Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.mft
File: KtclXVpq-4XjdugbuaCew93dvNw.mft (raw, json)
Hash identifier: 6ABiUCPziVY4kTpZvlgA7Qy3Pnqh4ALykqM0GsO2ruY=
Subject key identifier: C5:61:66:42:B6:F1:B2:DE:DA:F4:D2:FA:84:4F:10:16:5A:B9:05:2E
Authority key identifier: 2A:D7:25:5D:5A:6A:FB:85:E3:76:E8:1B:B9:A0:9E:C3:DD:DD:BC:DC
Certificate issuer: /CN=2ad7255d5a6afb85e376e81bb9a09ec3ddddbcdc
Certificate serial: 019364E9350C944F7E1E59C2B11050D2093D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtclXVpq-4XjdugbuaCew93dvNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.mft
Manifest number: 128F
Signing time: Mon 25 Nov 2024 20:00:25 +0000
Manifest this update: Mon 25 Nov 2024 20:00:25 +0000
Manifest next update: Tue 26 Nov 2024 20:00:25 +0000
Files and hashes: 1: KtclXVpq-4XjdugbuaCew93dvNw.crl (hash: Wdd8Z1OZdy4acaKH6cYPYLuimISpgiFDrW4Rf4A7oQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtclXVpq-4XjdugbuaCew93dvNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:e9:35:0c:94:4f:7e:1e:59:c2:b1:10:50:d2:09:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad7255d5a6afb85e376e81bb9a09ec3ddddbcdc
Validity
Not Before: Nov 25 20:00:25 2024 GMT
Not After : Nov 26 20:00:25 2024 GMT
Subject: CN=c5616642b6f1b2dedaf4d2fa844f10165ab9052e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a1:65:10:41:8c:b5:54:6f:6d:44:0a:56:15:
de:17:3a:e4:dd:02:96:ce:56:e7:14:0f:3a:24:64:
d1:88:9d:9b:17:78:bf:65:bb:20:f3:d9:90:b5:4e:
8b:46:85:03:66:a4:1b:da:0b:5a:60:c4:9b:a2:2d:
8b:66:80:e0:28:aa:c1:5c:31:35:76:7d:2f:70:ce:
e4:3a:70:ec:d2:28:c7:7e:2c:b8:0b:1d:4d:a0:5d:
06:ac:b7:c0:f4:5d:f0:e1:e0:06:5e:91:6c:6f:39:
5a:72:76:dc:63:b0:28:be:bc:69:83:ad:0a:07:f1:
5c:8f:41:7c:84:c5:8d:87:9d:1b:c5:6f:db:de:a1:
37:77:44:af:08:f6:ee:58:3a:63:af:08:47:60:9a:
3c:25:9e:b0:d9:cb:27:5f:b3:a9:58:19:11:2a:ad:
97:48:51:2c:98:59:f6:9e:25:5c:0d:fd:81:6a:55:
da:68:3d:f3:14:08:cb:35:46:e1:de:b6:09:5a:b7:
e1:c5:92:50:b2:5f:83:5b:6b:e1:a9:e7:72:a9:9b:
f6:3c:03:ea:49:1c:d4:4c:ca:4c:8c:72:a5:a1:0c:
ce:4a:c0:92:78:5a:33:ba:22:63:af:f5:60:c4:ce:
63:79:47:27:41:23:1c:dc:90:a6:d5:b3:1e:9d:4a:
d0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:61:66:42:B6:F1:B2:DE:DA:F4:D2:FA:84:4F:10:16:5A:B9:05:2E
X509v3 Authority Key Identifier:
keyid:2A:D7:25:5D:5A:6A:FB:85:E3:76:E8:1B:B9:A0:9E:C3:DD:DD:BC:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtclXVpq-4XjdugbuaCew93dvNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6d:85:32:e7:c6:3a:83:bf:04:5f:46:11:f7:60:2d:98:d4:
b1:46:d2:0a:c8:7d:c8:4b:0e:b5:b9:6f:b3:71:cf:1f:64:d0:
ec:e4:c8:c5:42:2e:7e:11:bc:e6:2c:19:ba:dc:2d:96:6b:3d:
19:c5:ab:b7:41:40:1d:d8:dc:05:31:da:46:26:94:a0:60:c0:
b4:c5:f5:47:19:29:90:56:81:28:2c:23:ac:6d:33:34:3c:12:
10:2a:8a:86:a8:b1:3f:32:e1:e3:e8:d4:e7:9b:e4:84:9c:2a:
81:04:c1:51:d6:1c:50:aa:5b:20:5b:23:e9:0a:84:79:de:60:
00:c8:b0:24:0c:4f:da:f1:79:ac:69:6c:f7:fa:6c:8c:a8:28:
6c:e9:bc:f3:be:4e:80:2e:9a:d3:4c:31:43:17:7e:70:67:a1:
de:85:f6:21:07:0f:40:37:57:cd:76:40:4a:4a:12:92:74:60:
bb:0a:f3:f7:58:a6:cb:8a:29:8c:c1:ba:9a:5d:39:7c:32:19:
13:b6:dd:8c:b3:c9:e3:0e:d3:a0:dc:33:dc:1e:b8:61:30:ed:
52:4d:f5:7b:8d:62:af:66:0f:f2:99:7c:b1:01:d6:03:3c:bf:
78:57:81:5c:64:e5:6b:d4:99:57:c3:61:0b:52:01:75:af:77:
bb:2f:44:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:21:50 2024 by rpki-client on console-fra.rpki-client.org