Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
File: kpM-ATZE25ye6bkd9y4TONuOIJc.mft (raw, json)
Hash identifier: Y7dIS7Blfg+EIbNIS5YufX/jEBW14XvCpTQZzebyAqk=
Subject key identifier: 4E:F6:DE:1B:DE:ED:84:43:47:E4:57:C0:01:DF:52:34:06:6C:21:9E
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 019234DDDAD3773A17CC910DBB1CC605B57B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
Manifest number: 0B27
Signing time: Fri 27 Sep 2024 19:03:27 +0000
Manifest this update: Fri 27 Sep 2024 19:03:27 +0000
Manifest next update: Sat 28 Sep 2024 19:03:27 +0000
Files and hashes: 1: S7BXV-c3clO18W9xOTz99r092hQ.roa (hash: RKynOz0yygZhaZlZXI50pHWJ2CYBNopKIwQ9qvtbeLM=)
2: k1pkb1vXZT4K2DP-fge1ZIyBZAo.roa (hash: 3hOnsRpg/abFBbHEXDc2HgqucXKS3R1S+k0c2tS+VIQ=)
3: kpM-ATZE25ye6bkd9y4TONuOIJc.crl (hash: 6fzzIC8KtaJHl5z1+VRqOgPtBUdgiVS4zeIsm22FWhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:34:dd:da:d3:77:3a:17:cc:91:0d:bb:1c:c6:05:b5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Sep 27 19:03:27 2024 GMT
Not After : Sep 28 19:03:27 2024 GMT
Subject: CN=4ef6de1bdeed844347e457c001df5234066c219e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:79:16:65:d2:a6:d9:22:d9:c5:7e:3d:83:
80:ae:00:48:46:96:12:b6:17:b0:e9:24:ef:23:7a:
05:17:1c:4f:3c:2d:61:45:b1:86:f1:29:96:25:37:
9c:6d:a5:cf:79:a9:41:ed:58:ef:9e:77:31:ae:69:
0c:62:49:e0:cd:6c:85:83:0d:8c:e1:74:a3:82:94:
ea:73:42:e7:c6:e7:7a:b1:ca:06:9b:0e:dd:63:f3:
1c:ec:b8:ab:b3:42:6d:73:f4:1a:eb:2c:ed:f2:53:
69:29:2d:46:c8:d2:0b:39:b7:8f:73:27:c3:a2:3f:
e3:cf:93:4f:b6:44:b9:76:2e:15:50:da:db:c1:e6:
e5:51:49:84:1e:ef:87:16:75:df:b2:a7:8e:83:a2:
4a:c2:04:c2:b2:30:1c:8f:52:f7:59:2b:6a:93:39:
b6:3b:f0:e3:bf:74:f4:18:b9:18:18:13:69:de:03:
98:03:6d:9c:db:22:24:1a:fa:3c:77:01:13:95:fd:
0b:9e:09:fa:8c:ab:48:55:4d:e0:fb:70:ec:41:73:
fc:e4:67:bf:d8:d8:a7:b1:3e:df:48:28:c5:d5:be:
e2:65:89:33:63:29:56:a8:60:9f:85:c7:25:a2:ef:
95:9f:9d:4b:48:17:0b:c5:98:60:c6:44:3f:6f:f3:
03:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F6:DE:1B:DE:ED:84:43:47:E4:57:C0:01:DF:52:34:06:6C:21:9E
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:41:3a:e4:3c:f0:c1:d0:14:2c:bc:1f:45:7b:8d:21:42:79:
58:35:56:96:9f:ac:d7:5b:6c:5f:9a:be:f4:52:6d:39:15:fa:
00:3c:24:48:4b:e4:96:c2:0d:92:b0:fa:ad:1e:e5:06:69:03:
8a:63:71:09:13:b7:0f:c3:0b:a6:e3:d1:f2:d5:17:35:26:46:
04:56:23:5a:92:38:2b:36:e5:2c:22:a0:04:fc:04:e6:7e:cf:
22:68:9a:48:1d:8e:a6:96:f3:1a:14:8c:29:2f:35:75:bf:c4:
23:24:00:08:93:c7:dd:e1:53:cd:15:11:2b:67:73:50:4b:a7:
cb:a5:1e:18:57:bc:13:bf:52:07:da:8c:fe:4e:ef:e5:2e:79:
96:1d:2b:07:40:ef:c0:9c:88:15:d7:2a:2d:85:1b:76:c4:90:
b2:27:2b:12:39:71:56:87:ea:54:3d:fd:e9:7d:78:25:78:5f:
de:bb:78:64:9b:90:a5:b5:8e:6f:29:95:2a:57:17:b0:8a:a6:
10:8f:87:89:e1:b9:15:bd:8c:fd:bb:50:c5:54:b2:ac:65:fc:
9b:1d:ca:82:b6:05:03:4e:81:24:08:bf:5f:53:21:b7:99:47:
ce:b3:4a:c3:a7:67:24:20:b0:9f:27:77:e0:b8:9b:b5:23:35:
e2:b8:e7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:13:55 2024 by rpki-client on console-ams.rpki-client.org