Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
File: klbbNIe0xbrLMAF3BXzzF0z3dHc.mft (raw, json)
Hash identifier: juVUDFy0keu0Bo4tRVulYnWxqczxAw2vWuHnak4dmaw=
Subject key identifier: 91:F5:40:27:CD:01:2F:98:C0:AC:FD:44:CA:37:37:00:CA:F7:36:5C
Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
Certificate issuer: /CN=9256db3487b4c5bacb300177057cf3174cf77477
Certificate serial: 019356F735B626286DBCCAE2B91A2C1D9E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 03:01:01 +0000
Manifest this update: Sat 23 Nov 2024 03:01:01 +0000
Manifest next update: Sun 24 Nov 2024 03:01:01 +0000
Files and hashes: 1: 9z8yesdQDaakV7eFodyeaXffF2U.roa (hash: 2Oqz1mNeSW6Jl2J+rZ/uMCdFBLQAWqmMztTp2zOYrU4=)
2: D2Uq83wKts-XekegUv_UOul35WY.roa (hash: eUBLf5xddO/u+0pxESNZxCQdCXxRqZ6lJOJL0PB+eYM=)
3: klbbNIe0xbrLMAF3BXzzF0z3dHc.crl (hash: w7NB+9U7hzzADGk9dEpHLlWF8ktwojgvWQs8whKQHMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f7:35:b6:26:28:6d:bc:ca:e2:b9:1a:2c:1d:9e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477
Validity
Not Before: Nov 23 03:01:01 2024 GMT
Not After : Nov 24 03:01:01 2024 GMT
Subject: CN=91f54027cd012f98c0acfd44ca373700caf7365c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c5:4a:c1:79:d8:bb:79:e3:c0:8d:88:4e:a8:
5b:ea:d6:fe:f6:94:1c:1e:3f:37:30:05:30:86:36:
c6:c6:54:f6:9e:8a:79:90:bf:d4:0d:c6:14:ce:60:
be:63:20:aa:fa:24:e3:21:e3:58:c1:80:1c:ac:18:
5e:3a:98:c4:1e:f7:ba:17:d2:0e:43:3c:41:7d:e7:
ba:89:d2:71:72:04:f1:4b:4e:56:a9:8b:11:a5:6f:
96:05:3d:cf:5d:6a:b0:de:87:e6:1a:ed:6e:52:9c:
94:1d:ea:45:64:31:19:c0:d5:c4:79:bf:41:c3:70:
ef:84:39:37:f8:cc:29:0f:49:df:94:c6:6b:78:00:
29:8f:4c:bc:e3:8f:57:a9:11:db:46:3c:73:4e:ac:
5d:72:bb:26:0e:1b:1d:44:69:78:5d:59:48:04:64:
11:82:b4:c4:e9:50:b4:ce:a0:32:07:d8:e8:bd:5d:
18:c1:96:71:2e:13:6c:04:86:de:b5:0b:bd:d2:3d:
eb:26:2a:18:2e:fb:9e:88:94:04:df:7c:31:63:bc:
48:0b:eb:a9:f5:d4:9b:16:f9:0b:1d:48:5c:51:8d:
c8:ad:a8:ef:fa:58:65:63:21:96:1d:0a:9f:73:85:
ab:63:df:dd:41:ad:f1:6f:16:71:3c:9a:1f:1f:2a:
01:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F5:40:27:CD:01:2F:98:C0:AC:FD:44:CA:37:37:00:CA:F7:36:5C
X509v3 Authority Key Identifier:
keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:94:04:03:39:05:95:42:63:02:6f:c5:78:67:d3:ee:05:a9:
8d:ee:12:17:52:81:5d:6f:a8:f5:af:7a:ff:5b:91:83:50:a7:
5b:c6:f5:ab:88:16:df:30:00:20:63:8d:3c:d4:c6:a4:bd:0d:
1e:3a:25:c9:aa:1c:11:86:b1:5a:1d:ec:c8:52:43:c4:d6:e8:
6a:f7:ad:ac:f6:70:ae:80:4f:cc:c9:58:69:6e:4b:59:81:b9:
71:60:b6:8f:ec:de:c3:93:67:56:f4:d0:75:1b:22:30:d1:c2:
cf:bd:ed:37:67:bc:b4:46:7f:c5:20:e7:ff:9c:be:4f:2f:78:
fe:b6:35:3a:c1:fc:4f:7c:63:15:d4:af:7d:fe:3e:da:ed:30:
50:5c:08:fa:f9:0a:bc:c4:f5:06:56:6e:49:b1:a6:f4:1c:8e:
5a:e6:ec:f3:42:e8:f4:4e:62:f0:47:22:76:c6:83:95:ad:8f:
d9:70:78:cb:46:e3:aa:ea:f9:b7:40:d6:d6:c3:fa:b9:e0:2b:
4b:3d:c0:9e:e3:22:1d:47:d4:f6:f9:9c:00:e5:3b:0a:5d:30:
1f:dc:b1:8f:50:31:87:aa:39:79:af:46:21:8f:be:fa:41:f0:
b7:6e:61:b4:62:04:db:8b:f4:9e:79:48:0e:ec:5a:d7:b2:80:
08:dc:54:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:38 2024 by rpki-client on console-ams.rpki-client.org