Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
File: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft (raw, json)
Hash identifier: iijiIMusCLvSeduDQqMRig9ga7rWu7jYW4fjxdUuY5Y=
Subject key identifier: E2:87:1A:37:EE:0E:E7:A0:B9:FE:6A:9A:E0:1C:B6:AA:9D:B9:93:F5
Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
Certificate issuer: /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Certificate serial: 0193640E198945A4F7DE18C36D3518B578AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
Manifest number: 1250
Signing time: Mon 25 Nov 2024 16:01:05 +0000
Manifest this update: Mon 25 Nov 2024 16:01:05 +0000
Manifest next update: Tue 26 Nov 2024 16:01:05 +0000
Files and hashes: 1: doWTq4Gg8yVRYQmZ48ybIihCAuU.roa (hash: T5l0aIYeM9acFPTOcVDdj6wQGr3BtAByag1EcTh00Go=)
2: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl (hash: wAIpreS3kRaPqRArPkU9a1FS6LPqU6BYU5uivhPrXdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:0e:19:89:45:a4:f7:de:18:c3:6d:35:18:b5:78:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Validity
Not Before: Nov 25 16:01:05 2024 GMT
Not After : Nov 26 16:01:05 2024 GMT
Subject: CN=e2871a37ee0ee7a0b9fe6a9ae01cb6aa9db993f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0c:47:29:67:1a:a7:90:92:1f:ea:f2:a4:3d:
bb:4e:0f:20:11:42:85:42:28:5d:aa:35:5f:fe:f5:
9b:4c:70:16:64:30:70:4a:c4:b0:06:bc:81:a2:bc:
92:c3:68:44:d6:c7:f9:11:36:98:30:1d:a1:65:cb:
bd:fa:f5:c3:33:e0:01:24:dd:16:e9:9f:e0:81:c4:
11:68:a3:bd:fd:01:ed:49:69:0d:f6:9e:c7:06:05:
3a:a5:a2:79:32:43:24:90:11:82:a1:a7:31:cc:06:
5d:21:b3:5f:64:10:86:73:e8:55:ce:99:48:3c:3c:
5b:01:6d:92:e8:76:d0:c5:25:ff:d6:3b:ef:6f:2f:
c7:da:f8:88:37:fd:02:df:16:da:84:57:fe:3a:0a:
2a:7d:94:bf:a8:ed:0e:8a:01:b4:f6:42:db:35:e1:
52:88:b6:44:11:33:88:5d:d6:92:e6:d5:0d:c4:0c:
46:96:75:4c:a2:71:50:d3:37:d7:ec:81:b7:a5:9e:
7d:98:e9:8c:57:2d:b4:ac:16:f8:a0:a6:ce:24:d7:
b6:e2:c5:db:a2:6b:b7:09:67:08:5c:2d:2a:f5:81:
22:89:76:23:dc:35:09:8a:dd:b8:a0:f3:5c:45:98:
fd:d0:f0:e5:cc:9a:b4:7e:5a:0e:99:c0:72:4f:17:
b7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:87:1A:37:EE:0E:E7:A0:B9:FE:6A:9A:E0:1C:B6:AA:9D:B9:93:F5
X509v3 Authority Key Identifier:
keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d5:b2:e2:99:c7:67:ca:40:22:88:fd:41:a3:3a:24:45:84:
a4:99:e9:2c:6b:cc:4b:ce:41:d2:53:3d:8f:86:64:15:ac:1a:
e2:2d:64:fe:1b:ba:eb:29:cc:f8:00:ab:86:46:d2:fe:ef:8b:
34:6c:e5:9f:29:52:00:69:59:5c:20:81:7a:29:93:10:ed:2b:
a9:62:19:dc:0e:5e:32:f5:7b:56:eb:73:4c:8c:84:d6:78:92:
cf:f5:e3:91:3b:3c:9d:ec:0b:c4:fa:fd:5b:52:00:19:34:70:
f3:ef:f8:3c:93:5b:d0:0b:63:b6:e5:5f:d1:77:17:8f:80:7e:
d2:77:8f:9c:8d:e6:80:5d:62:4b:68:33:ef:97:3d:c5:25:e1:
42:54:24:aa:b2:ce:70:31:a8:8a:dc:c6:bb:8f:fc:dc:64:00:
ff:3d:42:93:8d:22:36:67:bc:8d:39:73:89:3c:9a:56:f3:99:
1a:ca:5a:59:ee:52:c7:d3:97:c4:14:e2:51:07:f2:a8:8e:05:
7f:d4:00:d9:db:26:2f:d3:05:5b:8e:0b:8d:ff:92:7c:da:7f:
d9:9e:26:3e:41:a7:b6:4d:ed:1a:6a:d0:2f:dd:b8:5f:8b:2c:
98:c8:e1:93:0b:54:c4:25:d2:53:6c:05:c9:cf:e5:51:2b:76:
c5:51:63:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:31:07 2024 by rpki-client on console-ams.rpki-client.org