Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
File: k_6KleVSnXjnIEfU410afprVwRo.mft (raw, json)
Hash identifier: ZuqxJF4GeQw6duqCqGvLjghAa5CXXLgrYLDfIx0PKWM=
Subject key identifier: 68:46:F9:32:FB:BC:C8:6C:7E:90:81:71:24:D9:B9:AE:76:5C:45:FA
Authority key identifier: 93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
Certificate issuer: /CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Certificate serial: 019355E43279802FBFDDBA98ADAF615269D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
Manifest number: 0DD5
Signing time: Fri 22 Nov 2024 22:00:38 +0000
Manifest this update: Fri 22 Nov 2024 22:00:38 +0000
Manifest next update: Sat 23 Nov 2024 22:00:38 +0000
Files and hashes: 1: 1IL4FQPh0sje1jXpEAbVVjA0BMs.roa (hash: cG17JIXSyEa9z1vyq9CS6QAEkgpJrLPa48WPqp8G4Y4=)
2: k_6KleVSnXjnIEfU410afprVwRo.crl (hash: jlERxOrsvVmX6kLiSuc+Txhn6nQkh6qRHAjfKsN9Zdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:e4:32:79:80:2f:bf:dd:ba:98:ad:af:61:52:69:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Validity
Not Before: Nov 22 22:00:38 2024 GMT
Not After : Nov 23 22:00:38 2024 GMT
Subject: CN=6846f932fbbcc86c7e90817124d9b9ae765c45fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:16:88:88:36:00:12:aa:39:f0:e7:56:c4:
52:3d:b6:61:72:d9:a8:4e:07:d6:f3:ac:49:89:cf:
b0:21:c1:0f:8e:d9:b0:3e:42:da:07:1c:fb:ad:91:
16:82:72:b1:cd:b6:44:ed:42:3c:bd:cf:f3:53:11:
db:48:09:72:80:3d:02:a2:a7:96:53:44:6a:bc:ae:
24:fb:16:48:e9:f6:74:e9:4f:89:22:18:ef:8e:b9:
65:d3:67:0b:2c:98:8e:bf:47:b5:9e:4b:16:fb:e4:
c1:0e:0f:bc:da:76:7a:50:30:bd:bc:9b:91:39:7c:
62:cf:f1:10:d2:07:fe:d6:cf:68:b3:e4:ec:ef:28:
60:7a:ba:db:06:e6:d8:77:19:d2:7c:21:3e:39:83:
66:92:1e:e7:bd:fd:75:5a:ef:35:94:77:71:a2:3a:
98:6d:5b:b3:75:17:a8:b9:4b:39:63:7c:a1:c1:d4:
22:0b:fb:63:13:57:df:cc:c9:6c:b0:a2:d0:8c:79:
1d:90:50:5e:c5:8d:f0:43:f2:2a:7b:ad:ac:fb:58:
0b:2e:01:3a:9f:c0:55:e7:e5:6e:72:17:c6:fd:f8:
3a:e1:fa:a1:fa:3a:3b:09:75:50:bc:b6:07:1b:e0:
f1:71:10:29:f7:2f:e1:55:c5:c3:cc:bb:95:75:cd:
8f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:46:F9:32:FB:BC:C8:6C:7E:90:81:71:24:D9:B9:AE:76:5C:45:FA
X509v3 Authority Key Identifier:
keyid:93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:05:b0:0b:02:1f:e7:41:f5:51:9b:a7:68:af:eb:58:89:6f:
3f:66:77:22:e6:c2:6b:ee:65:db:97:49:8c:63:fc:98:51:30:
4d:3c:fb:19:c1:dd:aa:1d:c7:7c:71:de:5a:03:13:81:0e:97:
19:76:98:6c:13:46:af:49:75:55:07:73:cf:2f:f3:9d:a5:7c:
a1:03:ec:34:84:d7:56:c3:ce:00:be:bf:d3:55:6b:ce:58:ad:
17:d8:e7:3b:f9:82:5e:cb:9f:cd:10:df:54:92:5f:c3:b5:04:
05:ee:02:e2:ff:88:2c:5d:1e:03:59:01:af:1a:25:05:22:05:
9e:17:71:0f:a0:62:42:74:03:ea:13:1b:76:c8:d0:4c:89:86:
ed:53:20:e8:db:a1:6d:14:09:47:5f:4a:1c:ca:e2:69:d0:11:
19:80:26:c9:32:d6:94:12:5c:bb:5e:ba:f5:0f:41:c1:73:df:
cc:49:0e:ff:39:5b:21:85:1a:b1:5f:03:49:83:9b:68:17:7b:
af:d3:99:9a:b8:da:a4:8e:37:fe:bc:1f:2f:97:be:6b:0d:3a:
7e:3d:5d:35:2f:ab:91:3b:71:4f:9c:55:db:ff:4b:75:a5:ff:
a2:99:ca:c3:5b:02:d1:aa:52:6e:77:c7:18:a0:1c:b3:b5:2f:
bf:72:26:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:15:07 2024 by rpki-client on console-fra.rpki-client.org