Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
File: KcmwQBb28CGDMHwX32MKAonsW7U.mft (raw, json)
Hash identifier: j1JtbmR1B9BOAI4/F4zjQmzA5sa777x4T+Vn5jxiNV4=
Subject key identifier: CB:5E:80:30:C7:56:FA:54:36:40:04:53:60:09:D4:BA:35:74:F1:47
Authority key identifier: 29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5
Certificate issuer: /CN=29c9b04016f6f02183307c17df630a0289ec5bb5
Certificate serial: 01901E21C20C7E6F50C0F8F0814F3EF580C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
Manifest number: 0A27
Signing time: Sat 15 Jun 2024 23:00:47 +0000
Manifest this update: Sat 15 Jun 2024 23:00:47 +0000
Manifest next update: Sun 16 Jun 2024 23:00:47 +0000
Files and hashes: 1: 9t7BRxbZO9ea05bnK3ING9oNfsE.roa (hash: 950TvVnnE1m0QAAb2JXbdK7X7a5dyF27FrWfpV4WykY=)
2: KcmwQBb28CGDMHwX32MKAonsW7U.crl (hash: /k8QbikW626PdPzKzzqYNO7ZLCLlIxaAxyximPUWHfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 19:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:21:c2:0c:7e:6f:50:c0:f8:f0:81:4f:3e:f5:80:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c9b04016f6f02183307c17df630a0289ec5bb5
Validity
Not Before: Jun 15 23:00:47 2024 GMT
Not After : Jun 16 23:00:47 2024 GMT
Subject: CN=cb5e8030c756fa54364004536009d4ba3574f147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d6:75:71:ec:7d:22:1b:58:fb:db:19:29:46:
f9:d8:f2:01:41:07:00:d0:81:e2:90:6b:76:8a:c9:
79:50:4f:c0:c5:a4:a3:4a:bb:55:66:c1:27:a1:39:
5f:fe:eb:bf:af:ac:86:2e:68:44:af:9c:1a:a6:e6:
38:ad:18:5b:89:5c:69:dd:0c:a2:f6:59:07:9b:05:
d8:26:87:f5:1d:47:bb:c2:78:02:e5:a4:2a:5b:56:
21:24:e6:46:c5:1d:a4:a4:1a:25:53:c0:ca:8f:5e:
b3:4f:5a:b6:cf:16:21:04:88:87:81:1c:a5:c9:11:
1e:f6:5e:87:92:e4:79:2e:68:0a:da:4a:13:12:5c:
f4:83:4e:ea:63:5f:cb:b6:b9:e1:8b:f5:1f:b7:f2:
d9:72:c9:e7:75:41:0a:2c:66:91:13:ae:88:80:10:
78:94:08:f0:ef:ef:c9:56:80:ac:84:70:5d:b1:67:
c9:6d:01:ad:b2:92:34:a1:97:0a:d3:b2:7a:e5:03:
3f:e9:13:f6:3d:b1:02:a9:66:fb:a7:f1:f5:1d:0f:
44:c1:4e:35:1a:ca:ac:93:54:b5:f4:e7:c2:0d:2f:
10:a4:a6:9c:c1:33:fb:86:a6:eb:c3:b4:8b:b7:1c:
fe:39:b8:54:8c:91:f3:67:05:19:77:4e:44:a6:df:
72:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5E:80:30:C7:56:FA:54:36:40:04:53:60:09:D4:BA:35:74:F1:47
X509v3 Authority Key Identifier:
keyid:29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:70:f2:5d:b2:ba:0b:5f:87:f4:cc:5a:6c:3f:dd:de:64:da:
e1:ea:09:2e:45:3a:7d:97:88:17:f5:34:fd:3b:8c:0b:10:c8:
b0:5f:0d:b3:06:68:3b:e1:2e:50:87:44:a4:dc:62:bf:62:ac:
81:da:1f:96:b4:15:5d:6f:00:fc:b8:28:53:8f:68:57:0a:f9:
c2:e9:8e:38:55:d8:22:7d:2c:56:4b:3e:0e:63:ca:d8:e8:15:
ba:d9:58:04:4d:49:1c:38:17:8a:ec:48:b1:20:6e:0a:3e:ba:
27:78:33:4b:bd:f4:42:4d:ad:6e:74:e1:4a:ea:b7:60:20:4b:
5c:bb:4c:cb:c0:33:e4:bd:33:4a:55:9b:04:5e:80:66:1d:94:
f1:4e:18:75:53:c4:b9:fc:5f:13:59:5e:e1:19:57:8d:40:57:
46:cc:e9:e6:78:a0:7a:e4:f8:e4:13:fe:7b:e7:1d:03:8b:90:
5c:6f:1e:9e:73:92:1f:1a:d7:e0:5a:8f:18:55:31:ae:38:51:
4e:aa:91:99:5f:f7:dc:90:df:6c:0c:10:b2:7c:d8:30:b5:0c:
23:b8:cb:1a:d4:ae:bd:b9:7e:d9:59:11:0e:84:65:a8:88:10:
f0:69:a8:e8:93:0a:bf:bc:da:b1:53:49:40:5c:b6:76:74:0a:
a4:ec:4d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:03:43 2024 by rpki-client on console-ams.rpki-client.org