Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
File: KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft (raw, json)
Hash identifier: u3D1B/9q3CEs+XT0SO0Knqu1g/pJT9Sn1ctcNb8gLf4=
Subject key identifier: F0:2B:DB:21:D7:A3:A6:83:5F:64:67:8B:F6:81:B4:01:53:7E:D9:D1
Authority key identifier: 28:20:3D:EC:D0:8B:D4:7D:8A:91:62:A6:E1:74:2F:3C:53:EA:3C:74
Certificate issuer: /CN=28203decd08bd47d8a9162a6e1742f3c53ea3c74
Certificate serial: 01938C9CAB054FD7E40E4E48506983558FBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
Manifest number: 0609
Signing time: Tue 03 Dec 2024 13:01:37 +0000
Manifest this update: Tue 03 Dec 2024 13:01:37 +0000
Manifest next update: Wed 04 Dec 2024 13:01:37 +0000
Files and hashes: 1: KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl (hash: d2j9AmYVErxnvv+o7+PyNL1/vgAmCEFaU5h1Uzt7070=)
2: x-wi5OePJObwjtMIP5kzaryMlig.roa (hash: tI9He1PeHxfRiuZ2yrv1KlruGK7iuaoeDbA57xWU8EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Dec 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8c:9c:ab:05:4f:d7:e4:0e:4e:48:50:69:83:55:8f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28203decd08bd47d8a9162a6e1742f3c53ea3c74
Validity
Not Before: Dec 3 13:01:37 2024 GMT
Not After : Dec 4 13:01:37 2024 GMT
Subject: CN=f02bdb21d7a3a6835f64678bf681b401537ed9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d6:fb:d6:99:44:c1:e2:c5:25:ac:16:17:86:
42:be:4a:78:1d:5b:f3:7e:7e:31:22:18:80:95:96:
a7:5c:88:cc:34:c6:06:6b:dc:aa:1c:e0:ad:21:15:
3c:83:c5:2b:12:b2:4d:55:aa:48:b9:eb:16:37:e2:
ab:90:19:ce:16:a1:c6:5d:df:8b:cd:77:74:b3:eb:
d2:8f:23:7a:19:79:26:c6:3f:a5:5a:ff:c4:77:ff:
46:a9:c0:e1:96:29:71:e7:66:fd:e8:dd:d9:19:15:
4f:7e:98:4b:41:a7:9b:61:29:a0:e0:0e:df:b0:b0:
7f:a7:ff:5b:31:c3:bd:83:99:40:fc:00:81:e7:f4:
c5:d0:e2:21:62:d9:9e:83:5a:a6:6e:5b:39:8f:83:
e3:9c:c6:4c:b7:55:4e:25:23:ec:04:21:d4:5f:a9:
88:bf:94:c0:e5:c5:0e:a5:e8:a5:45:c6:4c:83:d2:
58:40:ea:4c:4f:72:fe:3c:f3:89:24:54:a9:15:6e:
ab:83:35:7b:df:b8:0d:83:7d:9f:b7:f4:58:b3:b6:
07:59:ee:40:12:7e:10:47:06:07:04:86:bc:b4:0a:
2a:d2:fb:0b:06:cc:95:0d:e7:60:30:dd:11:6a:35:
35:c6:07:58:d4:c1:a6:3a:ad:ff:9c:d1:68:70:73:
01:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2B:DB:21:D7:A3:A6:83:5F:64:67:8B:F6:81:B4:01:53:7E:D9:D1
X509v3 Authority Key Identifier:
keyid:28:20:3D:EC:D0:8B:D4:7D:8A:91:62:A6:E1:74:2F:3C:53:EA:3C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c7:2c:3f:7e:eb:55:45:9f:66:5b:79:51:90:fc:7c:bf:7d:
fe:53:6d:90:1e:2e:6c:ba:50:e4:17:46:66:79:28:50:e8:fd:
3d:72:96:8a:94:1e:56:08:59:76:e5:a2:11:42:de:60:2a:2b:
95:a4:d7:df:33:02:54:c7:24:04:dc:bc:91:a5:98:58:9f:44:
59:ab:72:37:81:2c:8c:46:6e:ff:50:74:d3:66:d5:97:bf:d1:
7c:c2:8e:33:5c:6a:41:6f:4c:f1:5e:55:94:a5:46:29:b9:39:
b0:b2:78:9f:a6:74:dc:46:f2:71:b6:bc:a4:3d:ef:e5:ef:e9:
6e:6b:ac:92:99:1a:b2:6b:8e:b4:6a:3b:7a:1f:41:e1:af:86:
bb:9a:cc:fb:d9:77:e0:2e:bf:d0:2f:72:b7:a4:fa:4b:d7:6d:
b6:89:99:9c:79:98:6d:a1:ec:64:90:13:b7:74:d9:98:ef:4e:
07:97:ee:04:ee:ec:49:36:88:7a:14:97:b2:ab:c7:a4:81:9b:
e9:bf:5e:1b:08:48:5e:39:37:d0:06:d7:23:5a:1f:17:4e:64:
1d:6b:19:49:22:0a:cf:e5:f3:75:bd:3f:48:ba:d1:f9:d2:85:
e6:c6:84:40:b3:b6:3b:35:23:8d:a0:93:76:a3:5e:39:16:48:
bb:c3:eb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 14:39:45 2024 by rpki-client on console-fra.rpki-client.org