Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
File: klBppddk2iVZVNsu6dEkPeFrkQE.mft (raw, json)
Hash identifier: NZ4sDXeeS7oJ2AsluutxlovLupnsxiRFdX2TFfnyaJ4=
Subject key identifier: 0B:92:03:AC:3C:32:17:F7:85:8C:C8:6C:3D:17:3E:4C:18:AD:AA:F3
Authority key identifier: 92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
Certificate issuer: /CN=925069a5d764da255954db2ee9d1243de16b9101
Certificate serial: 0193579BE63D17514852DC62631EFB50A3CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
Manifest number: 0EFF
Signing time: Sat 23 Nov 2024 06:00:54 +0000
Manifest this update: Sat 23 Nov 2024 06:00:54 +0000
Manifest next update: Sun 24 Nov 2024 06:00:54 +0000
Files and hashes: 1: 6y4H2h0jh8Z6ZMozsvM5Ppg9HcE.roa (hash: tKywQT6IgHrsP+EzPcrarMPkpVmuqKCeZc3GzA7wt2A=)
2: 8Mcq-zl4dkvfFvsT7cZ47w4xd-A.roa (hash: eZOdsLsNSiBLDVudHyPUNQ6UbOIPbSjAhg2agmaOnRI=)
3: klBppddk2iVZVNsu6dEkPeFrkQE.crl (hash: ZR6en5ytNkKvt4mBWC8cW/Ls2UAFsNkBnW/0kgRGiNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:e6:3d:17:51:48:52:dc:62:63:1e:fb:50:a3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925069a5d764da255954db2ee9d1243de16b9101
Validity
Not Before: Nov 23 06:00:54 2024 GMT
Not After : Nov 24 06:00:54 2024 GMT
Subject: CN=0b9203ac3c3217f7858cc86c3d173e4c18adaaf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6a:33:fe:cf:71:06:b9:f5:e5:61:96:0f:86:
b7:62:55:7b:07:3d:64:6e:88:5e:11:ee:9d:0f:16:
d9:e6:43:e0:ba:e2:fc:e0:bf:a2:db:9b:4f:f0:f5:
d4:6d:c5:42:20:96:3d:62:77:e0:eb:b1:3f:82:84:
ee:71:56:24:40:2f:97:9b:cc:d4:2d:5d:9e:41:0b:
96:32:ba:d0:c7:ab:b4:34:67:bb:88:ec:20:93:3b:
04:80:6b:97:05:30:d4:6f:87:45:44:77:26:e2:7b:
44:de:2c:cd:f6:61:4b:31:96:a9:c7:52:4e:db:9a:
5f:f5:b6:59:31:e7:82:a6:03:61:99:0f:89:af:7c:
a7:5d:a0:39:fd:a4:84:de:92:62:d4:90:fe:69:4d:
ad:8a:03:ea:a2:62:f3:f7:c4:76:17:64:d0:56:69:
31:72:23:84:95:61:f6:a0:1d:41:06:55:59:57:32:
9d:d6:1e:95:53:1e:14:c3:d5:b0:19:05:ce:54:17:
3a:01:e3:eb:be:07:36:b5:b6:b1:c8:bf:94:d0:b1:
e3:1e:b5:64:84:6b:be:34:67:f7:35:64:95:3b:e7:
8f:5c:69:6f:94:6f:88:c3:6e:de:da:e4:92:d6:20:
a4:ef:44:f1:76:e6:82:70:0b:dd:d6:21:e0:9f:12:
ea:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:92:03:AC:3C:32:17:F7:85:8C:C8:6C:3D:17:3E:4C:18:AD:AA:F3
X509v3 Authority Key Identifier:
keyid:92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:88:74:ea:a0:d9:12:97:cb:5a:95:96:19:49:84:30:ad:e1:
f1:fe:22:1a:28:e9:9d:b3:ff:6f:e1:2c:a6:14:6e:ee:f7:30:
b1:6f:ac:b1:ee:9c:5e:26:8b:56:a0:a7:d2:fe:e3:45:a7:63:
69:09:d8:7a:4f:31:f2:f9:0b:14:b2:44:f2:78:65:73:03:c1:
5f:6b:ff:2b:c0:21:3a:28:bb:b6:2d:d6:2a:b4:02:e0:88:e1:
cd:db:89:48:07:9d:74:80:33:f6:b0:c9:26:fa:fc:01:ee:04:
76:6d:c9:6b:e6:c2:2e:16:e5:7c:55:c7:77:63:0f:b2:27:82:
03:27:b7:de:1a:5e:e0:bc:a4:bf:1b:d4:49:32:32:d1:25:26:
fb:c1:1e:9e:70:1f:95:ed:6e:48:46:20:b0:83:83:89:76:84:
36:75:4b:fc:d5:85:01:4d:2f:7b:4e:d8:5e:75:ea:bc:23:8f:
d8:7e:fa:5d:5d:c7:75:8b:0c:c3:0e:9c:39:5d:58:38:13:56:
40:0d:82:10:c0:18:c6:88:16:c0:00:55:46:e9:fc:52:f9:14:
c6:85:d6:46:db:7e:9c:4d:de:78:f5:d6:7f:1f:1c:a0:17:28:
78:dc:9d:b6:67:1d:56:c3:c5:d5:8d:9a:67:87:95:a1:39:20:
67:17:0c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:58:35 2024 by rpki-client on console-ams.rpki-client.org