Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
File: Kt_vhCTbu4eonZOJhODis-2aq4s.mft (raw, json)
Hash identifier: YCmi017utRXifUFlCZmBq/5p+XJrswulKShQyVoD5V8=
Subject key identifier: A7:B5:E4:FE:44:56:EE:CC:71:39:C6:32:D4:3C:C1:38:36:38:3B:1E
Authority key identifier: 2A:DF:EF:84:24:DB:BB:87:A8:9D:93:89:84:E0:E2:B3:ED:9A:AB:8B
Certificate issuer: /CN=2adfef8424dbbb87a89d938984e0e2b3ed9aab8b
Certificate serial: 01901DEAE64677C92EEBD9F71EFBF2799E40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
Manifest number: 01AA
Signing time: Sat 15 Jun 2024 22:00:51 +0000
Manifest this update: Sat 15 Jun 2024 22:00:51 +0000
Manifest next update: Sun 16 Jun 2024 22:00:51 +0000
Files and hashes: 1: Kt_vhCTbu4eonZOJhODis-2aq4s.crl (hash: KbHsLf3Aj3BQ+8BrXStv9i6HLK/TFyEZifNOXAqTJRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ea:e6:46:77:c9:2e:eb:d9:f7:1e:fb:f2:79:9e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2adfef8424dbbb87a89d938984e0e2b3ed9aab8b
Validity
Not Before: Jun 15 22:00:51 2024 GMT
Not After : Jun 16 22:00:51 2024 GMT
Subject: CN=a7b5e4fe4456eecc7139c632d43cc13836383b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:90:d0:88:31:db:7f:a2:ce:b8:bd:43:13:de:
f6:59:44:bc:fd:5d:e9:2b:08:21:4b:f0:33:4d:d4:
37:db:9a:13:a6:d4:55:00:99:42:bb:d4:55:37:f3:
1d:9d:84:56:da:8c:e4:6b:a0:51:a7:17:c1:27:ba:
bd:f0:e8:48:52:ce:2c:27:35:5a:6e:4a:7d:11:fe:
44:e6:61:83:9e:15:06:c8:0f:95:40:ee:05:ac:33:
ca:99:9e:bb:00:30:59:95:7b:83:d0:cd:5a:10:9b:
e0:b0:0e:09:da:15:da:5f:d7:a0:e4:19:c8:5e:ca:
0c:6f:93:ca:05:d2:aa:e2:6d:12:5e:62:f6:9e:a6:
20:03:c3:4f:18:92:6e:3b:e5:f2:42:25:d8:66:b7:
80:3f:5f:e0:24:bf:fa:c6:53:13:64:97:60:cb:be:
82:9e:b6:13:de:2b:fb:f3:61:0b:24:cb:34:84:4b:
6c:0b:b2:e6:e2:b4:84:05:a3:74:04:f7:62:35:51:
c0:ea:72:df:38:e1:06:73:50:7f:1c:e4:b4:d3:82:
ad:e4:cd:5a:cf:c2:a7:da:bc:7b:60:d7:3d:36:25:
03:e1:b3:72:87:ed:7a:fc:3f:4e:6a:f6:d7:4e:14:
56:11:91:e7:3b:92:19:04:a7:49:7e:91:02:42:34:
c8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B5:E4:FE:44:56:EE:CC:71:39:C6:32:D4:3C:C1:38:36:38:3B:1E
X509v3 Authority Key Identifier:
keyid:2A:DF:EF:84:24:DB:BB:87:A8:9D:93:89:84:E0:E2:B3:ED:9A:AB:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:21:58:c2:2d:96:b5:4b:25:0f:72:27:3b:a3:df:63:23:33:
20:04:c9:72:d0:38:6c:db:b7:a7:83:4d:5e:bb:ed:7a:82:12:
33:f7:c2:45:fc:43:21:9f:36:2e:ea:dd:7d:e8:bc:c4:fa:a0:
7c:74:a9:1a:09:a5:e8:0d:47:00:2b:c1:7c:ec:27:96:d1:51:
43:e8:74:93:f9:8d:e5:02:f9:6e:a2:2b:19:f8:cf:a8:c4:6f:
3c:bf:aa:77:a6:e2:f4:d4:fe:b9:65:08:6a:cf:c7:a6:a0:b7:
ed:06:92:9b:63:8e:22:25:d6:b8:9f:1f:23:e0:be:bc:46:51:
6c:64:84:f9:c5:ad:d3:14:37:5c:62:f8:24:a3:8a:90:85:6c:
69:b9:8b:f1:9b:4c:3b:6f:0c:95:f3:6c:f3:ff:8a:02:b2:b1:
e6:ee:06:16:f3:d9:ea:26:71:5d:08:bb:00:26:1d:a5:c7:59:
00:36:96:46:94:bd:7c:fb:9c:39:29:42:6c:8d:68:26:c6:ab:
c2:0c:e6:b3:e0:83:1a:a3:3e:b1:e0:e6:74:9a:9d:09:28:d0:
98:c8:08:0a:70:f2:a8:a0:60:05:40:bc:81:3f:18:eb:3d:5b:
21:7e:45:02:2d:ef:5d:3b:50:72:3b:58:60:b6:91:44:1c:ad:
67:1b:52:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:42:35 2024 by rpki-client on console-fra.rpki-client.org