Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/KGS7NPtdFsqdH6P5eUy0jUvthHM.mft
File: KGS7NPtdFsqdH6P5eUy0jUvthHM.mft (raw, json)
Hash identifier: WM1S+ic10U6qe43SCLjsh1+MJhqyjBckocUz6goBrZM=
Subject key identifier: 46:1C:4B:B9:B6:58:83:44:9D:26:19:2A:6C:80:37:7F:34:18:BC:6F
Authority key identifier: 28:64:BB:34:FB:5D:16:CA:9D:1F:A3:F9:79:4C:B4:8D:4B:ED:84:73
Certificate issuer: /CN=2864bb34fb5d16ca9d1fa3f9794cb48d4bed8473
Certificate serial: 019369DABB4D6AE6B19F0250AAAF3C10D31A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGS7NPtdFsqdH6P5eUy0jUvthHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/KGS7NPtdFsqdH6P5eUy0jUvthHM.mft
Manifest number: 12CD
Signing time: Tue 26 Nov 2024 19:02:42 +0000
Manifest this update: Tue 26 Nov 2024 19:02:42 +0000
Manifest next update: Wed 27 Nov 2024 19:02:42 +0000
Files and hashes: 1: KGS7NPtdFsqdH6P5eUy0jUvthHM.crl (hash: EGCzjyxvq5Z4A19AagjCvFwbiX8fnTeecy5iDvlysRA=)
2: ZdUeN1bLq4XgbKblwgHS4Oj88P8.roa (hash: InmlRBn5QxfjyqCOmiv9oA25xVX45xrP7hPbtLQGpno=)
3: rdW_Uwi1zywbRu9qjW5gmE-XhqQ.roa (hash: a3iBQ2w14uNmI0u4+5wRX/6K/QJ3ekSsmQctNl8Ueik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/KGS7NPtdFsqdH6P5eUy0jUvthHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/KGS7NPtdFsqdH6P5eUy0jUvthHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGS7NPtdFsqdH6P5eUy0jUvthHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:da:bb:4d:6a:e6:b1:9f:02:50:aa:af:3c:10:d3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2864bb34fb5d16ca9d1fa3f9794cb48d4bed8473
Validity
Not Before: Nov 26 19:02:42 2024 GMT
Not After : Nov 27 19:02:42 2024 GMT
Subject: CN=461c4bb9b65883449d26192a6c80377f3418bc6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2d:19:14:01:41:b0:ef:b5:8f:5a:b4:e5:20:
07:20:e4:bb:a0:59:a1:94:02:1a:33:e2:b3:93:1c:
8d:b1:4e:df:b8:dc:fd:3c:d2:0c:cf:51:96:d1:06:
3b:dd:d4:53:fd:ce:b4:be:f8:2f:cd:25:6e:62:18:
fb:e9:78:c0:8a:03:61:8c:28:b5:fd:0b:25:7c:d0:
fc:22:cc:7c:e5:90:7a:62:9a:30:73:ee:83:94:ad:
3e:99:a1:50:f6:82:af:15:bc:9d:80:9a:d3:3d:5a:
0e:db:03:e4:19:5a:61:f8:fc:4f:12:87:70:ae:e3:
bb:96:18:87:a8:b1:2d:98:63:e8:18:d0:7a:98:1c:
30:4f:a1:98:12:3e:9c:95:47:f0:47:ca:9c:22:d9:
b5:f7:a2:44:1f:e9:1c:0e:03:f6:ab:7e:62:5c:11:
43:14:c9:82:e3:22:28:96:2c:ef:1b:d8:8c:7a:e9:
dc:d2:c7:9d:fb:7d:c4:ea:8b:d3:e3:17:e6:3c:64:
11:4c:9d:a0:dc:4f:ad:c8:1c:0a:46:af:ed:2f:17:
04:78:c8:95:ff:22:8e:45:b4:6d:a4:57:78:9b:29:
f1:79:e0:8f:d4:d2:17:1e:54:af:aa:94:c8:6a:e9:
e1:26:82:4c:1c:93:f0:44:79:ca:0c:ac:dd:7e:a1:
7f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1C:4B:B9:B6:58:83:44:9D:26:19:2A:6C:80:37:7F:34:18:BC:6F
X509v3 Authority Key Identifier:
keyid:28:64:BB:34:FB:5D:16:CA:9D:1F:A3:F9:79:4C:B4:8D:4B:ED:84:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGS7NPtdFsqdH6P5eUy0jUvthHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/KGS7NPtdFsqdH6P5eUy0jUvthHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/KGS7NPtdFsqdH6P5eUy0jUvthHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:2a:90:43:b1:fe:0e:fc:45:2c:90:c3:85:e2:11:9f:34:2d:
6b:3e:d6:e3:3d:32:16:98:9d:99:2c:39:8d:ff:50:d7:43:38:
65:c8:72:97:eb:66:a6:6e:f1:ed:66:10:a5:7d:c0:76:1a:3c:
d1:d3:a0:cc:35:94:05:25:a2:b7:6c:3e:a9:27:c2:7b:a4:a4:
9c:14:cd:d9:d9:d6:89:8d:aa:b4:8f:bd:93:aa:80:8e:f1:2e:
66:70:be:56:38:e5:95:27:48:e6:fb:47:09:a8:93:27:ef:d6:
a1:59:f9:9b:1f:f0:e4:e6:d2:e4:2d:ef:ad:8b:e7:cb:1b:64:
5c:88:a4:9c:9c:5a:f4:f9:95:1b:71:94:92:61:74:f8:c5:75:
ff:a3:ce:8a:02:d3:74:96:47:ed:14:b6:9f:06:59:94:24:dc:
44:5c:31:23:53:1c:b2:42:ca:a6:a1:a7:ec:48:98:ca:5c:fe:
fa:e6:b9:68:d8:59:f4:8d:b3:d2:d7:10:18:6a:39:a3:4f:83:
32:8c:c3:15:62:68:8e:b4:a0:c6:29:eb:84:ef:c8:aa:31:fe:
16:86:56:46:8b:3b:ae:42:71:cb:7a:d6:2c:4b:14:34:f3:48:
55:04:af:16:2c:07:11:25:ad:54:f5:b3:c5:e9:b0:99:a6:86:
c0:1f:00:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:39:26 2024 by rpki-client on console-fra.rpki-client.org