Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
File: K0q0wVF_cy34suyD3krSNo1Fz98.mft (raw, json)
Hash identifier: ghbc1Jypk5FZXxm8sG7jgFvPYTjE0swbQFzbLE/kJps=
Subject key identifier: 5D:DA:25:7D:D3:BE:CB:D0:90:05:E8:E4:97:E2:7D:93:F1:B2:89:4B
Authority key identifier: 2B:4A:B4:C1:51:7F:73:2D:F8:B2:EC:83:DE:4A:D2:36:8D:45:CF:DF
Certificate issuer: /CN=2b4ab4c1517f732df8b2ec83de4ad2368d45cfdf
Certificate serial: 01903AE3BE034C49FB59AFF7E517C82EFA39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
Manifest number: 10AD
Signing time: Fri 21 Jun 2024 13:02:02 +0000
Manifest this update: Fri 21 Jun 2024 13:02:02 +0000
Manifest next update: Sat 22 Jun 2024 13:02:02 +0000
Files and hashes: 1: K0q0wVF_cy34suyD3krSNo1Fz98.crl (hash: B7LCatVB+7BYanIZS/nyo/n7AG1r8Uggbsc5l0wOUU0=)
2: yuyVaD8CJVBq89w8Fw8MUzthiSE.roa (hash: ddA9kTQulCAGphQUMVh9W1ejbv7aLsudbSs6ayTXZk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3a:e3:be:03:4c:49:fb:59:af:f7:e5:17:c8:2e:fa:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4ab4c1517f732df8b2ec83de4ad2368d45cfdf
Validity
Not Before: Jun 21 13:02:02 2024 GMT
Not After : Jun 22 13:02:02 2024 GMT
Subject: CN=5dda257dd3becbd09005e8e497e27d93f1b2894b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b6:2c:16:4a:0f:d8:dc:b5:24:4a:2e:0a:fa:
41:89:d4:0d:3b:9c:88:c3:2b:2e:76:ea:b3:d4:dc:
42:d7:60:ed:e2:66:e4:ab:fc:1a:8d:04:1e:70:b8:
66:59:06:2b:fe:fe:56:81:6c:9b:15:71:0d:bc:98:
0f:12:97:61:8a:9d:b9:76:be:0d:02:db:ff:cc:e8:
fc:54:2b:0e:7f:cf:d4:07:69:f3:c5:f4:a4:d4:5b:
f3:c0:c9:d1:35:e2:a7:8d:30:29:5c:62:09:f7:39:
d0:52:37:44:77:2a:d6:bf:ca:8b:1a:16:56:86:5f:
e5:e4:cb:55:b1:df:ad:70:80:c1:74:23:fd:fd:61:
a7:44:4c:69:0b:20:7b:73:be:08:ef:35:c1:4f:82:
82:57:31:45:4b:eb:ee:da:43:85:3e:91:63:12:7c:
74:4a:f2:f5:0f:ae:8c:c3:c1:98:77:9f:07:f2:ae:
fc:09:5e:17:42:08:24:b4:a9:fa:b7:82:5f:82:77:
9b:83:7e:6a:9c:b2:6d:41:24:d7:57:30:47:ff:b2:
47:97:a0:40:9c:94:11:b2:19:61:88:5b:f3:90:87:
fc:39:35:74:f3:2e:28:fc:8f:e6:92:ff:63:8b:dd:
28:de:71:73:39:e6:a8:37:ae:e9:d3:25:35:9d:6f:
de:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DA:25:7D:D3:BE:CB:D0:90:05:E8:E4:97:E2:7D:93:F1:B2:89:4B
X509v3 Authority Key Identifier:
keyid:2B:4A:B4:C1:51:7F:73:2D:F8:B2:EC:83:DE:4A:D2:36:8D:45:CF:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:6a:22:e4:03:b1:7d:0c:d0:39:f8:42:4e:55:7c:39:33:70:
48:a4:36:4b:72:89:5a:18:c5:04:70:63:e9:30:8f:42:2f:cb:
b5:54:dd:ec:6e:4d:03:94:ae:8c:86:0c:71:2d:b7:be:1a:d8:
3e:4d:06:43:bb:70:fb:80:b1:f2:77:2c:52:2d:68:1a:3d:c7:
ce:ff:ae:bc:70:bb:af:b1:f4:19:a9:37:bc:bd:23:3c:95:ff:
59:9b:bb:08:f5:c5:ed:b0:a9:72:df:e5:af:29:20:24:6b:83:
fa:0a:67:42:03:1b:a6:e9:d5:24:b4:0a:04:e7:7c:10:09:c0:
37:bc:fa:a3:f5:79:52:d5:d1:bf:fe:ce:7c:6c:28:fd:37:86:
68:36:0f:e1:9c:3c:ae:1e:49:68:ed:e0:63:c3:f0:b4:7c:29:
94:60:87:09:84:68:36:18:e4:b5:ce:bc:52:fc:01:86:1d:00:
73:42:89:c4:e1:74:9a:96:f6:31:a9:6f:88:6c:9a:ba:74:e8:
4b:ae:03:7b:5f:73:9a:4c:f8:c5:81:6c:3b:f7:7c:8a:20:0c:
d4:93:8c:aa:bc:57:13:41:2d:a2:6c:da:23:28:df:62:b2:6b:
85:5f:31:6b:75:5d:d4:78:29:7a:b1:16:de:73:5c:cf:4e:7a:
2d:81:72:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 16:36:55 2024 by rpki-client on console-fra.rpki-client.org