Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
File: kiBfWmTqH7CQrSbc_bGM77mqvY0.mft (raw, json)
Hash identifier: rNasFg5ywODWa2QgmXoYGhywEmN6F+6wEgnXXlWibwM=
Subject key identifier: 14:76:87:98:AF:93:25:ED:AE:CC:D8:3E:E8:44:F6:07:8B:E1:6B:8C
Authority key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
Certificate issuer: /CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Certificate serial: 018F874A32AC50FA408837780722D9FA3A7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
Manifest number: 0D3A
Signing time: Fri 17 May 2024 16:02:17 +0000
Manifest this update: Fri 17 May 2024 16:02:17 +0000
Manifest next update: Sat 18 May 2024 16:02:17 +0000
Files and hashes: 1: KkF937gOCAJNicRJkClgiZU-oTM.roa (hash: kpxA31OI2xy3dShoRGzI+U8ozYAKeEImWFGBvb3UvOA=)
2: bfiZ-FOTii9y7m2Gq7YtSLN1Rdg.roa (hash: IxxFJyLcLObvllWJtA7LcZGuC+OwJyMpfovn5oR1pFg=)
3: kiBfWmTqH7CQrSbc_bGM77mqvY0.crl (hash: VO0CZB9/7rWGYxtDyfVHBd2Rpka4D22X4eAdLyJ0wVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:32:ac:50:fa:40:88:37:78:07:22:d9:fa:3a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Validity
Not Before: May 17 16:02:17 2024 GMT
Not After : May 18 16:02:17 2024 GMT
Subject: CN=14768798af9325edaeccd83ee844f6078be16b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d6:0c:a6:ed:a7:d2:eb:e4:23:77:16:84:25:
2b:a2:c2:b2:10:42:4e:54:94:0e:3a:d3:3d:ad:b2:
fd:f8:11:e7:0e:81:dc:cb:64:29:84:e7:19:8e:8f:
d9:c7:4c:d4:df:7e:d5:af:b1:17:b8:56:df:d5:d1:
dc:c5:b6:52:4b:fe:48:f9:94:04:45:8f:d3:ea:27:
1d:89:14:3f:41:ce:5b:00:f7:32:69:be:43:7f:4d:
e0:01:6f:6e:52:6d:83:71:27:58:df:bc:59:95:ba:
52:e7:0d:f1:ba:d0:54:a6:36:62:bf:b7:df:e7:fd:
e8:27:f2:87:e9:3d:27:f3:62:88:80:52:05:02:00:
34:f2:50:b3:a7:10:88:43:39:40:83:44:e0:53:96:
b0:ab:7d:50:43:3b:65:0e:4d:c9:8d:8a:15:2c:7a:
06:39:4e:a5:5a:e6:84:7f:f9:d3:7f:5c:3d:3d:a0:
83:72:56:dc:9a:24:08:ed:b4:cd:e0:b5:16:34:f3:
be:3f:b2:fe:98:23:ec:80:bf:96:b7:73:cd:35:30:
b6:77:5c:5d:6a:11:cd:25:db:96:e5:a6:8e:83:a3:
cd:51:2b:a2:83:76:fd:f3:33:f9:71:d6:0e:07:82:
f1:a1:c8:46:a2:fd:8a:ff:de:31:ae:ac:02:19:28:
98:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:76:87:98:AF:93:25:ED:AE:CC:D8:3E:E8:44:F6:07:8B:E1:6B:8C
X509v3 Authority Key Identifier:
keyid:92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a5:36:5f:2a:a2:ed:87:44:bb:df:ca:8b:d1:6b:ed:c1:24:
5e:20:54:3a:e5:05:35:50:ca:6c:77:a4:65:86:78:55:b7:dd:
0f:34:cf:6c:a5:96:5b:c3:92:4e:c7:b1:1f:fb:bb:4d:0f:22:
29:88:3c:e3:ab:d1:1f:2a:86:20:7c:ab:62:15:0f:02:17:6d:
40:81:6e:89:ef:14:3c:43:be:73:d5:44:61:57:55:87:a6:f6:
fc:09:27:62:20:de:c9:60:cb:62:c8:a2:f2:0a:94:c4:25:9b:
47:79:08:73:f2:a9:e3:e4:86:0f:c4:13:db:72:dd:e2:a7:e1:
24:79:1e:66:e0:ab:b3:a5:a4:05:70:91:98:cf:24:08:1e:d4:
28:49:cc:a8:2d:ef:6a:e6:bb:e2:46:c7:d8:f4:9c:6f:e3:14:
59:38:2c:6a:ff:9c:6c:d2:9e:2c:f7:1a:f8:30:76:a6:c3:bd:
a9:23:af:65:d7:f7:0a:14:d2:d6:97:8e:34:a9:eb:98:46:ca:
dd:6b:97:37:46:6a:a8:55:9c:01:7d:49:13:7a:f1:d1:9c:8c:
d2:e7:cb:80:bf:08:03:40:17:bd:bc:84:73:af:c9:18:b7:04:
d5:55:e9:6b:bd:30:4f:92:3e:3f:1c:a3:76:7e:b8:7a:86:41:
b5:24:b6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:07:39 2024 by rpki-client on console-fra.rpki-client.org