Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
File: KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json)
Hash identifier: 2XyyOP9HjnmLQMqQkoGBW4IYINXERtLXEct6LwrCdEI=
Subject key identifier: 57:07:76:07:DD:E3:74:4D:74:8C:A5:35:7A:66:EE:7F:23:04:06:06
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial: 018FBCB6D232095F93770B78AAB60FBDBA5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
Manifest number: 1194
Signing time: Tue 28 May 2024 01:00:48 +0000
Manifest this update: Tue 28 May 2024 01:00:48 +0000
Manifest next update: Wed 29 May 2024 01:00:48 +0000
Files and hashes: 1: 1PrDc34ymc0esPW5-DHXDo8ijGI.roa (hash: gqszA+5UBcV1CZif3ET3u8dbYxKdfrTSbS35G0yDDPU=)
2: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: 7bW2UeXMlNsDoAqLv0g+TLCyfffTUZeN+dK4DIOKiSI=)
3: rHxtg2T9xiMBrInVtNCZcROEVVA.roa (hash: UAF9iP/lVsWcP4FjW5sDTH0p2cf2OWJauOgFEAp0UNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 19:45:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:bc:b6:d2:32:09:5f:93:77:0b:78:aa:b6:0f:bd:ba:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Validity
Not Before: May 28 01:00:48 2024 GMT
Not After : May 29 01:00:48 2024 GMT
Subject: CN=57077607dde3744d748ca5357a66ee7f23040606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8d:90:74:11:7e:36:d2:66:a6:06:ce:66:4b:
40:f0:d7:73:05:9d:1e:22:43:e9:21:e1:39:30:1e:
bb:29:7f:18:07:ef:39:72:86:a0:a7:77:97:29:32:
ad:fd:16:39:2c:cd:fa:88:0d:b1:ec:96:46:de:a6:
d1:92:f4:05:63:3f:42:ef:f3:fb:fa:df:39:8f:33:
b0:55:57:e6:3c:5a:94:44:a2:9d:fa:4e:8a:cd:5b:
69:53:c1:51:f1:cc:d8:a7:68:55:cc:e3:88:fd:4e:
72:03:45:b5:a6:37:a2:d2:5e:17:d5:94:ca:69:4f:
71:b0:70:72:d2:27:e9:f8:09:c3:12:fd:30:26:11:
80:db:e7:6b:dd:23:e0:9a:25:39:10:b2:43:8e:f1:
ec:a4:80:27:b4:93:12:e2:4c:dd:7b:ed:33:63:90:
de:7f:e4:e9:bb:7c:61:1d:19:54:fb:9c:c8:64:d3:
42:ac:bc:35:4c:5b:4a:b3:56:a5:db:a6:33:58:79:
8d:b7:ab:52:70:0b:a4:98:86:a4:55:70:f3:15:f4:
e3:8b:30:8d:29:37:97:7c:bb:ac:2c:63:00:9d:7e:
ea:f9:f5:87:d6:10:eb:15:dc:c1:9f:18:5a:98:f4:
12:15:5d:3e:37:8b:ae:9d:43:0d:1e:cd:6f:e8:16:
1e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:07:76:07:DD:E3:74:4D:74:8C:A5:35:7A:66:EE:7F:23:04:06:06
X509v3 Authority Key Identifier:
keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:bd:8f:b2:33:c5:e0:93:10:e1:6a:68:e5:83:a7:dc:75:c7:
38:3c:a6:80:dc:84:cf:ca:63:61:a1:c3:27:a1:41:cb:8e:8b:
78:4a:36:c3:2b:34:a2:b2:fd:26:0b:4d:7e:6f:ae:e4:1a:00:
7f:bc:09:01:1f:69:51:95:3f:ae:ba:63:1a:9a:59:2c:ee:41:
39:6b:e9:99:8c:cc:65:36:22:1e:cf:db:fa:ff:91:1f:e3:f3:
ba:f5:48:57:24:5c:41:be:93:47:c5:bc:a5:87:f6:42:27:7c:
d0:fb:bb:94:1f:cc:02:62:c4:c5:a2:08:f8:a6:8e:3d:66:d3:
22:3e:7f:57:19:d6:bc:0c:8d:06:7f:f2:b8:5f:bd:fc:ae:51:
a1:26:1c:dd:fb:ad:d8:8b:30:9d:32:a8:e2:fc:e5:47:f2:c3:
34:2b:93:53:71:2b:6e:26:35:d9:ae:c7:8e:50:b9:7e:7a:b4:
ac:80:a8:53:3d:3e:8f:fb:3c:20:e8:e6:c0:16:7c:3b:e1:4a:
26:17:ff:8f:96:66:ee:c4:25:67:55:aa:e5:c8:0a:54:1d:09:
64:44:c3:46:64:84:4f:8c:67:1b:67:2d:0a:e1:07:51:bd:11:
7c:73:5a:af:2e:0a:ee:ee:58:7d:42:b3:6d:19:d1:81:7f:61:
25:a0:fd:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 03:09:25 2024 by rpki-client on console-ams.rpki-client.org