Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
File: KygwYXxDyMvImvPLKnTqXdAP5uo.mft (raw, json)
Hash identifier: XVgtww0TeIZ80iLQKZHIlE65JWB9oKlg5V0zFsnFNfA=
Subject key identifier: 21:93:7A:E5:39:4B:6B:DD:D3:5C:89:A7:F1:8A:13:08:94:66:DE:DB
Authority key identifier: 2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA
Certificate issuer: /CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea
Certificate serial: 019369D9074101EB776158325A7434A1210B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
Manifest number: 0CBC
Signing time: Tue 26 Nov 2024 19:00:51 +0000
Manifest this update: Tue 26 Nov 2024 19:00:51 +0000
Manifest next update: Wed 27 Nov 2024 19:00:51 +0000
Files and hashes: 1: KygwYXxDyMvImvPLKnTqXdAP5uo.crl (hash: iXDL9l62EiR+g2QfNjPv4p+2JHzExwp9eYi+c4QYz6s=)
2: XDO7GoxLJHWMTJMh6FQu-M_UYOg.roa (hash: 0IUbhfRYPDXDqmX+i0LqpIKWXG0/68lJf38+jX0T2bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d9:07:41:01:eb:77:61:58:32:5a:74:34:a1:21:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea
Validity
Not Before: Nov 26 19:00:51 2024 GMT
Not After : Nov 27 19:00:51 2024 GMT
Subject: CN=21937ae5394b6bddd35c89a7f18a13089466dedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ea:50:ae:6a:af:20:c5:20:35:3d:01:2e:db:
c9:50:46:47:41:8c:d5:db:07:4e:70:91:97:62:ca:
95:73:d0:05:02:e2:5c:30:15:2a:9a:59:fa:c0:a7:
63:47:69:28:68:88:16:72:0b:7b:ba:c4:6f:58:a9:
fd:e4:87:c2:ea:d5:ec:02:07:cc:5f:d1:56:c9:c8:
bb:51:6f:6e:af:5b:3d:ca:07:a8:ca:a8:7f:dd:81:
e2:d6:b5:2a:23:19:2d:c5:2f:49:d7:9f:48:47:5b:
11:87:b2:16:24:ea:2d:f3:67:94:47:3e:51:e2:5f:
96:56:b9:97:3d:f1:2a:26:3b:06:7a:70:7c:50:ab:
1e:df:64:2d:bf:cf:aa:02:6c:34:9d:6f:03:b9:84:
ca:3f:66:82:96:88:af:99:a6:c1:9e:cf:dd:cd:81:
23:df:af:e3:47:af:22:7f:ed:74:95:27:ef:6b:ad:
59:c6:c4:28:98:af:1a:c4:5a:50:4f:9f:e7:a3:db:
55:e2:c8:07:d8:10:b6:45:2a:ca:e3:61:97:8f:d0:
e7:3d:c5:e0:00:54:27:5e:89:f4:69:d3:bf:83:4a:
d0:a5:7c:3f:c6:c6:6e:2a:1b:dc:d5:cb:22:18:bf:
71:e7:02:da:2f:4a:a2:b4:71:98:5a:de:3a:d4:79:
70:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:93:7A:E5:39:4B:6B:DD:D3:5C:89:A7:F1:8A:13:08:94:66:DE:DB
X509v3 Authority Key Identifier:
keyid:2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:7b:c3:20:f0:39:1e:9b:15:86:a7:14:dd:a2:f9:c0:19:86:
45:e5:ad:5d:b1:eb:8f:3e:52:80:0b:86:58:fb:07:c6:13:0e:
a8:e0:96:f4:18:06:a3:9a:ea:3d:aa:7a:cc:80:24:8e:43:99:
46:7f:44:fc:f8:5f:08:79:98:6b:a9:4c:6a:47:30:0c:37:49:
ce:8b:bb:3d:62:82:e7:af:3b:17:bd:71:d9:55:c7:c2:8b:72:
5d:11:61:ff:60:d0:91:29:c4:16:18:21:aa:ca:20:2c:89:43:
47:60:0c:2e:6a:0b:80:78:8a:16:38:2e:8b:aa:b9:03:a5:f6:
f1:b5:ad:fe:ce:74:3a:8b:2a:36:11:96:3d:7b:30:da:c6:3a:
8b:cc:d2:8f:cd:69:cb:25:6a:05:b8:9b:a1:45:31:38:fd:31:
41:fa:5e:07:a9:29:d0:f5:3e:72:7f:3d:56:0e:14:ba:c8:ef:
32:16:85:b7:09:19:4d:d3:4e:29:f0:7e:85:fc:f6:34:a7:a7:
e6:b0:42:99:4e:32:17:6c:eb:61:dd:89:eb:cd:f2:d2:c9:5a:
ef:01:e7:14:ba:ca:45:31:db:4c:5e:aa:3d:7a:05:0a:8d:84:
12:f9:4f:d7:a7:0d:55:62:8d:2d:1f:ae:81:33:6c:2e:76:cf:
b0:c0:29:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:37:56 2024 by rpki-client on console-fra.rpki-client.org