Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.mft
File: KbOnF2ZaETfpncj60i4-f5jbiXM.mft (raw, json)
Hash identifier: z4PB03XkhNr5hPXJPGGapIlOWVy9uCIMqE0S3tcw18E=
Subject key identifier: 51:AF:47:34:5D:21:16:FA:8D:A4:03:80:82:A4:4B:54:89:1A:FF:65
Authority key identifier: 29:B3:A7:17:66:5A:11:37:E9:9D:C8:FA:D2:2E:3E:7F:98:DB:89:73
Certificate issuer: /CN=29b3a717665a1137e99dc8fad22e3e7f98db8973
Certificate serial: 018F6F77FDC29D902668F67A472124AA23AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.mft
Manifest number: 1170
Signing time: Mon 13 May 2024 01:01:25 +0000
Manifest this update: Mon 13 May 2024 01:01:25 +0000
Manifest next update: Tue 14 May 2024 01:01:25 +0000
Files and hashes: 1: KbOnF2ZaETfpncj60i4-f5jbiXM.crl (hash: 8u7+ZjH+z694M4BSLhw9WHLt2Ybb4NORuvTj5qlCOKU=)
2: Zwe7v3V3hv3_HCNNhH0OB5_474s.roa (hash: xmoHsLV/6qfPxeWr/JNXGWPLp8GV+PRfgERwrFFfwJI=)
3: adDQjuvI3p4mjHQWdEQPux6RilY.roa (hash: rZI8xwYb/nUV0bmqU06/3aAXnouFSPFk+/wKxoi10Zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 01:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:6f:77:fd:c2:9d:90:26:68:f6:7a:47:21:24:aa:23:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b3a717665a1137e99dc8fad22e3e7f98db8973
Validity
Not Before: May 13 01:01:25 2024 GMT
Not After : May 14 01:01:25 2024 GMT
Subject: CN=51af47345d2116fa8da4038082a44b54891aff65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5b:bc:64:27:28:af:4e:18:db:3b:fa:8b:ed:
9e:7d:8f:8a:85:45:1e:37:f2:d3:30:33:3d:52:61:
7b:c0:f3:8b:13:a8:12:34:4a:15:2a:f3:20:cf:5d:
ac:6f:bc:5c:44:32:0c:43:fd:64:e2:71:27:7d:63:
d1:6c:73:94:66:09:41:c7:d5:79:a4:cd:f6:d9:71:
a1:dc:f4:c7:1e:7b:46:df:5e:a6:57:fd:8d:67:80:
67:57:de:a1:ab:54:c6:f1:95:28:4d:5c:db:d2:a3:
62:7c:a1:ba:d9:d3:d3:bb:21:66:99:f8:e9:09:12:
f7:f2:5a:68:10:7f:cf:80:4c:2f:fe:28:01:2a:6e:
c2:ee:d2:13:6d:92:0e:a4:4b:14:db:50:98:1a:3c:
94:a9:27:ec:38:5b:ef:84:47:84:86:c1:37:0f:e3:
35:87:52:97:c3:e3:28:ec:62:7f:35:a3:61:b8:7b:
87:dc:38:98:00:53:94:66:d6:11:f3:6e:a8:6b:1c:
6b:ff:b7:16:49:05:25:c0:b7:2c:84:c2:21:43:dc:
55:61:6d:fa:08:d9:77:e0:26:1f:35:46:d2:21:8e:
15:e3:31:97:a1:48:42:9b:0b:88:4e:ee:d1:84:68:
15:17:94:b2:16:c4:02:f9:5c:be:c9:ab:19:57:a4:
76:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AF:47:34:5D:21:16:FA:8D:A4:03:80:82:A4:4B:54:89:1A:FF:65
X509v3 Authority Key Identifier:
keyid:29:B3:A7:17:66:5A:11:37:E9:9D:C8:FA:D2:2E:3E:7F:98:DB:89:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:52:ec:04:5a:24:9a:a6:77:aa:20:c9:3b:a4:59:fe:45:1d:
65:ba:f2:e7:38:d6:87:44:cd:f5:75:5e:56:3e:b6:88:7a:ed:
9f:b1:42:5d:99:56:ca:cd:8b:db:a8:66:f0:1b:ca:91:e0:96:
b0:6e:ee:2d:0b:08:b5:13:9e:13:23:ec:b1:42:c0:73:15:61:
ca:63:5d:c8:90:e7:69:26:9e:c5:5d:5e:34:e2:c1:91:0b:11:
a4:da:f4:05:59:eb:39:fb:32:4d:68:ec:b0:0a:13:71:8a:9e:
31:10:7a:92:b0:0e:29:25:4d:40:b4:75:a8:0f:a8:16:7c:98:
80:9e:7f:ce:bd:73:90:64:0d:64:40:10:36:7c:8d:cc:15:c8:
67:54:d1:e4:80:21:77:3e:8b:6b:b6:37:49:6d:ec:d2:e9:dd:
71:3d:3d:d5:33:5e:1f:20:6e:51:6d:3d:41:ae:ae:c6:c0:55:
79:8e:85:39:39:56:8d:60:aa:74:7d:0d:cf:c2:cc:3f:88:1a:
4c:d4:ae:f7:c1:75:54:6f:29:ce:f4:91:08:00:96:f0:e0:ae:
6a:3a:2b:31:19:67:6b:f6:f7:70:bd:7b:1b:c6:df:6e:58:e5:
39:f4:31:20:c0:b3:7d:1b:78:60:63:ea:a4:2b:9d:8f:42:58:
d2:0c:8a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 10:30:53 2024 by rpki-client on console-fra.rpki-client.org