Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
File: kJgVO94ONFhLrJH6GGjX7yTWi88.mft (raw, json)
Hash identifier: Y6Nx+Um1oPkRMhnx7wpfG3Ece5NZO/ZK8RbGPCu4Mg8=
Subject key identifier: 57:3C:4E:DD:27:74:19:6F:7C:EA:7C:A7:12:9C:35:B5:BA:CF:95:80
Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
Certificate issuer: /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Certificate serial: 0193561AEF10708A35E757C8A1B9D6B59B48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
Manifest number: 105E
Signing time: Fri 22 Nov 2024 23:00:25 +0000
Manifest this update: Fri 22 Nov 2024 23:00:25 +0000
Manifest next update: Sat 23 Nov 2024 23:00:25 +0000
Files and hashes: 1: IgJxqx1RDSYiq7prAwWjxvcNkwQ.roa (hash: 1pwbbPa/AeitnQajY0szeg2zYFAQpPzuEHRIYfExT4Y=)
2: O5T--ed-zmmBqTovzq5SJXaZtzI.roa (hash: +XVjavciNDZjg5tNzAu7Pk1jpoIKwbu20keXj4brjDo=)
3: kJgVO94ONFhLrJH6GGjX7yTWi88.crl (hash: bnxLufowYV2AHTgKHi9nIw7iOxEn4yyaaRNLnZYt4Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:1a:ef:10:70:8a:35:e7:57:c8:a1:b9:d6:b5:9b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Validity
Not Before: Nov 22 23:00:25 2024 GMT
Not After : Nov 23 23:00:25 2024 GMT
Subject: CN=573c4edd2774196f7cea7ca7129c35b5bacf9580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:90:f9:1b:c2:ac:16:95:b2:5d:92:1e:7a:50:
51:02:94:6b:e0:0d:e7:86:77:23:62:84:81:99:62:
82:f1:dc:ba:53:6c:ba:98:b2:54:76:78:8d:0d:e2:
43:51:31:3e:9e:45:5d:0a:69:18:50:c6:8c:78:60:
e6:2a:61:3a:e3:fe:14:b6:f5:af:30:70:3e:a8:a9:
2a:31:9a:84:96:82:aa:6b:c2:58:dd:b3:82:9a:e4:
55:22:f7:0a:2c:b1:90:50:77:cf:39:16:d5:2c:0b:
ca:85:bc:61:6b:26:6e:3f:0f:dc:68:ac:4d:34:9d:
c8:65:43:95:59:34:b2:76:ed:d2:82:0e:28:ac:18:
73:b1:4c:ce:34:0c:eb:5c:a3:6e:f1:9f:70:a4:d1:
d5:27:95:17:fe:4b:68:56:fd:35:bc:f9:ef:92:36:
98:31:79:a7:e9:54:fc:2e:b5:c5:d4:1a:89:7f:03:
e8:80:77:59:63:6c:21:d5:86:ab:e2:29:c4:55:58:
b7:06:9c:16:24:3a:2e:fc:28:8e:f3:be:f3:6f:b0:
a1:41:02:49:d9:09:bd:ba:63:3b:09:d3:b2:b2:e8:
e2:4e:5d:1b:fb:79:f2:a0:64:38:3f:b0:8b:83:9f:
5c:eb:ab:4b:c8:31:1c:e9:8e:20:e8:dc:06:8f:df:
74:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3C:4E:DD:27:74:19:6F:7C:EA:7C:A7:12:9C:35:B5:BA:CF:95:80
X509v3 Authority Key Identifier:
keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ce:a9:ea:2b:b1:58:98:e1:f7:15:e9:3e:75:c8:da:66:a4:
09:1a:50:1b:08:57:1d:ce:ac:ac:06:a5:2b:6a:6e:7e:fd:ea:
cc:57:19:5f:99:1d:19:8d:a9:ba:d7:38:a9:2e:e6:8f:c6:cd:
f0:75:c7:6c:70:4c:9c:2c:1a:f2:f5:c8:23:21:c5:ef:e8:d6:
cf:18:30:73:0a:83:2e:dd:a1:ef:fc:d0:d3:9b:60:dc:d1:f3:
15:3a:de:14:44:f2:2e:98:67:20:78:d5:b4:84:33:33:e4:17:
8e:d0:f5:29:97:bd:6b:3d:db:6d:28:b4:58:47:95:3f:fa:a1:
51:ce:d6:d2:68:64:e7:8f:13:8c:08:68:fb:0b:49:a5:33:99:
4b:81:c6:d8:79:17:47:0b:90:cc:1e:b6:be:a5:58:28:48:59:
23:bc:f3:60:74:47:fa:c1:02:03:ba:7d:43:46:be:ce:b8:9d:
c3:ec:60:d6:79:c2:1e:3c:e1:c2:4c:29:31:cb:96:9f:43:8f:
13:8d:51:fb:d0:04:69:68:d5:d7:f9:e0:e5:7f:87:72:f2:ff:
7a:7d:a1:66:33:40:e8:d1:44:5f:06:7c:60:a4:11:f2:e2:cc:
10:0f:f0:b9:ac:dc:f9:63:30:cd:72:6c:06:b3:36:52:f8:28:
16:ea:ac:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:11:42 2024 by rpki-client on console-ams.rpki-client.org