Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
File: KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft (raw, json)
Hash identifier: /aeV49U1OiBqbnij13B/0ULJvEiW2od2w3lBf+LDaDU=
Subject key identifier: 34:49:40:0B:0C:93:DD:AB:44:7A:FA:87:D8:8F:6D:F5:FB:60:C8:B3
Authority key identifier: 28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
Certificate issuer: /CN=28ab22fb2da473c5426bfcc1f880861004017087
Certificate serial: 019351D08CEC8C285852FDFD6360AA919B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
Manifest number: 0EFC
Signing time: Fri 22 Nov 2024 03:00:42 +0000
Manifest this update: Fri 22 Nov 2024 03:00:42 +0000
Manifest next update: Sat 23 Nov 2024 03:00:42 +0000
Files and hashes: 1: KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl (hash: nsAgNXPmtiEAusDyFE6aTTD8Q7+ovgT6bWgXi0uTqk4=)
2: PE58OaF0ra7iez3aqBDlnjOJoTA.roa (hash: YxRtlE4B9XbEps9IyUuSGbNOWpsQB0/AYYXe9VgxRrg=)
3: n4MwGtztoVDatiBkB_Vhs206CdI.roa (hash: LUYQxNvcTqubF002CqmWfwoXjEzxxdTGccJ7vPTkyQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:d0:8c:ec:8c:28:58:52:fd:fd:63:60:aa:91:9b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ab22fb2da473c5426bfcc1f880861004017087
Validity
Not Before: Nov 22 03:00:42 2024 GMT
Not After : Nov 23 03:00:42 2024 GMT
Subject: CN=3449400b0c93ddab447afa87d88f6df5fb60c8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fb:0f:e9:56:33:a5:cc:ae:e6:b5:a5:ef:89:
26:c4:75:47:eb:f0:db:be:64:f4:f6:ca:83:c2:34:
06:1b:34:ab:c0:a9:82:32:ce:f5:c4:e8:b9:ce:7c:
7e:f9:92:69:12:05:b2:d0:96:3b:96:d1:02:e3:14:
8a:c3:70:1c:fb:16:1c:13:f4:f9:bf:47:a7:5d:b5:
b7:a2:30:72:62:93:ee:e9:ec:67:90:73:6f:7b:d9:
4e:21:8a:a0:76:3e:d8:42:e3:9c:21:69:ac:f3:b9:
e4:3a:30:18:da:9c:3f:8b:5c:ca:85:d5:4c:3d:fb:
f9:bb:31:62:19:14:a6:dc:2f:fb:21:01:a1:16:d1:
36:53:22:9f:21:a4:f4:45:a2:9d:15:1a:b0:e3:f0:
34:4b:13:25:7b:19:c0:19:69:74:65:95:16:a0:3f:
4f:3c:29:fd:1c:93:46:65:81:53:09:1e:78:0c:ef:
ed:df:68:98:26:55:fc:dc:79:b1:cc:d5:7f:ad:90:
89:c0:2c:f7:6c:40:7b:1a:ac:d5:5b:17:d0:14:53:
99:88:c3:9b:3a:ab:20:68:08:94:cd:93:a1:3b:6c:
f3:a2:05:d8:25:60:d7:8c:f6:4b:ef:1d:81:2f:47:
28:b1:b1:fd:d9:71:af:c9:5c:80:5b:12:9c:9d:15:
ed:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:49:40:0B:0C:93:DD:AB:44:7A:FA:87:D8:8F:6D:F5:FB:60:C8:B3
X509v3 Authority Key Identifier:
keyid:28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:42:d8:5b:62:88:2d:fa:17:4d:ce:a3:23:20:2b:d4:9a:1e:
17:a5:9f:a8:ed:57:dc:bc:22:63:3e:78:49:b1:f1:0d:bf:a3:
db:3d:93:61:51:bd:bc:40:c7:8e:19:a0:a5:af:5e:3c:94:99:
4a:5e:2b:88:fa:25:cb:38:a0:d4:45:c5:d2:00:92:5d:e4:21:
48:60:e1:ae:a4:34:57:40:6b:fb:97:e6:c4:b7:7e:f6:7d:f6:
a2:1e:51:86:39:e0:32:f0:0f:ec:9e:67:bf:5f:cb:29:ec:0e:
12:ed:5b:33:e3:7c:72:2d:3f:0e:eb:38:26:ce:0a:c5:a1:98:
c1:91:0c:c2:25:86:a1:d5:22:8a:63:81:65:e9:95:38:99:51:
ce:08:00:10:1a:90:7b:80:62:da:18:c0:94:35:d9:66:9d:9b:
af:df:2d:da:4b:a3:0d:1b:60:d8:27:c8:ee:be:9b:76:07:9e:
0e:9a:37:53:6c:4a:8e:51:95:e8:33:f1:0a:70:de:e5:fc:fa:
10:ae:2d:23:01:10:4d:f7:6f:7c:6e:fd:11:1e:bf:4a:dd:31:
36:35:f5:36:e2:30:8c:50:54:e2:62:be:af:3e:d2:6c:fd:84:
65:6c:35:c1:b9:4a:d5:91:17:98:a0:f8:38:15:6e:62:28:61:
ca:88:97:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:53:04 2024 by rpki-client on console-ams.rpki-client.org