Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
File: KRlGGERUmCRQC3zRxFHYJLpuVnc.mft (raw, json)
Hash identifier: 21zjaTyEZVDIdcK+ggFo6F09u0w4z6t/GlpDr1huy1g=
Subject key identifier: F1:64:62:6B:D3:72:1A:10:86:3F:00:B9:F2:9B:0D:0D:8D:E6:D7:08
Authority key identifier: 29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
Certificate issuer: /CN=2919461844549824500b7cd1c451d824ba6e5677
Certificate serial: 01935877138806FAA173E3C1A5315E836A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
Manifest number: 0DFC
Signing time: Sat 23 Nov 2024 10:00:18 +0000
Manifest this update: Sat 23 Nov 2024 10:00:18 +0000
Manifest next update: Sun 24 Nov 2024 10:00:18 +0000
Files and hashes: 1: 34WalWOVPGCQ66ivekyx5sIFFjw.roa (hash: E+wvJKOwouD+rxlL/RkmmCpbfR2Q3yE/x6lkoJz7c8g=)
2: KRlGGERUmCRQC3zRxFHYJLpuVnc.crl (hash: DAaWtw4fCbIw0wjPf5PZ8vGW7qJfm2hRaTggkUL1EIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:13:88:06:fa:a1:73:e3:c1:a5:31:5e:83:6a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2919461844549824500b7cd1c451d824ba6e5677
Validity
Not Before: Nov 23 10:00:18 2024 GMT
Not After : Nov 24 10:00:18 2024 GMT
Subject: CN=f164626bd3721a10863f00b9f29b0d0d8de6d708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e4:50:c9:49:b7:17:fa:17:7d:10:da:65:7f:
1d:e7:bb:0a:c5:d5:3d:35:71:7f:da:60:5d:90:55:
0b:61:3f:2c:af:eb:9c:3c:c1:f7:4e:16:8f:83:d7:
04:ca:5a:7b:e0:d3:ec:2b:8e:1b:c9:de:a8:fe:ad:
11:39:e0:f1:2a:61:e1:09:5f:6a:7a:de:0a:ff:54:
2f:58:c7:5f:a0:7a:e6:78:41:35:0f:ab:82:fe:a0:
0f:09:01:c9:6b:47:15:1e:e7:a3:c3:38:7f:76:b8:
77:87:a9:2a:86:5d:69:11:43:70:df:8f:61:1d:d9:
69:ec:70:ea:eb:7e:d7:22:bc:8f:6d:5d:bd:4e:90:
73:9f:25:ba:89:69:64:bd:bd:c6:5b:ad:c5:d2:27:
27:74:31:cc:9b:c1:8e:3e:fd:df:5f:74:fd:9b:2a:
83:3f:e0:37:ca:c8:90:30:80:59:da:fb:5f:88:3d:
ce:34:1d:a1:34:bb:42:42:bd:8f:78:26:18:90:84:
69:a2:22:10:74:f8:62:9e:dd:25:7d:da:df:49:bc:
b8:46:cd:7f:cb:5d:60:43:5e:e6:35:2c:dc:d8:48:
d4:22:49:15:69:3c:07:42:eb:4a:31:f4:1a:60:a5:
a0:5b:48:69:6e:5d:e8:1a:48:2d:aa:f0:c8:7f:9f:
ca:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:64:62:6B:D3:72:1A:10:86:3F:00:B9:F2:9B:0D:0D:8D:E6:D7:08
X509v3 Authority Key Identifier:
keyid:29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:94:f3:cf:19:85:a9:71:02:f0:77:13:22:99:ea:f6:a8:c4:
40:4a:ab:33:3d:87:33:96:23:91:fd:48:fe:67:e5:d3:66:32:
49:88:ac:9a:82:e8:26:61:93:f7:ba:b6:b3:56:9f:6b:2d:5a:
9b:6a:e7:b3:8c:90:13:77:56:6d:7b:0c:e8:9a:bc:77:ec:48:
2a:80:a8:93:6e:f7:91:9c:e4:a1:9d:37:e3:6b:73:30:70:a8:
dd:34:61:93:13:58:37:66:4b:4f:8b:08:99:b6:22:62:02:35:
03:45:f1:93:9c:11:cd:a1:22:2a:ad:54:66:06:2d:dc:8d:6a:
77:51:6e:20:ea:b3:a8:69:3f:e4:c7:0f:e7:e5:1d:4a:ca:e3:
83:27:a6:06:99:9e:67:7d:cc:c1:44:26:6f:1f:57:75:47:81:
21:46:7e:7c:9d:7f:04:ae:82:8d:4b:53:ce:21:f9:05:fe:d3:
bc:ad:8f:8a:20:e8:4a:aa:08:5e:52:25:73:76:98:f7:c5:7c:
2f:ea:a5:0f:34:ef:a8:84:a8:00:99:3f:50:e6:8d:1c:2e:13:
12:d3:95:80:07:3a:87:f9:4a:c3:7e:46:05:5c:71:a5:d5:62:
eb:e9:59:9c:b7:11:1f:76:4a:ee:f2:46:d2:66:88:ec:31:cc:
81:5a:f3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:09:06 2024 by rpki-client on console-ams.rpki-client.org