Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/69da98-84d6-4081-83da-d2b7230a3df8/1/KrJTDL6k1DyzdhtC2t_q1-UXIig.mft
File: KrJTDL6k1DyzdhtC2t_q1-UXIig.mft (raw, json)
Hash identifier: fV/XD2l0USdiy0bDGEx51LCArspEK8+XoXQlQwCcjMU=
Subject key identifier: 3F:1D:29:94:C3:70:F0:5B:7E:DF:14:C0:BC:79:74:5B:D0:A1:38:B5
Authority key identifier: 2A:B2:53:0C:BE:A4:D4:3C:B3:76:1B:42:DA:DF:EA:D7:E5:17:22:28
Certificate issuer: /CN=2ab2530cbea4d43cb3761b42dadfead7e5172228
Certificate serial: 01901BFC5779F536E06E3B53FDDD0920A744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrJTDL6k1DyzdhtC2t_q1-UXIig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/69da98-84d6-4081-83da-d2b7230a3df8/1/KrJTDL6k1DyzdhtC2t_q1-UXIig.mft
Manifest number: 0FBA
Signing time: Sat 15 Jun 2024 13:00:40 +0000
Manifest this update: Sat 15 Jun 2024 13:00:40 +0000
Manifest next update: Sun 16 Jun 2024 13:00:40 +0000
Files and hashes: 1: KrJTDL6k1DyzdhtC2t_q1-UXIig.crl (hash: rkFkUFqgdMRXz7F4VYn1TDyVD75EF5FnliPxobZUgyA=)
2: h_GV4ZwxOfqJX0cTeoIVOjKtT_k.roa (hash: yhdLAa+BCuCpF0ixr2pdkOrkLWg4NKbskUTScILUrAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/69da98-84d6-4081-83da-d2b7230a3df8/1/KrJTDL6k1DyzdhtC2t_q1-UXIig.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/69da98-84d6-4081-83da-d2b7230a3df8/1/KrJTDL6k1DyzdhtC2t_q1-UXIig.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrJTDL6k1DyzdhtC2t_q1-UXIig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1b:fc:57:79:f5:36:e0:6e:3b:53:fd:dd:09:20:a7:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab2530cbea4d43cb3761b42dadfead7e5172228
Validity
Not Before: Jun 15 13:00:40 2024 GMT
Not After : Jun 16 13:00:40 2024 GMT
Subject: CN=3f1d2994c370f05b7edf14c0bc79745bd0a138b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cb:6d:38:79:80:95:5b:44:96:c9:10:96:00:
7f:5e:36:f3:90:d9:51:e8:73:7b:33:46:41:42:2d:
df:e6:96:6f:f5:a7:e7:a4:09:8d:1e:52:d8:a3:ce:
91:b1:ad:11:6e:9a:8c:59:20:9e:d9:4f:29:78:3e:
76:09:8d:26:cb:3c:00:98:f7:33:cc:b5:44:2d:eb:
c0:fe:d4:7a:99:f8:a7:9e:ef:0f:7b:7c:69:62:ca:
a5:4f:8d:81:f2:55:a3:6e:10:e7:a4:28:2f:08:6b:
03:84:18:b3:95:d7:dd:b0:b9:8b:04:21:7d:d8:df:
eb:5a:b8:e3:66:a5:ec:ec:a6:94:b5:01:da:20:35:
fa:0c:f3:9c:7a:b0:8b:e3:b2:21:82:28:3e:37:c4:
63:6f:55:9b:34:15:44:04:b0:55:34:04:0b:c1:bb:
b3:cf:d5:44:72:1b:8a:ea:d3:23:ba:16:e6:8c:85:
79:20:51:3d:7e:f3:be:63:c3:d1:90:e5:31:97:83:
ef:28:d9:fb:05:d1:d8:b4:50:bb:58:fa:4d:f7:b2:
09:fe:46:8a:9b:45:58:1c:df:50:26:73:63:a1:55:
9a:9c:c4:e7:3c:a1:82:3c:25:f1:6b:d7:62:3a:3c:
4b:58:0b:c4:f8:bc:c5:fa:ae:d0:6e:40:21:cf:cb:
12:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1D:29:94:C3:70:F0:5B:7E:DF:14:C0:BC:79:74:5B:D0:A1:38:B5
X509v3 Authority Key Identifier:
keyid:2A:B2:53:0C:BE:A4:D4:3C:B3:76:1B:42:DA:DF:EA:D7:E5:17:22:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrJTDL6k1DyzdhtC2t_q1-UXIig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/69da98-84d6-4081-83da-d2b7230a3df8/1/KrJTDL6k1DyzdhtC2t_q1-UXIig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/69da98-84d6-4081-83da-d2b7230a3df8/1/KrJTDL6k1DyzdhtC2t_q1-UXIig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:85:ec:0b:27:2b:c0:b2:35:9b:98:26:f1:a5:76:d9:4e:b2:
89:6d:4f:c2:7f:5c:44:50:f7:4a:07:17:b7:0b:7e:33:bd:98:
62:c5:dc:72:9b:07:e4:6e:d6:02:4a:df:02:45:25:c0:d5:72:
22:70:65:25:c9:35:b0:c1:f4:01:cf:fa:f6:a3:97:8b:3a:64:
64:b0:f9:fa:63:b2:1c:97:e7:10:18:c5:11:c7:66:97:85:2e:
5f:6e:f0:85:a8:87:c2:d5:37:ae:86:13:0f:da:14:99:dc:be:
47:02:04:e8:38:aa:31:f8:f8:80:da:32:75:43:bf:f5:dd:96:
74:86:35:54:d6:e2:f2:74:ee:2a:20:6e:f5:63:b7:cf:3f:84:
f7:2b:f6:17:db:5d:5d:2d:f6:1c:36:79:44:58:9a:6b:35:53:
dd:40:13:38:3c:47:e6:17:2b:c0:8b:c9:e3:9f:59:fb:2b:b7:
e3:17:d8:6b:58:1d:85:43:fb:b9:ae:4f:24:b0:0c:92:57:11:
d0:5e:49:fe:37:22:e5:5f:00:fb:95:1a:ba:77:39:6f:41:34:
61:49:65:6d:71:7a:af:7a:2b:c1:a1:1e:3b:e9:bb:f4:e2:3d:
8f:7f:13:94:a9:05:6c:4a:0e:18:de:82:04:bb:5a:6b:5a:bc:
60:cc:94:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:19:51 2024 by rpki-client on console-ams.rpki-client.org