Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.mft
File: KhmTnyGLthMV6bOzez24WWCXXRQ.mft (raw, json)
Hash identifier: xKx7ZqcEDYvjVJH6ZN3sWlxMn05HF+7qQqn9QZFEc7o=
Subject key identifier: 1B:40:A5:1F:DF:4A:9B:B0:05:30:EA:70:5F:09:32:9C:22:B8:54:42
Authority key identifier: 2A:19:93:9F:21:8B:B6:13:15:E9:B3:B3:7B:3D:B8:59:60:97:5D:14
Certificate issuer: /CN=2a19939f218bb61315e9b3b37b3db85960975d14
Certificate serial: 018F874AF16F42B21B561877CB5DD070A1C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhmTnyGLthMV6bOzez24WWCXXRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.mft
Manifest number: 0B72
Signing time: Fri 17 May 2024 16:03:06 +0000
Manifest this update: Fri 17 May 2024 16:03:06 +0000
Manifest next update: Sat 18 May 2024 16:03:06 +0000
Files and hashes: 1: KhmTnyGLthMV6bOzez24WWCXXRQ.crl (hash: 0ogrMvxW95wkYg7teu1do8QFUgM9Tize8e5YT7f/4lY=)
2: jRXoSiXgOI35OnqA9v_llgX960k.roa (hash: M3S4qVjoA45FUhsiJp9orhJoLYUWM0BtSx1LgWYW7Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhmTnyGLthMV6bOzez24WWCXXRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:f1:6f:42:b2:1b:56:18:77:cb:5d:d0:70:a1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a19939f218bb61315e9b3b37b3db85960975d14
Validity
Not Before: May 17 16:03:06 2024 GMT
Not After : May 18 16:03:06 2024 GMT
Subject: CN=1b40a51fdf4a9bb00530ea705f09329c22b85442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:bf:2d:f6:f3:e4:b5:79:8e:4a:1e:a8:b6:8c:
b5:74:40:1d:ac:3c:7f:1f:e4:80:db:45:99:91:72:
46:0e:36:c4:ef:c5:bc:5f:ed:e3:90:96:33:cc:7e:
9e:ee:01:35:b4:95:f1:d0:2d:fa:dc:32:d4:d3:91:
43:82:ec:5b:2d:34:5d:a3:4f:96:96:8c:ec:6b:2d:
8e:c8:d3:02:dd:c7:dc:99:6e:d7:4d:e6:45:7d:dd:
a2:e4:d0:25:f3:06:24:f7:0a:ba:8f:ad:9a:75:17:
96:99:0e:90:77:dd:9c:2d:a6:2b:e3:92:92:ab:db:
72:4e:30:75:4d:cd:9e:3b:63:85:51:1f:2e:36:bb:
1b:9e:3c:20:c3:a1:80:b0:e2:17:9a:aa:27:26:d1:
0b:80:9c:e0:2c:db:4b:e4:40:93:51:3c:42:17:6e:
ac:be:95:ba:58:80:ee:75:72:cc:4d:05:7c:55:5f:
9a:67:7c:86:d4:ba:c5:9e:eb:66:03:f8:3e:90:eb:
eb:bc:01:d7:2d:55:59:af:e0:30:f0:05:c1:67:30:
f3:4b:40:ed:82:c7:98:36:76:9f:94:ca:b4:30:4b:
7b:23:4e:de:36:ac:73:d9:75:ef:a2:9a:cd:df:44:
99:ef:76:52:e4:4d:a7:93:11:89:af:73:3d:34:76:
49:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:40:A5:1F:DF:4A:9B:B0:05:30:EA:70:5F:09:32:9C:22:B8:54:42
X509v3 Authority Key Identifier:
keyid:2A:19:93:9F:21:8B:B6:13:15:E9:B3:B3:7B:3D:B8:59:60:97:5D:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhmTnyGLthMV6bOzez24WWCXXRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f7:18:1b:7f:5b:f1:73:e0:f6:4c:64:e4:c3:57:9f:6d:ae:
a8:e9:12:a5:d8:40:56:20:61:ff:f5:d4:3a:e2:51:77:49:c0:
ee:f7:d5:a6:6e:95:94:9c:d4:43:f3:93:e2:b1:18:e4:a4:27:
13:29:3e:e2:d0:a6:19:47:03:28:73:dc:b1:17:f6:91:90:57:
e4:5e:9c:08:29:38:96:a6:e5:93:e6:1d:e2:fc:f6:d8:1d:06:
16:06:6a:3c:0c:c2:ec:4e:ba:8c:94:87:60:b4:82:06:da:c1:
59:13:55:57:ed:28:8c:6b:b5:8b:cc:81:8d:9a:6c:86:74:5b:
5b:36:70:bd:b6:b4:1e:37:62:ef:7c:e0:67:37:ac:a0:3f:6e:
cf:66:85:ba:59:59:4a:d5:83:77:3a:c5:de:12:29:ba:5a:b2:
07:68:84:c3:33:1c:8e:74:a3:68:58:32:5c:a1:6e:f5:dc:6a:
0f:c5:1f:7e:20:3f:b4:29:a1:a9:c9:5c:60:d0:65:fd:fc:7e:
de:50:29:9f:1b:41:47:59:0d:07:f0:23:7c:2f:da:69:37:17:
3c:32:41:f4:f3:72:99:38:62:d1:80:67:81:d7:1b:15:9f:d8:
c4:9a:4d:7d:92:d2:86:49:93:bb:5a:41:94:fa:6d:32:56:0a:
d7:67:2b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:46:31 2024 by rpki-client on console-ams.rpki-client.org