Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
File: kGIGOModg1ZQ4I3c82PxB4m1MFc.mft (raw, json)
Hash identifier: 9RPh6lMoN6EP5wgU+IGKjDNQR+LLkCuDWZZgn2QW3kw=
Subject key identifier: 99:05:BF:F7:D5:03:4D:31:A9:5E:12:12:07:F4:21:50:48:D6:10:01
Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
Certificate issuer: /CN=90620638ca1d835650e08ddcf363f10789b53057
Certificate serial: 019351D092AEF568986A67BAD85F13754EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
Manifest number: 1371
Signing time: Fri 22 Nov 2024 03:00:43 +0000
Manifest this update: Fri 22 Nov 2024 03:00:43 +0000
Manifest next update: Sat 23 Nov 2024 03:00:43 +0000
Files and hashes: 1: MbhfE_efCMzqlbtXs1ykcFYphuM.roa (hash: HBTORhDATGcHii7+YfrkFlrCDp6falLMzKpmf4Yr9ks=)
2: aUloGwmaTQ_qbtvN2aexR4yEB5c.roa (hash: RsZFxiyFPt3TyygGylNFbNM+VxnjxQbBIDKarfn91Vg=)
3: fb16bHMJNlBskVA8uKAOPhyOPVY.roa (hash: X7USfTd5Qi/IJT/Lh4HhHyPDB9FKnfohgNCbUoZLYFY=)
4: kGIGOModg1ZQ4I3c82PxB4m1MFc.crl (hash: 9Hjsm4t3zTW6KGmhB9nMNbiNoG076A9hcoDFiZJAA1c=)
5: loD0F1jcPWbpDP43o_lkBrOd7Rs.roa (hash: DUoOSwYo5m/Vr5HrhIh4DIBX9AmFyMx+tmCyxn1jd8c=)
6: uaK5rakOXRG9W8798rBBFgSKLU0.roa (hash: HOYIxsV7HZqrX1WfVistSYwwI8yhaVbki32i3BOFNQo=)
7: v6ew1Gij9DKgoMvBzg2sOFsumGI.roa (hash: bWT6wvZZ+siu4wWi/g9VjPR4m42YuxR3yjKw+7m4FE0=)
8: vcZyQNxSmk4am9Tz9L3m0xekmio.roa (hash: 7AGhV9Sa4PzaqATRYb3DH2DHvhCaSm8WM4dJU5hXgCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:d0:92:ae:f5:68:98:6a:67:ba:d8:5f:13:75:4e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057
Validity
Not Before: Nov 22 03:00:43 2024 GMT
Not After : Nov 23 03:00:43 2024 GMT
Subject: CN=9905bff7d5034d31a95e121207f4215048d61001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:20:05:80:7c:f6:a1:32:d1:58:92:f6:61:e1:
9a:c6:47:00:df:0c:9c:1c:51:0f:7a:f2:b4:7c:a7:
bd:db:c2:b8:e6:4e:5f:5b:74:0e:26:26:9f:96:a6:
af:5b:ad:01:1a:74:5e:32:ad:26:d7:d2:6d:43:6f:
00:04:51:0c:a6:41:8c:11:fa:70:a4:f4:08:e2:0a:
0c:27:27:66:f4:26:95:ee:b3:42:d0:51:d3:28:9e:
30:0a:fc:b1:e1:85:93:2b:c3:af:02:eb:40:aa:44:
8c:ee:14:f7:ce:bc:6c:c4:2f:01:d6:ca:8b:55:ad:
44:44:ab:c7:ac:db:5c:0f:1d:02:78:56:ee:39:10:
23:03:0d:d3:3b:67:75:d1:b0:ee:db:2f:19:94:67:
16:03:84:a8:e1:19:b5:42:1b:0b:d6:b3:0d:52:bb:
4c:6a:13:45:d0:0e:35:a1:e1:e1:20:d3:21:fd:f3:
a2:22:db:60:8c:a2:58:c4:8b:a5:02:bf:07:5d:f5:
76:88:32:a4:3b:8d:fe:37:ea:b4:28:c0:89:3e:32:
f5:c9:1c:a4:95:dd:d7:b6:bf:b1:22:76:76:1d:c5:
26:ff:36:22:f7:8d:54:6d:bd:a1:c5:d2:16:d6:c3:
cb:07:aa:76:69:b5:46:1f:93:43:d0:3f:ea:fc:04:
32:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:05:BF:F7:D5:03:4D:31:A9:5E:12:12:07:F4:21:50:48:D6:10:01
X509v3 Authority Key Identifier:
keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:15:f2:87:c9:2e:d5:63:9d:7b:69:fc:f1:08:f9:8b:fd:08:
ae:9c:2f:ef:d8:9e:05:04:08:5c:a3:19:cd:c4:78:85:dd:89:
2b:58:aa:dd:80:1b:01:4f:ea:e0:a9:17:64:d4:13:63:ad:bc:
15:08:c0:53:f3:24:d6:02:b0:91:54:72:3c:5e:5f:d8:3c:a3:
98:ed:d6:f3:5e:fb:0c:be:04:d9:39:91:99:36:91:c9:3a:db:
89:9b:52:55:4e:e1:2c:60:6d:49:ba:cd:f9:ad:32:09:73:f1:
ba:f6:dd:91:e3:ed:a0:25:25:18:58:9a:fa:ef:5f:55:d9:05:
46:7c:42:5f:2b:f5:2c:1f:5c:e6:05:5d:3f:27:b5:51:45:6b:
74:f5:7b:77:c6:7b:f0:55:13:6e:52:33:7d:73:49:90:db:11:
ba:17:f4:71:84:9c:96:b1:a8:7d:98:47:a4:e9:d3:4b:8b:7a:
d9:7a:9c:c2:f3:12:7d:5b:f7:52:85:a1:18:13:8d:c4:ea:33:
58:30:d2:5d:43:d5:c2:3f:96:f8:10:8f:47:04:50:7f:27:12:
01:21:9e:ff:7e:6b:07:eb:85:75:c5:49:c0:1e:af:41:12:8c:
6a:96:d2:48:ad:3c:d3:12:cf:f5:49:5c:c8:84:f9:b9:a1:d7:
25:ef:b1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:36:42 2024 by rpki-client on console-fra.rpki-client.org