58:c0:3d:c9:48:d5:6e:03:6e:f3:7d:82:8b:05:b2:77:5e:
69:d0:cd:7e:15:a9:2c:bd:1b:9b:c4:fc:3e:a8:31:17:7b:1c:
c7:8b:d2:0d:2c:8f:61:f0:70:63:e9:05:27:1b:0f:82:35:a8:
cb:a6:a9:8b:60:6a:c2:0c:7b:24:62:7a:23:d1:ce:10:70:c7:
1b:2e:8a:7d:02:12:a2:d1:f6:37:42:34:28:fb:0b:e8:a0:a6:
23:44:36:a6:e0:41:25:a4:cb:16:22:f7:9f:26:90:2f:d3:38:
84:7b:b5:a6:3a:5b:9a:3f:a9:1d:a8:9b:26:9e:58:a5:f9:91:
d0:14:cc:1c:c8:c5:b7:53:70:16:33:f9:ae:85:66:b0:92:68:
64:80:b0:22:8d:38:14:b3:7a:4c:09:64:f8:4e:2c:a1:78:a2:
80:7c:94:b9:91:35:5b:1f:51:3d:e2:27:b9:fc:9a:2c:77:c1:
a5:2b:14:b8:8c:f3:dd:d4:55:ba:48:f2:8f:99:16:50:77:a9:
8e:f9:cf:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 21:05:07 2024 by rpki-client on console-ams.rpki-client.org