Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
File: KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft (raw, json)
Hash identifier: K7fuhZcOGRg3cGRrhrxs38WpBgHQCQ1mEKrHymehg/4=
Subject key identifier: F4:D9:69:DE:4D:7E:40:2A:A3:52:0E:0C:1C:29:26:F3:F2:70:EF:1E
Authority key identifier: 28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
Certificate issuer: /CN=28ab22fb2da473c5426bfcc1f880861004017087
Certificate serial: 018F6B6434CFC53FE70DA9283CBED0576D82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
Manifest number: 0CF7
Signing time: Sun 12 May 2024 06:01:20 +0000
Manifest this update: Sun 12 May 2024 06:01:20 +0000
Manifest next update: Mon 13 May 2024 06:01:20 +0000
Files and hashes: 1: KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl (hash: TKb0gNKAsYlZ8/Zb8OlzCmMddcmunVdmxxKSD6l6TRA=)
2: PE58OaF0ra7iez3aqBDlnjOJoTA.roa (hash: YxRtlE4B9XbEps9IyUuSGbNOWpsQB0/AYYXe9VgxRrg=)
3: n4MwGtztoVDatiBkB_Vhs206CdI.roa (hash: LUYQxNvcTqubF002CqmWfwoXjEzxxdTGccJ7vPTkyQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:6b:64:34:cf:c5:3f:e7:0d:a9:28:3c:be:d0:57:6d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ab22fb2da473c5426bfcc1f880861004017087
Validity
Not Before: May 12 06:01:20 2024 GMT
Not After : May 13 06:01:20 2024 GMT
Subject: CN=f4d969de4d7e402aa3520e0c1c2926f3f270ef1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6e:f0:84:86:25:15:7d:8a:54:1f:57:5d:c8:
9e:57:1e:9f:d9:d9:2f:f7:13:0c:15:aa:f1:50:77:
62:64:1e:73:cb:10:ef:eb:d5:fb:88:7f:f9:e4:d7:
c0:29:d8:d0:e4:50:5f:9f:e9:3d:b2:46:aa:31:d2:
ba:5e:3e:b1:a3:a2:65:db:4f:02:3e:d2:78:1c:a9:
ab:fe:e2:83:ef:98:b7:e9:16:97:da:e4:c5:25:69:
5a:30:df:f3:89:fc:b3:2e:8a:62:27:ef:4b:c7:eb:
51:8e:3c:cc:76:78:8e:48:00:f1:a4:cf:bb:80:19:
42:e3:09:b3:25:25:82:5e:f4:a7:e9:78:d0:73:c0:
a5:d8:d7:7a:34:16:51:cc:1f:1a:3d:1c:f8:fa:9b:
9c:d5:aa:14:04:38:cd:16:be:f0:ef:f0:f4:3b:99:
93:56:7a:0d:61:1b:52:a4:da:d1:ad:3c:77:88:9c:
15:7a:c7:18:69:1e:45:00:e9:8e:80:fd:05:59:6f:
d8:87:9c:60:c5:54:34:ed:1e:71:c7:b9:2a:10:0b:
32:88:aa:77:8b:0e:0e:29:33:6c:0b:df:d4:12:47:
ad:fa:ce:f6:88:1a:c9:3a:55:dc:6f:da:23:a6:a5:
c6:ab:1f:4b:a1:1c:cd:93:bc:81:9d:c3:ba:5d:66:
b9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D9:69:DE:4D:7E:40:2A:A3:52:0E:0C:1C:29:26:F3:F2:70:EF:1E
X509v3 Authority Key Identifier:
keyid:28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:18:e9:8c:fd:e2:6b:53:30:ba:8e:75:dc:3d:35:93:fb:25:
b8:af:1d:0c:af:97:0e:28:b6:cd:a4:9d:03:df:cd:da:99:b7:
86:4d:41:8c:1f:42:ba:36:22:4f:ef:93:7e:8e:56:17:48:d9:
12:18:ef:82:cd:f6:71:e6:5a:c3:57:09:05:e9:ab:1b:2b:9e:
ab:82:db:6d:2a:9a:20:d6:d0:93:39:26:35:ae:02:ed:b0:e4:
be:65:aa:d3:e6:4a:00:9c:8d:3d:cd:73:20:a1:66:33:0d:4a:
6c:39:56:24:d0:58:39:c0:89:d0:74:d2:7f:f7:5e:27:40:0e:
fe:e2:c5:91:dc:28:82:47:ce:62:6f:ba:b7:af:8c:e8:17:94:
fb:a9:57:1f:31:89:a4:3f:42:53:3f:27:d5:7c:de:2e:0f:18:
1f:7e:4f:d9:a0:70:02:26:6e:96:22:28:81:a3:86:cb:ea:67:
64:c3:77:df:6a:c1:6e:e1:d2:c3:14:b6:7c:88:0e:70:92:a4:
fb:ed:b2:1b:20:8a:f0:a9:c6:66:b1:0c:88:36:73:b7:9a:3e:
94:7f:12:f0:a2:e9:67:e8:3d:3e:22:df:13:03:0e:45:9e:ab:
fb:a3:30:f1:f4:2b:ba:5e:47:85:a3:c8:5f:ba:cf:d7:5d:d8:
5f:06:3a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 06:41:25 2024 by rpki-client on console-ams.rpki-client.org