Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
File: KL8ecjI3QqxNgTarbI6F33ujfus.mft (raw, json)
Hash identifier: TCjVKZVi8FO5PgLWg7xaMhgLkAqFtc0vemTnmkq0hwY=
Subject key identifier: C0:94:23:34:4A:63:77:E5:FD:BB:06:DC:4C:88:3C:6B:9D:9F:18:59
Authority key identifier: 28:BF:1E:72:32:37:42:AC:4D:81:36:AB:6C:8E:85:DF:7B:A3:7E:EB
Certificate issuer: /CN=28bf1e72323742ac4d8136ab6c8e85df7ba37eeb
Certificate serial: 018F874A5039B6887A1E4810786885B519CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
Manifest number: 1178
Signing time: Fri 17 May 2024 16:02:25 +0000
Manifest this update: Fri 17 May 2024 16:02:25 +0000
Manifest next update: Sat 18 May 2024 16:02:25 +0000
Files and hashes: 1: KL8ecjI3QqxNgTarbI6F33ujfus.crl (hash: 9x8koOZUIZMwVIAfdObTc2lGskdLeAq8Qp+gmg0ZiOY=)
2: RCP3CQ4Atdcj7tz1cQsKRWGjb5s.roa (hash: ZMbnG6WAJulEbDCYCFhapmpKFNzKRHsCmnQthZtA1uA=)
3: _NM1NCp1cN1DYzJiCGmCgt8PewA.roa (hash: lWpFq2FWlvUt77xrhpx6xR9CElxvq9niQECpLO3Fdwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:50:39:b6:88:7a:1e:48:10:78:68:85:b5:19:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bf1e72323742ac4d8136ab6c8e85df7ba37eeb
Validity
Not Before: May 17 16:02:25 2024 GMT
Not After : May 18 16:02:25 2024 GMT
Subject: CN=c09423344a6377e5fdbb06dc4c883c6b9d9f1859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:49:11:37:e4:01:18:97:c1:bc:1b:b9:d5:a9:
f7:28:12:0e:f0:81:dd:3c:bd:33:2d:c2:09:dc:95:
39:14:50:4d:a4:df:cf:32:1f:cf:7b:09:f4:fd:d2:
3d:ec:d7:9b:53:db:3f:94:ba:cf:e0:d9:9b:f5:e7:
0e:3d:4c:94:2e:83:7b:da:12:39:8e:8b:74:11:f5:
94:d0:cb:ed:6e:53:e8:16:f7:f8:8f:dc:fe:04:b4:
bf:65:74:f6:b5:b4:45:fe:2b:52:37:31:f8:cf:d2:
18:11:43:2f:ab:72:db:03:51:d4:80:a4:8f:d8:32:
23:76:41:ef:64:9c:ab:41:2e:fe:28:72:63:88:fc:
0e:fe:2f:59:0d:cf:a2:ff:17:d5:e8:e8:6b:af:36:
f5:01:73:25:1b:82:2e:f7:cf:26:35:e2:bf:8c:4e:
f3:0d:09:b9:fc:80:42:f8:de:0a:a5:aa:2c:14:76:
98:a6:23:73:d8:d8:e3:18:9f:65:e4:83:c2:01:1b:
1f:9c:f1:57:82:1a:64:e4:c3:58:c6:86:3c:e2:3f:
5f:43:15:69:d0:e8:16:85:0a:d2:73:88:b1:24:7d:
57:25:4f:ec:d8:98:ba:8a:06:8f:53:0d:32:8e:15:
c7:d8:1d:15:ed:28:1a:7c:3e:bd:32:14:2b:9e:9e:
2c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:94:23:34:4A:63:77:E5:FD:BB:06:DC:4C:88:3C:6B:9D:9F:18:59
X509v3 Authority Key Identifier:
keyid:28:BF:1E:72:32:37:42:AC:4D:81:36:AB:6C:8E:85:DF:7B:A3:7E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:80:70:42:61:cc:03:ba:68:18:4b:70:18:1e:6c:d3:94:87:
4d:1f:d5:cd:df:db:be:c8:6a:2d:dc:63:b0:22:05:97:fe:b0:
ff:cc:50:1d:3a:07:1f:e6:f9:58:f5:bc:34:b7:7c:dd:96:a1:
ab:cd:8f:46:e5:f2:42:af:2b:3d:0b:a5:5d:f8:c9:7e:75:fc:
61:6c:20:22:ab:85:a9:40:6b:d4:1e:82:56:82:c7:dd:05:34:
25:55:42:4a:c2:13:3f:3b:79:7f:64:05:81:3d:18:25:6e:0c:
a6:c5:1d:65:ec:5b:92:03:0d:08:09:b5:e9:53:e7:b5:9b:82:
64:04:79:73:ee:6e:59:37:f4:03:3f:63:c6:1c:97:f8:be:05:
14:5f:aa:b7:9a:dc:9e:58:d4:06:05:de:71:6d:fa:19:fb:e0:
2b:ee:25:78:46:a0:eb:d1:01:a4:63:a2:4d:88:5d:80:6a:06:
28:11:d5:1f:a5:b9:bb:35:b9:d6:21:36:31:e4:4d:5c:e8:3c:
cf:60:4b:50:3f:57:8b:8d:ce:d0:09:ef:43:45:b1:19:07:49:
8f:ce:02:e3:22:57:2b:47:be:8f:f8:de:24:15:7e:df:e9:6f:
3d:d5:78:92:0f:4b:30:79:78:6e:ee:e4:12:49:27:1d:92:63:
b7:18:1d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:23:53 2024 by rpki-client on console-fra.rpki-client.org