Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
File: KYNUhhlzcozivlBfcnCkNk2U5pE.mft (raw, json)
Hash identifier: /hhTAmzIJbXoeIgcF+aSwhDStCOwC3RFGDMGSODkfj4=
Subject key identifier: 12:81:D4:BF:D7:E1:C8:09:43:D2:FD:A5:71:C6:A2:AE:2E:9F:61:AB
Authority key identifier: 29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
Certificate issuer: /CN=298354861973728ce2be505f7270a4364d94e691
Certificate serial: 019350BFF14173670B6424DDDF31102CA457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
Manifest number: 1370
Signing time: Thu 21 Nov 2024 22:02:56 +0000
Manifest this update: Thu 21 Nov 2024 22:02:56 +0000
Manifest next update: Fri 22 Nov 2024 22:02:56 +0000
Files and hashes: 1: KYNUhhlzcozivlBfcnCkNk2U5pE.crl (hash: rSSNl8lEJBjw7EHEQdMZdeq0X4L/tHDzzGYjF2EjuV8=)
2: vr2BnLoxM5s-_wYNoUTiWFUXaC4.roa (hash: RzbsUcexIXqhXU4KGamGV+v9VGjcLH4U3vJja1Duexk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:50:bf:f1:41:73:67:0b:64:24:dd:df:31:10:2c:a4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298354861973728ce2be505f7270a4364d94e691
Validity
Not Before: Nov 21 22:02:56 2024 GMT
Not After : Nov 22 22:02:56 2024 GMT
Subject: CN=1281d4bfd7e1c80943d2fda571c6a2ae2e9f61ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c9:03:37:58:f5:96:a8:79:e2:36:1e:10:33:
40:40:cb:1e:a5:90:32:66:25:e2:f2:b3:8a:ed:bc:
cb:c8:dc:c2:5d:ca:49:fc:3a:ea:ad:ea:3b:36:b3:
c2:ea:10:6e:92:2f:7d:20:ec:9e:0f:c2:5b:39:78:
d7:83:67:bd:3c:66:e4:57:57:ce:37:b1:cf:e2:1b:
f6:1b:2c:05:0e:1b:6c:1d:78:b4:f1:17:3d:d3:a4:
e3:2e:40:49:dd:c9:87:c0:e1:84:49:af:95:28:3e:
14:54:f0:08:06:72:43:c0:75:4b:f8:fd:be:2e:0b:
28:05:68:bd:53:9c:78:8f:cc:18:b8:c9:1d:06:c1:
16:12:56:d5:7b:99:85:19:a4:0c:58:19:d1:fc:b4:
b2:54:cd:cb:1a:99:93:58:c7:92:30:cf:a6:b3:87:
20:5c:07:b4:57:04:12:66:dd:c2:a4:be:9a:2b:c5:
48:d0:44:a0:8d:b2:24:13:1d:f4:b4:70:0e:00:a9:
71:c2:35:25:0d:e9:a4:c1:ed:27:2d:cf:4d:0c:c5:
5d:85:c3:2b:fe:3a:55:c1:8f:f7:2b:e7:a1:7a:ae:
48:34:25:50:ae:3d:8c:4f:cd:e0:9b:02:a6:61:da:
3b:76:51:f6:28:d3:75:1c:16:4f:4e:c4:dc:47:9a:
b7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:81:D4:BF:D7:E1:C8:09:43:D2:FD:A5:71:C6:A2:AE:2E:9F:61:AB
X509v3 Authority Key Identifier:
keyid:29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f3:0c:2b:19:17:82:3b:b2:8c:35:8d:0f:72:e5:af:7f:dd:
4a:d1:9a:6f:75:20:9a:82:78:78:46:c0:94:b5:4b:40:b8:a4:
64:8a:61:e4:bf:8f:83:ac:1f:e3:d5:bf:85:89:ed:52:e0:e7:
db:21:f8:6d:a7:87:6e:c9:7f:cb:ec:56:37:6f:66:7b:88:15:
b9:c8:e0:9e:55:b6:bc:37:f8:f4:db:7c:81:7a:70:de:54:87:
1b:f1:00:ab:64:cf:44:72:bb:0c:d8:e2:77:0f:15:a2:e1:0d:
ea:6d:cf:28:c6:b5:f3:76:d7:a5:46:6d:91:61:9e:7d:fc:20:
1c:40:49:53:bd:e5:7f:56:d1:dc:33:21:c5:61:f3:93:44:c8:
0b:75:07:de:e5:de:22:b1:a4:cb:98:34:cc:57:ee:4a:1f:ae:
a5:b4:86:43:25:5a:a8:64:e0:9b:4c:51:77:22:a9:6a:46:15:
0b:bf:73:84:98:bd:04:be:02:de:b6:de:a1:f2:42:46:fd:b6:
7d:a5:f7:d5:c1:64:63:bd:2e:2a:d8:3a:68:65:4c:46:e0:dd:
82:2d:13:57:85:79:4e:46:5a:49:23:71:b1:6a:71:4f:3e:83:
40:40:3c:6c:f8:20:34:72:6d:df:59:be:37:7a:b7:59:a7:05:
24:03:bf:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:29:03 2024 by rpki-client on console-fra.rpki-client.org