Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
File: K5didVR7dd8rBMT5spHAcQxQd0A.mft (raw, json)
Hash identifier: WSMqQKwu5NR/dqz5kk1M/LA7d8IC4iHgDh107LaBPnM=
Subject key identifier: BB:EF:7F:41:2E:8D:60:FC:B1:60:20:6E:3C:6F:FA:F6:66:67:39:5D
Authority key identifier: 2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
Certificate issuer: /CN=2b976275547b75df2b04c4f9b291c0710c507740
Certificate serial: 01920F4F0834B0E630CEA829BF8E6ECC64FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
Manifest number: 12C9
Signing time: Fri 20 Sep 2024 12:01:30 +0000
Manifest this update: Fri 20 Sep 2024 12:01:30 +0000
Manifest next update: Sat 21 Sep 2024 12:01:30 +0000
Files and hashes: 1: K5didVR7dd8rBMT5spHAcQxQd0A.crl (hash: F52vbkoPacyat3q757h/z6zHw9IoY8boZOzXuSXxjKk=)
2: SErLiDvIMdGJNdDy9kmRigrZYKg.roa (hash: O15GP+ZWjX/p1Gu8QdJsRKemgaBOIBITdGWZ8amcvSw=)
3: fsfcfIcKDeVKyZV5RmqsIeNfhAY.roa (hash: uXMUxpMpYAATlNgdA9rB+NmXMiAO6fu8HnGp7iyblJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 12:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0f:4f:08:34:b0:e6:30:ce:a8:29:bf:8e:6e:cc:64:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b976275547b75df2b04c4f9b291c0710c507740
Validity
Not Before: Sep 20 12:01:30 2024 GMT
Not After : Sep 21 12:01:30 2024 GMT
Subject: CN=bbef7f412e8d60fcb160206e3c6ffaf66667395d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6d:e7:3b:97:92:e7:2d:00:1b:db:3c:2c:92:
65:59:0e:a1:23:0b:59:2e:72:08:48:ac:b0:bc:c0:
49:96:94:b1:e2:9c:2c:e9:f8:63:d9:5a:de:fb:b9:
e8:c8:5c:2c:fc:71:18:07:21:6f:3b:ab:56:24:94:
47:50:20:17:67:e4:8d:db:ed:02:fd:e5:8b:f8:4b:
a5:03:d6:b6:f3:37:1b:aa:a5:0a:9f:6b:15:a9:50:
ca:6a:e1:29:b5:88:6a:85:e3:c5:3e:54:25:78:37:
98:53:f0:d0:29:0d:74:5e:2a:67:1d:1b:1f:7f:ee:
8a:63:e2:97:32:9b:c8:97:dc:40:06:27:06:23:ec:
1a:9d:9e:a2:03:78:b8:58:7f:93:19:1b:47:b8:83:
32:91:bb:82:dc:2e:d3:cd:5e:ec:80:7c:a3:3c:11:
4e:32:64:d7:05:10:ad:be:ce:62:d3:ae:7e:0b:53:
90:5c:f7:12:f1:28:9c:9b:45:c7:e2:5c:95:a9:a0:
fd:77:b8:3f:75:7c:25:b7:15:e5:99:6a:90:98:3b:
b9:0a:1f:3a:24:1f:f9:7d:ee:ea:53:59:f1:f6:f3:
d7:8c:8a:ce:5e:2f:f3:6a:b4:10:01:77:4a:12:49:
8a:b8:5d:20:3a:4a:a7:da:0f:c0:58:fd:9d:78:98:
27:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EF:7F:41:2E:8D:60:FC:B1:60:20:6E:3C:6F:FA:F6:66:67:39:5D
X509v3 Authority Key Identifier:
keyid:2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e2:6a:0d:70:ac:45:16:01:c4:9c:d9:2e:28:86:df:8b:a8:
8c:3c:58:cd:b3:e1:31:b0:14:0d:5e:68:df:26:c6:84:08:24:
55:a5:a0:f4:2d:23:b3:99:13:16:40:3e:b1:7f:0c:3d:8f:cb:
20:cd:4e:42:b3:40:eb:f7:81:a5:22:e2:6e:a5:c8:3b:84:74:
ce:f4:be:9d:d5:e8:f8:86:14:41:9d:28:31:52:54:be:55:3a:
a3:4e:1d:95:10:98:f8:5f:5e:3d:17:55:8b:df:d4:1a:ad:8d:
29:a2:38:60:59:14:7c:fd:06:34:56:91:68:19:df:29:d4:4b:
64:e3:b7:f6:51:aa:38:b9:68:87:3f:2a:0f:e5:42:88:2e:ec:
59:64:92:20:c1:d1:5a:db:e2:cb:f1:f2:54:ed:cb:ca:5f:12:
d6:f0:26:66:2d:e7:96:7a:64:37:f9:60:9b:a4:39:1b:9e:2e:
f7:ac:af:e7:db:e2:27:17:5b:0e:12:2c:a2:5d:6c:de:51:69:
70:50:60:ea:31:19:44:78:39:88:2e:48:82:c9:25:c5:9c:13:
ed:72:16:92:b1:8e:5b:2b:4c:8c:89:8d:48:0e:7a:a2:47:7b:
f3:dc:3a:87:7b:7a:d9:a9:da:c9:fe:18:1a:67:b1:59:cf:52:
7a:94:92:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 21:11:43 2024 by rpki-client on console-ams.rpki-client.org