Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
File: KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft (raw, json)
Hash identifier: dJ3o90DgvVT3um+yJ2baRYguzcBA49KKAUDmezauLSo=
Subject key identifier: B1:C0:7D:2D:0F:2E:C8:90:7E:0B:2E:CB:64:D8:A6:C4:95:4A:A2:E2
Authority key identifier: 29:08:1D:68:BD:DE:A8:BE:BF:26:E6:18:21:97:85:94:F2:23:BC:BE
Certificate issuer: /CN=29081d68bddea8bebf26e61821978594f223bcbe
Certificate serial: 01936A4692D8A10D50220D3C07B07518990E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
Manifest number: 057B
Signing time: Tue 26 Nov 2024 21:00:30 +0000
Manifest this update: Tue 26 Nov 2024 21:00:30 +0000
Manifest next update: Wed 27 Nov 2024 21:00:30 +0000
Files and hashes: 1: KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl (hash: t1C6ZJ81V7bteAy+qPJw0pOJTXi0abhPmfkKSY4ycXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:46:92:d8:a1:0d:50:22:0d:3c:07:b0:75:18:99:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29081d68bddea8bebf26e61821978594f223bcbe
Validity
Not Before: Nov 26 21:00:30 2024 GMT
Not After : Nov 27 21:00:30 2024 GMT
Subject: CN=b1c07d2d0f2ec8907e0b2ecb64d8a6c4954aa2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:25:c4:21:65:4b:ab:95:94:fc:1b:f1:33:33:
f1:56:87:ad:22:c8:ae:12:18:41:23:ef:4e:ec:70:
60:f9:d5:c0:20:41:fa:64:a4:a9:bc:47:08:bc:ee:
59:c9:e2:6d:8b:87:48:80:3b:52:aa:55:19:1f:97:
73:7b:0a:fb:5c:29:56:cc:b4:d8:bd:b7:98:ba:5f:
c5:e2:66:a2:a9:49:71:71:ff:d8:db:1d:5d:ea:60:
03:ef:b0:a8:03:36:38:8e:85:50:e3:ef:7c:9b:8d:
d3:29:1e:49:f8:b3:b0:ab:9e:b9:78:00:35:a4:46:
60:59:51:4c:4e:c9:7c:84:05:94:58:5e:42:d6:4c:
96:f5:91:76:87:16:2d:a8:d9:f5:67:49:a7:27:31:
85:0c:2b:f8:6a:29:3f:98:d5:27:74:a8:81:e1:67:
5e:13:b6:1a:26:59:84:6b:03:85:5e:b2:f6:d2:a2:
2a:eb:60:3d:72:a9:af:62:0e:8c:54:9b:d8:bd:fc:
d3:7e:d5:aa:76:14:2a:d2:4e:ca:2c:87:ba:37:0a:
14:52:47:c8:f6:33:1a:8f:6d:8e:77:10:c6:98:00:
ef:6f:c4:8c:ab:0e:95:8a:f4:59:f6:cf:1f:c3:12:
1b:d4:12:4f:b8:99:00:59:31:09:56:78:ab:6d:56:
38:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C0:7D:2D:0F:2E:C8:90:7E:0B:2E:CB:64:D8:A6:C4:95:4A:A2:E2
X509v3 Authority Key Identifier:
keyid:29:08:1D:68:BD:DE:A8:BE:BF:26:E6:18:21:97:85:94:F2:23:BC:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d9:45:cb:5c:9c:87:28:42:99:c4:11:74:69:f8:b8:a1:96:
a9:df:02:ef:c3:db:6c:39:52:b8:7a:f0:58:05:e0:cd:8e:8f:
89:e7:c4:4c:3b:ae:bc:d2:12:c5:d7:a9:e7:70:e3:2b:a0:fd:
c4:da:f5:b4:8b:cf:12:80:6d:4d:25:b0:7b:98:83:b7:73:b4:
13:33:77:d3:3e:8e:a5:4c:79:e7:aa:f9:2b:30:61:e8:bb:b2:
04:1d:b0:a8:12:e1:45:1f:96:d0:4e:d7:00:0e:44:3b:06:e3:
42:c6:c0:65:15:19:bd:17:e2:cd:88:67:15:dc:5d:53:b3:51:
71:11:90:3d:27:47:0f:16:46:c4:14:d8:1d:71:50:c2:09:25:
84:34:16:f1:76:ae:23:0a:de:f3:03:ca:57:4b:5b:62:39:8d:
6d:fc:4a:d7:cc:22:56:09:50:77:7d:ed:fa:b8:84:39:12:82:
2d:91:c8:d6:ec:cb:dd:bd:76:f4:42:9e:54:97:61:50:79:72:
66:1d:e0:0f:92:8f:19:bc:da:1e:a3:c5:0d:7f:c8:86:03:85:
5f:97:36:33:7d:e5:6a:fe:75:16:7f:61:da:b7:de:73:49:b7:
2c:e4:01:a7:19:39:6c:c6:3a:b3:51:84:a7:ff:18:11:5e:d7:
6d:2f:b7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:42:15 2024 by rpki-client on console-fra.rpki-client.org