Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
File: KYlkeFHvzRmJcu09FJzLvenFXAA.mft (raw, json)
Hash identifier: RZot+31RcIQTC+fOSGY4upv+ALT4xxt/ZutzLKaWCIA=
Subject key identifier: 04:F4:19:E9:9F:9B:48:D2:A7:23:18:76:DB:E0:5A:8E:28:1E:77:F3
Authority key identifier: 29:89:64:78:51:EF:CD:19:89:72:ED:3D:14:9C:CB:BD:E9:C5:5C:00
Certificate issuer: /CN=2989647851efcd198972ed3d149ccbbde9c55c00
Certificate serial: 01903999306B215A5E519CF95257FBD5F2F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
Manifest number: 050C
Signing time: Fri 21 Jun 2024 07:00:59 +0000
Manifest this update: Fri 21 Jun 2024 07:00:59 +0000
Manifest next update: Sat 22 Jun 2024 07:00:59 +0000
Files and hashes: 1: KYlkeFHvzRmJcu09FJzLvenFXAA.crl (hash: 63GnN0flEcD2cxAf6aWpFJzUp0fiTDtxPty+WkB08X8=)
2: QZ-_aU3a6vpmf99Pa_FukQrqMsU.roa (hash: WBkqdPylOGOlo1tfXaETFSSNLG2F34gUGhwQYHR23cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:39:99:30:6b:21:5a:5e:51:9c:f9:52:57:fb:d5:f2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2989647851efcd198972ed3d149ccbbde9c55c00
Validity
Not Before: Jun 21 07:00:59 2024 GMT
Not After : Jun 22 07:00:59 2024 GMT
Subject: CN=04f419e99f9b48d2a7231876dbe05a8e281e77f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b5:97:61:80:41:69:fb:44:38:d2:3b:88:7d:
68:00:49:47:e1:f3:98:91:f9:c9:20:5e:7b:76:23:
4a:da:d3:ae:e8:a4:b7:93:d9:68:08:24:ab:dc:b9:
06:71:b2:53:37:2f:4b:33:7b:5d:c7:da:63:b9:35:
ad:f5:2f:14:b8:35:ab:a2:d0:31:0b:94:c2:59:ee:
63:e2:d1:7b:4d:d6:a5:b8:b8:61:99:12:12:ae:f2:
cc:e3:f6:83:46:81:c5:1b:45:0b:77:2a:1e:6b:12:
4a:ac:bb:ce:54:ad:83:c2:4e:96:a9:43:3f:47:1b:
df:5a:85:97:1d:9b:76:4d:6f:1e:32:bd:28:da:d6:
ae:29:b5:58:8b:71:6a:c6:3f:2d:7c:54:da:b7:96:
69:b0:b9:6b:5c:fd:64:df:b4:50:c6:d9:b3:1e:8a:
82:fa:fe:d1:d4:94:03:bc:bf:70:b9:5f:12:45:c9:
77:12:40:9f:e2:36:50:bc:9d:f3:48:d6:94:91:2e:
38:81:83:51:c8:bf:b4:d2:7e:87:9f:06:13:de:c5:
05:04:fb:4b:ac:53:0e:49:d3:ec:ed:ef:d3:9c:2a:
fa:1e:99:43:99:be:fb:ab:3f:8c:ce:0c:ab:17:eb:
c7:42:b3:3f:f8:8b:97:94:ac:77:a6:55:40:ac:98:
29:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F4:19:E9:9F:9B:48:D2:A7:23:18:76:DB:E0:5A:8E:28:1E:77:F3
X509v3 Authority Key Identifier:
keyid:29:89:64:78:51:EF:CD:19:89:72:ED:3D:14:9C:CB:BD:E9:C5:5C:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:37:17:da:4d:ee:cd:74:b6:e1:55:8e:f0:aa:68:54:f6:c9:
f5:a6:7c:87:cb:75:a5:70:bf:6d:24:3c:85:28:95:b1:e2:86:
31:e3:02:63:9a:fa:43:9c:a9:dc:9c:07:32:10:d9:1c:5a:1c:
b6:ca:95:75:d4:81:fb:09:4f:c6:84:09:ca:d9:37:18:9a:52:
7d:b0:d4:5d:84:21:0a:19:26:00:66:44:33:f4:74:cf:b1:90:
f9:ee:a5:e6:f6:c5:26:63:44:da:35:f3:25:0d:65:3b:89:b2:
93:c6:a9:ea:d7:0a:e0:5d:12:93:b5:67:cc:3e:16:92:d1:85:
be:be:6d:07:ad:6d:32:8a:32:9f:a2:0a:b7:d0:4a:f3:5e:b4:
e8:2f:5b:ef:91:a6:44:0f:6c:15:c3:13:ac:38:dc:1f:14:15:
4a:36:23:75:0c:e1:da:f1:eb:eb:1e:77:b6:2a:ca:c5:c8:68:
c2:7a:f9:12:b5:e2:bf:8b:1b:cd:30:6a:b2:ac:63:7b:61:d1:
6b:bb:b5:6c:0c:13:fa:2d:5f:f4:1b:dd:92:52:4b:12:05:81:
e4:3a:6b:d1:2b:aa:13:73:3a:4d:18:34:67:3f:b8:97:a2:1e:
ab:6a:fe:a6:1a:92:61:0a:6b:66:ca:cb:d7:27:4f:87:dd:fe:
46:f9:07:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:51:48 2024 by rpki-client on console-ams.rpki-client.org