Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
File: kIp-pxKAHkyP64Wz8HjQW6EBquE.mft (raw, json)
Hash identifier: 86RQFkGTT+v5/HYP6uoNOvRGOAz8qxVSOupIQTUCavA=
Subject key identifier: B0:91:28:31:7E:4F:03:15:9F:D8:D8:DC:5F:EE:B6:27:44:5A:EF:A7
Authority key identifier: 90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
Certificate issuer: /CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Certificate serial: 01936AB449639D02DA45AAC8360F83196E1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
Manifest number: 137B
Signing time: Tue 26 Nov 2024 23:00:20 +0000
Manifest this update: Tue 26 Nov 2024 23:00:20 +0000
Manifest next update: Wed 27 Nov 2024 23:00:20 +0000
Files and hashes: 1: Bp8t3rH-D-ONNdL_4aqtJSGuTQA.roa (hash: MBzdk4LTMOfnH5bWpUwaeBZ5UAEC3mJJ8CviLtp0cmY=)
2: kIp-pxKAHkyP64Wz8HjQW6EBquE.crl (hash: g4hZVDpl/50qG+q5sF7yCMRsm0qOaMojBBODZBV3jr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:49:63:9d:02:da:45:aa:c8:36:0f:83:19:6e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Validity
Not Before: Nov 26 23:00:20 2024 GMT
Not After : Nov 27 23:00:20 2024 GMT
Subject: CN=b09128317e4f03159fd8d8dc5feeb627445aefa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b3:68:97:65:12:0c:4f:b3:93:e6:ea:a7:fd:
0d:87:41:2e:e6:1f:6f:d9:a3:07:fe:9f:27:d8:b3:
f8:65:69:11:aa:18:6d:4d:a5:4b:9f:9f:2e:57:f7:
8b:b0:e6:f0:ce:f2:97:a6:10:75:87:1e:cd:69:6e:
d9:81:b5:44:7f:f5:36:dc:8f:88:9c:b3:6f:f6:20:
d4:af:79:a8:39:68:5d:22:1f:74:54:e0:0a:b0:6f:
9d:ac:fb:d0:a3:4c:bc:70:44:05:1f:d2:f0:ca:f2:
da:b2:17:5f:69:16:fc:e0:e9:51:ba:bb:15:54:35:
37:21:2b:cc:b9:1d:3b:0c:15:9e:cc:e1:be:45:c2:
52:81:3a:5b:a5:6c:b9:85:22:93:8e:b7:dd:2f:cf:
a4:9f:9c:ac:09:d1:d1:79:55:0f:2a:f8:39:6c:7b:
af:e8:22:20:96:cd:87:99:6a:45:82:ad:c9:17:fb:
84:c3:3c:b5:a5:0a:b9:a1:dc:39:a7:f9:18:c2:97:
5c:3c:dc:fd:87:8c:d8:03:7e:bc:d1:31:25:a3:c0:
bc:db:4c:6d:86:bc:fa:ce:cb:e5:32:f5:87:a2:77:
ff:01:9b:db:1a:de:09:90:cf:68:0c:e6:3d:6e:a7:
9d:7a:39:e8:4b:23:b7:dc:15:57:ec:02:df:45:2f:
54:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:91:28:31:7E:4F:03:15:9F:D8:D8:DC:5F:EE:B6:27:44:5A:EF:A7
X509v3 Authority Key Identifier:
keyid:90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:85:0c:3d:72:5f:44:16:89:de:2d:2e:2d:f5:6a:db:78:8f:
82:a0:7b:11:cd:78:ff:6c:0e:9d:d2:fe:4d:89:07:3b:a6:b4:
f1:bf:e9:3a:b5:96:9f:aa:76:5b:4b:1a:62:8a:da:b6:c7:2c:
c5:28:42:af:4e:d6:d3:39:10:aa:7c:f9:05:d5:99:f4:f9:e8:
b1:37:ad:a9:5a:26:03:18:bb:50:6b:b9:c8:89:96:d1:32:d9:
cd:c4:7c:26:68:b3:5c:eb:18:00:21:76:d9:a7:24:b0:da:84:
f9:1c:07:ec:f5:ba:98:94:bd:0b:89:ba:5f:d2:2b:82:bb:0c:
3f:4b:5c:dc:93:14:5b:91:d4:05:07:bb:fb:d8:0a:cc:61:6b:
46:dd:fb:96:2a:13:1e:a8:41:4b:56:e0:ae:47:3c:cd:ce:83:
8f:b9:af:69:f9:0c:34:37:d8:45:bf:1c:ff:fe:b6:6d:13:b7:
99:f0:8f:78:fe:92:b1:65:5a:ba:28:7d:86:f1:88:ab:c4:c5:
82:36:d7:fb:a3:48:74:ee:63:d1:81:09:af:34:51:63:ac:35:
36:61:93:8f:a2:4d:a5:41:4f:37:04:5f:7b:52:95:17:37:0c:
a5:e8:b2:4e:7e:de:69:8e:e8:4d:ee:37:7e:53:31:31:fe:1e:
08:a6:c7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:59:12 2024 by rpki-client on console-fra.rpki-client.org