Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
File: KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft (raw, json)
Hash identifier: jCEbtmNaPuqHY5J2XezJLcNL9kEzGB6OY1OPSwXgn9k=
Subject key identifier: 9D:F3:11:92:F7:A3:8B:DD:DE:B7:0D:B9:AC:5A:B4:25:A3:71:D3:B7
Authority key identifier: 28:20:3D:EC:D0:8B:D4:7D:8A:91:62:A6:E1:74:2F:3C:53:EA:3C:74
Certificate issuer: /CN=28203decd08bd47d8a9162a6e1742f3c53ea3c74
Certificate serial: 01901D0F41B34653B8CCCAD9F369BCE2C8C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
Manifest number: 0441
Signing time: Sat 15 Jun 2024 18:00:57 +0000
Manifest this update: Sat 15 Jun 2024 18:00:57 +0000
Manifest next update: Sun 16 Jun 2024 18:00:57 +0000
Files and hashes: 1: KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl (hash: BbUDQ2tCT5rSpeSvbi5x5vbE8Aac5/pbpZEvKa4DIrE=)
2: W0KYntp80XqYo8u7LuFGqd7rKVo.roa (hash: BVsNanYCfagFO2VRL8RsSrGS4l2Um2UhKQnabcrgRAU=)
3: x-wi5OePJObwjtMIP5kzaryMlig.roa (hash: tI9He1PeHxfRiuZ2yrv1KlruGK7iuaoeDbA57xWU8EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 18:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:0f:41:b3:46:53:b8:cc:ca:d9:f3:69:bc:e2:c8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28203decd08bd47d8a9162a6e1742f3c53ea3c74
Validity
Not Before: Jun 15 18:00:57 2024 GMT
Not After : Jun 16 18:00:57 2024 GMT
Subject: CN=9df31192f7a38bdddeb70db9ac5ab425a371d3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cd:b8:d3:aa:fa:b2:3b:5c:a6:69:bf:6d:27:
86:84:37:1b:d0:34:0a:3e:91:72:21:71:a0:29:df:
2f:f3:59:02:b1:78:a5:e0:57:ff:49:63:7b:7f:6c:
c8:17:05:43:d8:15:6e:ff:36:d8:9e:a1:51:c7:f0:
84:de:03:09:da:47:c7:4a:5c:98:86:15:0f:b9:d8:
89:98:08:1c:2c:71:28:62:5c:50:91:ad:3a:a2:9d:
3f:5b:76:7a:fe:c4:7b:db:a4:88:eb:17:61:97:f4:
23:e9:a6:50:b2:2d:ce:aa:2c:c7:78:3d:72:bb:6b:
8c:3a:f3:3e:1c:c7:af:1d:88:f5:78:f2:3e:6d:df:
7b:01:34:c7:79:3f:88:e1:21:59:12:a0:5b:c3:9d:
49:72:8f:8a:9c:53:3a:52:d5:48:a5:29:f7:8a:77:
18:3e:d3:fa:24:45:47:b2:f2:95:2b:9b:8b:32:f3:
71:e5:64:20:c1:9c:d9:f2:dc:a7:a7:af:7a:2a:4a:
01:4e:af:35:5f:f3:f9:70:3f:9a:f6:c2:e3:64:a0:
5e:d5:f4:fc:4c:66:42:3a:d9:d3:7b:98:b2:79:ea:
02:d5:f2:a3:45:48:e7:69:f3:03:8d:76:71:2a:81:
12:1d:2a:3c:ac:46:d5:22:0f:4e:e3:e2:e2:9c:c3:
e4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F3:11:92:F7:A3:8B:DD:DE:B7:0D:B9:AC:5A:B4:25:A3:71:D3:B7
X509v3 Authority Key Identifier:
keyid:28:20:3D:EC:D0:8B:D4:7D:8A:91:62:A6:E1:74:2F:3C:53:EA:3C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:77:e4:f2:64:0d:a3:b5:52:dc:f4:1f:94:25:2a:5a:7a:f7:
87:1d:7a:de:aa:55:2e:05:19:0a:53:4c:62:b3:d6:2d:20:bd:
fd:1b:a6:0e:8f:c0:7b:23:17:a3:b7:f0:57:85:b4:b3:d1:e7:
cd:e2:a0:ad:ed:85:85:f1:0d:2b:d3:e8:59:86:f5:14:72:b6:
1d:9b:d0:ef:89:b3:fa:80:f5:9b:a2:1a:10:87:95:86:c7:a0:
af:34:12:13:1c:b6:12:0b:d2:51:89:26:a4:d1:a9:3f:50:3e:
4d:8f:28:02:35:19:19:d2:d0:26:07:5d:42:b1:2a:1b:e4:e8:
0c:d7:4d:cb:08:a0:fb:5f:b2:eb:f3:0c:3c:57:29:e9:5c:c2:
eb:dc:7d:24:11:eb:7c:a7:f4:d5:4c:76:f6:70:5f:0c:fa:f5:
8a:12:bc:7a:bb:91:73:0a:c2:47:43:9c:c6:a5:b6:56:38:28:
b3:63:9c:a8:b9:2b:9e:9d:ea:fe:4b:06:65:de:5d:06:e7:92:
a5:0b:b6:84:1a:3f:ad:43:79:53:b5:f4:28:9e:b4:0e:44:3b:
a8:8f:62:55:89:97:88:13:d1:93:7b:38:13:2f:54:8c:45:2c:
ba:8f:29:12:03:d5:03:dc:88:1a:0a:74:e1:24:c2:f6:95:c8:
bf:84:69:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:02:01 2024 by rpki-client on console-fra.rpki-client.org