Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/987b3c-f345-4112-9240-a4c0aba9bbeb/1/KqPjBJdiCGjhestHhoLOegvRNTQ.mft
File: KqPjBJdiCGjhestHhoLOegvRNTQ.mft (raw, json)
Hash identifier: OiD9E6+Dy1RA8himw2iRnsueKG2Bm7JYftPnXP7RwEE=
Subject key identifier: 4E:A6:09:8A:B3:98:77:A8:AE:AD:F3:8F:83:39:A0:73:CB:F2:F7:B1
Authority key identifier: 2A:A3:E3:04:97:62:08:68:E1:7A:CB:47:86:82:CE:7A:0B:D1:35:34
Certificate issuer: /CN=2aa3e30497620868e17acb478682ce7a0bd13534
Certificate serial: 01904867F1B9FDFFAD095A73C16BA44092D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqPjBJdiCGjhestHhoLOegvRNTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/987b3c-f345-4112-9240-a4c0aba9bbeb/1/KqPjBJdiCGjhestHhoLOegvRNTQ.mft
Manifest number: 11DA
Signing time: Mon 24 Jun 2024 04:01:29 +0000
Manifest this update: Mon 24 Jun 2024 04:01:29 +0000
Manifest next update: Tue 25 Jun 2024 04:01:29 +0000
Files and hashes: 1: KqPjBJdiCGjhestHhoLOegvRNTQ.crl (hash: C1NMhKpukorIAA370Py7QRf+rkErSBJ7S+sEANXf+xM=)
2: ZOWGFapmqYmYjG1ZzoOe6jNiNV8.roa (hash: IAmugNWbNIxTCfUrbHxnaivO0SsEuAS4hdFkXNnQFyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/987b3c-f345-4112-9240-a4c0aba9bbeb/1/KqPjBJdiCGjhestHhoLOegvRNTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/987b3c-f345-4112-9240-a4c0aba9bbeb/1/KqPjBJdiCGjhestHhoLOegvRNTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqPjBJdiCGjhestHhoLOegvRNTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:48:67:f1:b9:fd:ff:ad:09:5a:73:c1:6b:a4:40:92:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa3e30497620868e17acb478682ce7a0bd13534
Validity
Not Before: Jun 24 04:01:29 2024 GMT
Not After : Jun 25 04:01:29 2024 GMT
Subject: CN=4ea6098ab39877a8aeadf38f8339a073cbf2f7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ee:3d:19:1a:da:e9:86:9b:d7:29:8b:d1:de:
1e:3c:32:4e:ed:ce:f6:bb:db:22:33:ae:05:1b:84:
0b:3a:9b:9b:7d:e7:23:b9:68:21:c7:d2:c0:33:51:
c4:ce:6e:9a:8f:f2:9f:5e:38:86:76:94:29:53:d7:
f0:ad:c7:ef:7e:b1:69:98:5e:99:bd:13:20:f4:c2:
9a:49:67:37:66:90:09:7d:b4:20:7f:67:f3:92:ce:
88:91:bf:6a:89:b2:96:6b:8a:ed:81:df:4a:ad:22:
f1:4e:4b:1f:87:92:9f:27:f3:3f:97:50:19:fa:6b:
eb:61:44:73:10:1a:eb:ec:b6:23:23:29:9c:03:27:
da:e7:c9:18:49:b8:f0:70:99:c1:30:bd:32:be:61:
f6:da:77:d3:3a:e3:b1:75:bf:66:14:13:88:1e:fb:
76:03:13:ea:56:42:17:be:3f:90:67:24:f1:b4:59:
4d:4f:4c:4a:ad:c3:67:a6:e1:6f:01:f2:a1:6e:97:
b7:58:42:5f:66:17:ee:88:a0:9c:e8:83:e3:69:7d:
79:87:20:66:09:de:62:a1:19:3a:18:00:e5:e1:51:
ef:e2:6c:70:53:96:91:49:51:dd:de:e8:f6:54:d8:
e9:94:ab:6d:05:68:f2:ee:af:4e:ed:6c:82:0d:a1:
79:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A6:09:8A:B3:98:77:A8:AE:AD:F3:8F:83:39:A0:73:CB:F2:F7:B1
X509v3 Authority Key Identifier:
keyid:2A:A3:E3:04:97:62:08:68:E1:7A:CB:47:86:82:CE:7A:0B:D1:35:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqPjBJdiCGjhestHhoLOegvRNTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/987b3c-f345-4112-9240-a4c0aba9bbeb/1/KqPjBJdiCGjhestHhoLOegvRNTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/987b3c-f345-4112-9240-a4c0aba9bbeb/1/KqPjBJdiCGjhestHhoLOegvRNTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9c:a1:00:ac:4d:f2:12:87:0d:68:e4:0e:f7:21:c3:c7:a0:
8f:34:00:ea:03:74:f3:c2:ce:a4:d0:62:3e:43:a5:e8:30:7d:
b8:1e:e1:a1:7d:bb:47:51:bb:04:75:d6:4f:a4:2f:a7:5a:d8:
3b:cb:e3:a7:6e:b6:dc:bf:b1:e1:72:84:af:4e:5f:bd:da:b9:
55:05:75:aa:31:41:91:1f:31:0e:85:65:d5:f7:bd:35:9b:74:
44:82:a5:a8:59:f0:29:8d:02:96:f5:38:47:63:47:d6:b5:d3:
09:55:59:46:f5:9d:ef:fa:b2:6e:6f:5e:09:ec:cf:63:c5:fe:
d8:94:48:b5:3b:a4:b4:04:dd:9e:83:88:2e:e7:11:b4:d5:8f:
8b:15:52:c1:9e:82:b3:80:49:63:6c:eb:e1:48:0c:77:3a:ed:
64:65:0b:9c:38:5e:e8:86:86:31:94:5f:fc:b9:49:ae:f3:3b:
4c:63:55:a7:f0:20:00:fd:88:7d:f5:c3:b4:04:d9:82:fb:84:
83:44:bb:88:c9:94:ca:93:98:bf:39:cd:60:19:6f:6a:55:50:
b2:0d:4b:78:7c:0b:6c:0e:c6:31:72:86:bb:85:67:77:32:9b:
84:45:19:e8:a9:67:b9:2a:70:52:9e:6b:ec:20:84:45:10:ea:
72:d5:86:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:44:13 2024 by rpki-client on console-fra.rpki-client.org