Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
File: KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft (raw, json)
Hash identifier: ciSoaclSB4Y7nEg31+WPXTvC/ykTAZ8M64STr/uYxuY=
Subject key identifier: A0:6B:7B:9F:00:CC:88:D0:31:6F:E0:7D:15:0C:75:C2:8E:8C:64:49
Authority key identifier: 28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
Certificate issuer: /CN=2875f185823dbc6a82d105b3ca16077db5729377
Certificate serial: 019365C4B3A32F7A645927A03DBC74C44BE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
Manifest number: 137B
Signing time: Tue 26 Nov 2024 00:00:10 +0000
Manifest this update: Tue 26 Nov 2024 00:00:10 +0000
Manifest next update: Wed 27 Nov 2024 00:00:10 +0000
Files and hashes: 1: 6qOuHHwOa5pTVUMkyemjPV5IgFw.roa (hash: yNDZRyeI5AbBls2TRwB54YnOsTrsc9/5J3LjMTfwDrQ=)
2: FJ071BXOizpLNxbW6L8S3lld6_E.roa (hash: FEEV66GOAAK8PwAfT8MrLqNyjuEAD7HN7DzhRD5qQX0=)
3: KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl (hash: 6RHSubVJo2Zq7gXqtWsOThczQAonOVSYV4t0unbdJCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:65:c4:b3:a3:2f:7a:64:59:27:a0:3d:bc:74:c4:4b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2875f185823dbc6a82d105b3ca16077db5729377
Validity
Not Before: Nov 26 00:00:10 2024 GMT
Not After : Nov 27 00:00:10 2024 GMT
Subject: CN=a06b7b9f00cc88d0316fe07d150c75c28e8c6449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:43:a0:80:ad:aa:1c:23:f9:3c:26:cb:88:f3:
ba:a2:86:72:31:e7:06:58:a1:eb:35:fc:bb:a5:74:
e3:e5:a3:29:45:02:71:d3:da:f3:54:f2:d0:45:10:
70:ba:87:ae:1b:59:eb:99:f7:db:5e:3e:f1:f6:dd:
14:d1:84:96:12:63:90:ae:71:f3:6d:80:7b:04:88:
aa:69:bc:54:e0:d7:12:12:3d:37:80:84:1a:05:13:
32:92:c7:d4:33:4f:3f:4e:1f:5a:aa:e2:44:62:ec:
6b:96:13:eb:4a:38:83:21:0d:c1:25:25:ea:bb:2b:
ae:e8:7a:7c:78:d7:a9:0f:67:a3:e9:8a:7c:c0:fb:
05:b9:51:bc:e8:ca:14:8f:e3:a9:0d:df:2f:b0:2a:
44:51:31:b0:2c:de:9c:db:1f:aa:4c:d4:e1:8f:89:
3b:d6:00:7e:90:f2:8c:11:55:bf:69:b3:3c:d9:80:
0b:9a:8d:7c:c9:e7:81:30:5d:d8:13:d9:88:c2:ce:
9c:8d:48:4d:0a:15:59:98:49:dc:a6:24:95:7c:a8:
11:41:74:15:6b:d0:19:6b:2c:c8:94:f3:03:31:a4:
ef:bf:84:4f:69:67:e2:28:61:38:19:e7:1e:8a:84:
65:03:74:57:5a:16:20:b1:56:4e:d5:ed:bb:85:a3:
0f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6B:7B:9F:00:CC:88:D0:31:6F:E0:7D:15:0C:75:C2:8E:8C:64:49
X509v3 Authority Key Identifier:
keyid:28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b3:3e:98:9e:1d:e6:0f:33:9a:79:97:e7:ca:2b:67:b3:33:
e3:c0:40:51:b3:6f:14:33:ab:0f:94:bf:6e:78:b6:0e:ce:e3:
4c:15:33:a9:39:ea:54:1a:79:0d:5b:21:3f:23:4d:da:4d:bf:
ce:09:72:cd:cf:ef:cc:c0:03:96:df:4b:52:74:d2:54:95:1a:
48:b4:98:89:5e:a5:90:3b:0b:26:2b:4d:af:ab:42:cd:af:99:
4c:40:25:35:45:b7:74:f1:bd:07:80:75:0c:3f:0e:11:6a:60:
f7:44:9d:fa:75:a7:62:23:be:78:ef:36:32:00:7a:91:8e:42:
74:78:37:1b:06:87:a0:0f:67:f7:58:ec:70:04:cb:f7:96:1d:
70:2b:6f:a1:bf:56:94:4d:0c:b9:f3:d5:ef:fe:6c:c5:6d:9b:
9c:a8:56:b2:82:c1:c1:1a:72:84:ef:eb:1b:37:77:b2:57:c1:
d5:96:f0:30:d3:4f:2b:22:cc:02:57:b3:c3:e4:8b:5d:10:86:
b5:8f:b6:3e:ad:a0:ee:81:af:c4:e9:a1:e7:3d:29:e0:1d:20:
39:32:4a:9a:33:59:c8:bf:1d:c7:84:1e:3f:75:f9:42:56:d0:
51:04:ad:b2:d6:d9:64:46:84:63:fc:26:04:5a:79:55:87:ee:
99:e5:df:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:04:05 2024 by rpki-client on console-fra.rpki-client.org