Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
File: KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft (raw, json)
Hash identifier: fT8l+jCQ4VDHBsAZpNiQzzjStOIiBEX0IxUuWMNK5tw=
Subject key identifier: AA:74:A0:C2:88:03:E9:71:5F:27:65:F6:98:91:0E:0A:08:27:73:32
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 01935162BD7FC534207B2C6406AD07FFE28E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
Manifest number: 07D1
Signing time: Fri 22 Nov 2024 01:00:45 +0000
Manifest this update: Fri 22 Nov 2024 01:00:45 +0000
Manifest next update: Sat 23 Nov 2024 01:00:45 +0000
Files and hashes: 1: 5hXtRn_Qemh6OtbWHjzNhIGyGJA.roa (hash: nMDeuDjySJamP4tD4frZNSr64+refBW4EhslmqKcXLs=)
2: KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl (hash: 39Y8RZsmwYLHaX4GwZLW1XGsCjkU5UcjR8P1ePLS0qo=)
3: QZJnuQyac489RFoA9bz22jWa7LE.roa (hash: 56gWm2m7HDC2eg4k9U+VPnDTYX4/gekWV/vqFBmnG94=)
4: Um4E5fVDXPSksIgkdnUaTYvxVPw.roa (hash: QAvSlHJxAKMsSGQIKpSBD9FFIF7ceO/AR925Jh1iukM=)
5: Y-22STYS5p5pjUJW0U7izf96C1s.roa (hash: sfn8noDiZ1EXcREq74Qrsva7acu1oS1b8SDwv0as7Fk=)
6: jas_GORNCuhrvBoF01-R8dQ3QJo.roa (hash: xCu6mc/y/WROPAB6mvvYnKwYJccMAaG1EhNnGZ4cGPE=)
7: pjGEMuNoO9gtgQoDBeR-B3itT2M.roa (hash: RYNbAPSco8b7E+6dvpELFZOdDZKou25w13HFONLZkww=)
8: z7uM5uJBuBWc46qOE_yGXDJlhBE.roa (hash: b/31oI7XBceb0NBQOBtalOolDwXPLmnSb548/DP3JGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:62:bd:7f:c5:34:20:7b:2c:64:06:ad:07:ff:e2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: Nov 22 01:00:45 2024 GMT
Not After : Nov 23 01:00:45 2024 GMT
Subject: CN=aa74a0c28803e9715f2765f698910e0a08277332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:68:8c:79:7f:1a:4a:0e:c6:36:36:b7:bf:b9:
54:ac:51:45:12:74:35:f5:c9:ad:fb:2a:90:cd:35:
73:4b:94:a3:1d:ac:d9:a1:c1:96:66:7a:51:13:79:
c1:b4:98:f3:ac:29:b2:19:cf:53:a8:04:3f:66:3f:
54:33:19:e4:d0:05:a8:1f:04:f3:01:47:2c:d8:37:
7d:55:1f:54:33:a2:82:81:a8:a1:3f:94:ca:31:dc:
43:5f:c7:08:40:04:15:cd:8b:6d:36:36:83:db:06:
e3:c1:86:a5:66:04:71:87:c1:8f:d9:33:f0:10:e8:
8a:95:14:dd:42:7c:1f:c2:20:3e:f1:1f:b7:87:14:
33:1e:d8:11:6a:5d:42:4f:eb:b5:1e:b6:d9:2e:40:
bf:54:b3:9d:38:4a:8b:c1:fd:17:33:e8:dc:a5:27:
85:ad:37:6a:3a:4c:91:fe:6c:49:b2:cd:82:91:b3:
25:ea:63:e0:84:da:63:52:f2:c8:50:00:46:82:26:
80:1a:85:f0:3e:ef:52:47:0d:c9:3b:99:17:2c:8f:
64:8a:4e:28:83:58:1d:2e:95:08:5d:1b:96:72:8a:
8e:21:a4:c9:e8:45:c3:5c:e9:09:d5:be:cc:54:3a:
51:6b:bd:ff:d7:a9:ec:a3:08:b1:5d:bb:42:c2:b0:
03:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:74:A0:C2:88:03:E9:71:5F:27:65:F6:98:91:0E:0A:08:27:73:32
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:f8:38:a2:b1:05:bd:ea:a5:dd:93:5e:2f:de:e3:9a:fb:31:
65:6a:d4:7d:88:2a:9b:a0:ac:ac:50:9a:22:68:66:fe:18:ea:
a7:c0:15:04:4d:f1:ba:42:4c:17:b7:14:66:eb:49:ee:27:1a:
dd:bc:61:36:f6:b9:3e:bb:86:16:c8:0f:49:0f:1f:f4:3d:1d:
a2:54:66:96:1d:c7:81:18:1b:e6:89:dd:e9:14:50:5a:65:07:
09:a6:5c:bf:ad:24:8d:1f:7c:94:02:7f:5b:08:e4:2f:75:61:
f3:ca:6f:64:ea:b7:99:30:14:0c:60:f6:30:7e:c7:bd:2b:cf:
ae:d9:51:5a:e8:74:5d:2d:9e:20:37:3e:93:b7:1b:f7:d9:ac:
66:79:3f:9e:7d:e1:49:d9:89:55:56:9a:a0:6f:a1:0d:34:34:
6b:93:b9:1c:25:bb:42:4e:14:dd:1c:13:d5:54:a6:97:8c:36:
35:73:1a:b5:12:44:fa:22:c8:6b:88:2a:76:fc:7f:98:31:1f:
8a:a3:f3:8c:81:79:71:aa:e9:f4:54:b9:ed:31:10:2a:6d:d5:
97:af:af:4b:7a:94:16:2e:30:05:6c:2a:64:0b:f2:f1:b6:d9:
ef:72:b1:f8:f4:90:57:51:b7:15:fa:ce:a9:72:45:04:9c:91:
5c:eb:7a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:45:46 2024 by rpki-client on console-ams.rpki-client.org