Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
File: KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft (raw, json)
Hash identifier: jF4GHhoZasiahU+K8M1Sp1ZY2Wz5O8Ihlx3Z8aDB+TQ=
Subject key identifier: 1C:9F:99:51:8F:66:FF:E9:07:E6:ED:E7:52:97:B0:21:49:83:B0:5B
Authority key identifier: 28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
Certificate issuer: /CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Certificate serial: 019352E2ED6F0E16C7B75E1D0AF861B72A18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
Manifest number: 014A
Signing time: Fri 22 Nov 2024 08:00:23 +0000
Manifest this update: Fri 22 Nov 2024 08:00:23 +0000
Manifest next update: Sat 23 Nov 2024 08:00:23 +0000
Files and hashes: 1: KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl (hash: BKPgJ2p8qpum0p+h+LFh3ba3gVcj9pNLf/0ACmMuI5w=)
2: z0m6jBJrCvhOx3UUIsLn0OZ62FE.roa (hash: bzXACtdIj5XPh90avBGO/MVCxvr97eivXhwo1eDAxhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:e2:ed:6f:0e:16:c7:b7:5e:1d:0a:f8:61:b7:2a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Validity
Not Before: Nov 22 08:00:23 2024 GMT
Not After : Nov 23 08:00:23 2024 GMT
Subject: CN=1c9f99518f66ffe907e6ede75297b0214983b05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:52:1d:f7:e7:d6:3e:2d:56:56:82:97:ce:98:
bc:79:3f:f9:eb:85:81:25:a2:1c:75:90:ab:81:04:
aa:38:5b:0d:ff:f0:cb:0d:f5:91:19:50:24:91:ba:
af:76:d4:66:5f:cb:1f:3d:ae:9c:59:a2:7c:71:2b:
84:e9:87:8c:ed:02:d7:01:d0:a2:ec:ce:cb:90:b2:
7f:09:e0:44:91:e5:f9:ce:17:07:05:2e:04:24:ab:
2b:61:6f:94:9a:69:b0:ca:aa:b7:1f:82:bc:51:80:
e0:c7:28:8d:c2:5c:25:a8:6c:c2:99:2a:14:6b:98:
be:07:da:78:52:fc:47:c9:43:59:3e:2e:5a:6f:f4:
9b:51:fe:74:88:be:22:a7:8d:e1:09:08:bf:25:3d:
3c:e7:21:9b:69:66:cc:5a:32:8a:db:c4:11:ce:5d:
c0:2b:e1:31:a0:be:9b:62:1e:96:37:99:17:1e:07:
de:23:0a:e7:e6:de:34:13:1c:6c:40:57:c8:51:54:
e9:14:37:5b:78:6a:46:9b:51:c2:3f:53:2f:f5:62:
c8:8e:8f:38:c1:32:d7:38:55:ce:18:90:df:a9:2e:
3d:88:62:94:4b:09:fc:30:d6:ff:f9:a8:d0:48:42:
a6:91:3b:ae:27:51:dd:6e:07:2a:39:6d:fb:3a:4a:
cd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9F:99:51:8F:66:FF:E9:07:E6:ED:E7:52:97:B0:21:49:83:B0:5B
X509v3 Authority Key Identifier:
keyid:28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:aa:a4:44:88:e1:8a:ac:76:04:2c:65:b1:9f:a7:9a:54:e3:
dd:01:42:d8:30:f5:a5:48:07:8b:68:1d:23:c4:d4:1e:5f:d2:
52:8d:10:20:5a:33:5b:75:54:7c:c7:5d:8b:17:60:f2:ea:a1:
b0:57:17:b0:8a:5a:66:fe:f2:43:bb:83:ec:7d:bd:d8:07:5c:
e1:7d:a5:f1:f2:c2:b8:58:ed:cb:21:4c:a8:9a:f6:d9:44:d5:
d7:b4:3f:d7:03:4d:13:ff:f8:f4:5d:f6:be:1c:9b:d3:7c:bc:
d7:57:2c:3f:28:5a:e7:dd:59:c7:ca:c7:e3:85:00:a9:e0:98:
ea:48:5a:9d:ae:fe:84:29:42:7d:84:e4:ed:cb:d0:a6:f3:b2:
d6:e9:b2:ff:81:d3:1d:12:a6:5b:ba:f4:10:41:ae:16:fe:9c:
9c:09:7f:1a:2e:3b:69:f8:0a:cf:a8:99:62:c7:11:04:ad:07:
1d:cc:e9:b5:f1:65:4c:b1:11:11:e0:c7:17:36:c3:00:3e:47:
c5:15:46:ea:b0:01:8b:fb:f7:2c:df:25:93:20:bb:c5:96:de:
de:35:b8:1c:aa:c2:c7:02:67:03:2f:db:a9:89:bd:bd:3a:20:
21:92:96:ea:47:c8:57:a8:38:db:71:82:08:fa:47:44:73:45:
b9:e9:54:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:49:46 2024 by rpki-client on console-ams.rpki-client.org