Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/2bde01-365c-4084-a7d6-9e9e4caf3175/1/kMjQcCLOUC2hNl5XO4w7FITfHoc.mft
File: kMjQcCLOUC2hNl5XO4w7FITfHoc.mft (raw, json)
Hash identifier: JAQNHsseQx61hdMHLYRTEkl88d1zA6FvOtc5SjUD78s=
Subject key identifier: E9:57:4F:BF:88:9A:30:F6:A6:BB:90:D3:19:3E:27:C0:B8:EC:3E:11
Authority key identifier: 90:C8:D0:70:22:CE:50:2D:A1:36:5E:57:3B:8C:3B:14:84:DF:1E:87
Certificate issuer: /CN=90c8d07022ce502da1365e573b8c3b1484df1e87
Certificate serial: 0191FAB502941E7F92441FCCEB2B32B8A603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMjQcCLOUC2hNl5XO4w7FITfHoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/2bde01-365c-4084-a7d6-9e9e4caf3175/1/kMjQcCLOUC2hNl5XO4w7FITfHoc.mft
Manifest number: A5
Signing time: Mon 16 Sep 2024 12:00:52 +0000
Manifest this update: Mon 16 Sep 2024 12:00:52 +0000
Manifest next update: Tue 17 Sep 2024 12:00:52 +0000
Files and hashes: 1: JFyXpYvBdHdyQP6Pna3x5Y0I0AU.roa (hash: cQS/6KcppXOQMwWOkjxI8rOwyMyWZtgJ3DNf+BGyB2c=)
2: kMjQcCLOUC2hNl5XO4w7FITfHoc.crl (hash: Pt1VQiIjJzU9qB736nGlLFY7uFPj/v3kWzYbhmyOp3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/2bde01-365c-4084-a7d6-9e9e4caf3175/1/kMjQcCLOUC2hNl5XO4w7FITfHoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/2bde01-365c-4084-a7d6-9e9e4caf3175/1/kMjQcCLOUC2hNl5XO4w7FITfHoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kMjQcCLOUC2hNl5XO4w7FITfHoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:b5:02:94:1e:7f:92:44:1f:cc:eb:2b:32:b8:a6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90c8d07022ce502da1365e573b8c3b1484df1e87
Validity
Not Before: Sep 16 12:00:52 2024 GMT
Not After : Sep 17 12:00:52 2024 GMT
Subject: CN=e9574fbf889a30f6a6bb90d3193e27c0b8ec3e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e0:ef:68:9f:3f:0e:d7:d5:af:04:a9:44:30:
b9:46:4f:cf:98:a0:0b:2b:57:59:73:b1:22:d9:c4:
45:cd:e2:8f:90:61:39:89:be:b5:fc:52:14:ef:a0:
41:1d:1b:75:12:86:f2:9d:bf:a8:d5:f9:c7:ca:f7:
f9:f7:5e:4e:03:ce:a9:27:2f:f7:b3:e9:62:6f:72:
01:15:94:71:d9:2c:0b:4b:e7:6d:ef:7a:1e:96:e9:
be:4a:f9:99:62:ce:6b:f3:97:68:d2:5b:3c:05:7a:
54:09:f0:e7:21:72:fa:d6:e6:aa:f1:2e:02:41:ad:
02:72:1c:fd:94:bd:c7:a5:66:b5:16:ed:7e:0f:55:
dc:37:c7:95:6f:ed:41:e3:5d:2f:7a:dc:3a:2f:75:
91:a5:14:f5:a2:43:f7:46:3c:2b:02:c7:92:a2:79:
56:23:df:7d:4b:69:83:6c:af:80:92:3d:cf:c2:b1:
09:ff:fb:60:4b:aa:e8:03:1d:68:7f:52:6d:3a:1f:
1a:14:cc:da:46:d3:66:ab:9d:6d:13:c6:9d:f1:a1:
c3:cb:ce:d2:60:63:6c:a7:d0:76:3a:73:f8:50:63:
ee:fb:c3:46:e8:cb:a4:a5:ad:e2:21:88:02:52:a3:
eb:96:60:63:bd:0c:9b:61:a2:09:ce:8e:cc:ef:7b:
84:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:57:4F:BF:88:9A:30:F6:A6:BB:90:D3:19:3E:27:C0:B8:EC:3E:11
X509v3 Authority Key Identifier:
keyid:90:C8:D0:70:22:CE:50:2D:A1:36:5E:57:3B:8C:3B:14:84:DF:1E:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMjQcCLOUC2hNl5XO4w7FITfHoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2bde01-365c-4084-a7d6-9e9e4caf3175/1/kMjQcCLOUC2hNl5XO4w7FITfHoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2bde01-365c-4084-a7d6-9e9e4caf3175/1/kMjQcCLOUC2hNl5XO4w7FITfHoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:63:59:8d:23:fd:99:6b:20:0c:24:c4:97:27:f8:ad:0e:a2:
df:70:75:44:48:17:b8:f9:a2:dc:aa:5b:5e:4d:b1:e2:a8:fb:
91:9f:03:a1:fc:b2:cb:4a:d5:41:da:1a:ee:72:1e:1f:46:01:
8d:9f:a5:65:fe:cb:1d:eb:b9:0b:e7:9a:74:a6:cd:51:d5:22:
52:ff:e8:3e:7b:b4:81:ad:8d:93:83:f9:3b:a5:3e:f5:60:3e:
c1:e7:82:a1:1a:e3:39:40:e3:c8:b5:4a:c6:2a:9d:50:19:c1:
0b:29:ff:3c:2e:f9:62:a0:d9:62:23:a7:ab:d1:90:47:6e:f1:
4e:4d:a9:49:07:34:89:5d:c3:2f:5c:ad:6d:ed:98:26:b4:18:
fe:45:5a:d4:19:41:5e:d3:6a:b4:6f:e1:c3:32:19:5b:94:1b:
07:7c:8f:a9:84:48:a3:b8:09:ed:6e:e5:93:60:db:1f:26:a8:
cd:72:64:dc:ab:62:f3:47:d3:9e:86:5f:5c:1d:e6:60:d5:cb:
03:e6:ac:cd:a6:8b:0e:fe:4f:0a:ab:c3:c6:fd:b8:48:be:f5:
1b:ff:aa:0c:9f:e5:0e:f0:69:41:e3:b5:76:61:96:cc:9d:8e:
e3:da:eb:19:be:3f:66:71:0c:db:4b:1a:db:fa:31:02:f0:a9:
fc:21:b2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:27:48 2024 by rpki-client on console-fra.rpki-client.org