Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c699d0-2edb-45b4-8011-0743c11e04b4/1/KseXKZzH3xxPAjwgeZYIti_iAsE.mft
File: KseXKZzH3xxPAjwgeZYIti_iAsE.mft (raw, json)
Hash identifier: IxnOxW09nMjwrF/xPXmwwjQitRKtSi2LPqdGDRKV/78=
Subject key identifier: 30:38:A4:3F:33:65:4D:83:85:00:2C:AE:BD:DD:7C:C2:88:E7:CD:79
Authority key identifier: 2A:C7:97:29:9C:C7:DF:1C:4F:02:3C:20:79:96:08:B6:2F:E2:02:C1
Certificate issuer: /CN=2ac797299cc7df1c4f023c20799608b62fe202c1
Certificate serial: 019357D27E82E2D830C45C848AF1B1A7237E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KseXKZzH3xxPAjwgeZYIti_iAsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c699d0-2edb-45b4-8011-0743c11e04b4/1/KseXKZzH3xxPAjwgeZYIti_iAsE.mft
Manifest number: 0514
Signing time: Sat 23 Nov 2024 07:00:32 +0000
Manifest this update: Sat 23 Nov 2024 07:00:32 +0000
Manifest next update: Sun 24 Nov 2024 07:00:32 +0000
Files and hashes: 1: KseXKZzH3xxPAjwgeZYIti_iAsE.crl (hash: QYhVvcCL8/plTVJsWmDJWGu9qmWSdpPQP9fm+CBKLsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c699d0-2edb-45b4-8011-0743c11e04b4/1/KseXKZzH3xxPAjwgeZYIti_iAsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c699d0-2edb-45b4-8011-0743c11e04b4/1/KseXKZzH3xxPAjwgeZYIti_iAsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KseXKZzH3xxPAjwgeZYIti_iAsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:7e:82:e2:d8:30:c4:5c:84:8a:f1:b1:a7:23:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac797299cc7df1c4f023c20799608b62fe202c1
Validity
Not Before: Nov 23 07:00:32 2024 GMT
Not After : Nov 24 07:00:32 2024 GMT
Subject: CN=3038a43f33654d8385002caebddd7cc288e7cd79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2d:89:a9:a8:54:6e:61:dc:39:27:8c:c0:a5:
8b:46:c9:14:98:17:a0:90:d3:20:cf:76:41:a9:a6:
39:d1:11:bd:3d:38:6d:14:6a:7e:80:a8:c8:9b:d9:
09:e5:2a:12:ad:79:d6:5c:55:5e:a7:98:65:64:70:
f1:54:8e:a4:99:26:f7:bc:15:3b:9f:0c:85:30:bf:
74:fa:d1:db:4d:0b:eb:e9:cb:35:84:79:a8:6a:b7:
1d:3a:d5:17:e7:c2:68:9f:bc:69:ef:bf:0d:03:a3:
0c:cd:84:e7:bc:81:68:d5:89:dd:c9:41:96:f7:c9:
9a:26:dc:ab:08:59:57:94:9c:0e:62:aa:30:d6:4c:
ef:df:51:66:15:eb:dd:b9:ef:78:bd:e1:57:9d:dc:
1d:c9:7b:f3:51:e1:4d:b4:d7:36:c7:12:c8:af:11:
ba:26:ab:88:99:6a:d9:1b:e8:58:3d:f8:2e:e6:8d:
93:85:bc:78:45:c7:d4:aa:13:4c:65:1d:d3:cb:d0:
09:0b:89:3b:cc:f5:07:07:4a:4a:0c:ef:6f:e6:1f:
d2:f4:4d:bd:98:7b:cc:12:cd:c2:93:a3:f0:3f:73:
bf:78:ee:a5:d6:d6:6a:14:ab:e1:b9:63:c4:6a:a5:
27:e0:52:3e:11:7f:ee:da:4b:fa:dc:07:d9:db:40:
08:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:38:A4:3F:33:65:4D:83:85:00:2C:AE:BD:DD:7C:C2:88:E7:CD:79
X509v3 Authority Key Identifier:
keyid:2A:C7:97:29:9C:C7:DF:1C:4F:02:3C:20:79:96:08:B6:2F:E2:02:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KseXKZzH3xxPAjwgeZYIti_iAsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c699d0-2edb-45b4-8011-0743c11e04b4/1/KseXKZzH3xxPAjwgeZYIti_iAsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c699d0-2edb-45b4-8011-0743c11e04b4/1/KseXKZzH3xxPAjwgeZYIti_iAsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f5:c2:39:46:86:e2:f3:90:c5:5c:87:94:f5:44:6a:c7:0a:
4b:54:ba:4b:99:9c:99:b3:42:27:c2:d4:ba:03:26:f1:de:6b:
56:cc:39:78:d6:f9:b4:65:d2:d8:c3:a2:f4:93:70:81:0a:a8:
71:1a:88:45:33:5d:a3:87:81:03:21:b5:71:33:2b:1d:fb:04:
cb:f7:95:cf:19:56:6d:18:6b:52:68:ab:8b:9a:04:4e:5c:2f:
10:d0:3a:b8:2c:47:9d:42:ab:85:c2:c9:06:fe:4b:9e:65:e8:
7c:51:79:da:74:2f:f0:02:64:f1:01:73:db:37:bc:ea:cb:14:
75:ac:86:5a:51:63:4b:2c:79:81:73:07:a9:39:1f:2b:73:c6:
3f:17:b4:81:fa:d2:21:e3:20:f1:21:7a:fe:4f:c2:a7:48:59:
8c:bb:7f:9b:3f:c3:67:6f:8f:be:6f:0d:20:d5:3c:f8:b8:27:
4b:1d:a3:7e:3c:a2:e8:15:94:c0:de:52:2f:4b:f3:e6:a6:2c:
02:34:45:31:b6:5c:93:41:7b:fa:cb:e4:f9:43:57:20:d6:09:
a3:aa:27:d1:5b:d4:8d:cd:04:64:ec:99:3e:7f:20:a1:97:7f:
80:bf:12:8e:58:54:f4:92:53:1c:85:10:6d:33:c1:4a:07:dd:
32:ea:fe:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:33:33 2024 by rpki-client on console-ams.rpki-client.org