Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
File: kpM-ATZE25ye6bkd9y4TONuOIJc.mft (raw, json)
Hash identifier: 2i34LwYw85Mls9Zb4TE+uHtouc6423dGfScOHzfaG1Y=
Subject key identifier: 6C:6E:D5:08:D4:39:6C:6F:20:4C:C9:59:05:F1:68:96:1B:98:5D:C7
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 0193549C759A8B09A992C67CE6D8CA401230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
Manifest number: 0BBC
Signing time: Fri 22 Nov 2024 16:02:40 +0000
Manifest this update: Fri 22 Nov 2024 16:02:40 +0000
Manifest next update: Sat 23 Nov 2024 16:02:40 +0000
Files and hashes: 1: S7BXV-c3clO18W9xOTz99r092hQ.roa (hash: RKynOz0yygZhaZlZXI50pHWJ2CYBNopKIwQ9qvtbeLM=)
2: k1pkb1vXZT4K2DP-fge1ZIyBZAo.roa (hash: 3hOnsRpg/abFBbHEXDc2HgqucXKS3R1S+k0c2tS+VIQ=)
3: kpM-ATZE25ye6bkd9y4TONuOIJc.crl (hash: Fkdhl3dDiHdZwt4DXHjt2VT/LkOOs82MNFC9PYPcOdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 16:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9c:75:9a:8b:09:a9:92:c6:7c:e6:d8:ca:40:12:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Nov 22 16:02:40 2024 GMT
Not After : Nov 23 16:02:40 2024 GMT
Subject: CN=6c6ed508d4396c6f204cc95905f168961b985dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:42:2b:db:40:9a:9c:40:08:6c:2e:80:c0:
0d:10:0a:53:f0:71:9f:fb:08:1b:8d:7f:b4:bf:e0:
8e:97:fe:f4:38:79:44:4b:af:5c:61:32:d4:c9:0a:
55:56:c2:3a:6d:1f:47:99:28:7c:b9:61:f7:85:c0:
ea:fe:c8:3a:61:e6:02:34:28:30:52:4a:ef:77:39:
78:fc:5b:98:ac:4e:21:0d:9b:5c:31:f6:d6:d1:b1:
83:0e:f0:76:d9:64:c3:57:29:25:d9:51:f2:0a:82:
97:38:d4:14:cd:91:6c:46:ab:87:0e:6b:30:47:c1:
c0:b3:1c:f0:be:0d:8c:b2:a3:49:85:d0:be:2f:33:
ef:a1:5a:52:53:e1:bd:4a:c6:9f:aa:2b:03:87:7e:
f9:84:ed:3b:d7:b2:34:ca:f7:f3:cd:2f:69:f7:bc:
39:65:5e:8c:66:87:d5:76:ac:42:91:19:9a:0c:03:
ac:ab:d3:13:f4:fb:1f:eb:91:8f:71:b9:ce:0f:7d:
33:d6:60:de:fc:a3:1f:c4:a1:79:d8:6c:ce:1d:e6:
c4:38:b6:de:36:f3:0b:84:23:d7:6e:80:15:8a:cf:
0a:9b:04:e7:c1:d9:12:0d:c3:13:e9:d6:f8:32:a2:
44:76:43:be:7b:57:c9:b7:dc:a9:b3:cb:98:e8:62:
1b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6E:D5:08:D4:39:6C:6F:20:4C:C9:59:05:F1:68:96:1B:98:5D:C7
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:9b:cf:18:51:ad:ee:e8:a0:dd:d0:c2:ed:a8:6e:d5:05:5c:
66:14:c6:b9:78:8e:ca:d1:20:52:44:d7:2f:00:d9:a8:59:6f:
ee:4b:6e:60:e0:7d:d5:73:35:b7:e3:b1:5a:eb:d2:29:d4:03:
9b:1c:0b:2d:60:1b:5d:61:dd:a9:6e:6a:0c:fe:10:c2:ac:61:
46:25:70:a5:5f:22:61:e2:9a:35:af:7f:bb:3c:e2:eb:1c:35:
54:10:59:6e:5b:1a:bb:c1:15:d5:bd:5f:b5:16:43:75:ca:f3:
97:6f:a0:c1:7b:a9:64:5c:fc:a8:c5:c6:e9:93:17:08:7f:c1:
c1:04:47:f4:88:a5:0e:6b:e9:45:5b:b1:54:25:4e:3b:7c:8d:
78:47:5f:49:68:f2:56:22:1a:fd:9c:9d:27:9d:68:e8:c2:9a:
77:48:fb:32:93:fb:a8:33:1f:ea:a2:53:f4:53:40:b0:c0:84:
44:68:43:23:b3:35:8d:3d:03:a6:9e:c7:ac:9f:48:ac:d3:d2:
55:73:4e:da:3e:1b:55:83:f0:6f:96:33:54:e9:57:df:b5:99:
79:d7:d9:86:f8:e0:27:34:14:86:b6:d7:fc:6c:c6:5b:f0:fb:
88:5b:6b:bf:86:51:42:d0:e5:2f:e5:33:cc:3e:42:b1:df:4d:
6d:9a:1b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:23:39 2024 by rpki-client on console-ams.rpki-client.org