Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft
File: KpTH34VXtlNEfD4G-0s3LVEgoiI.mft (raw, json)
Hash identifier: RUfh31Y2xVBaSi4YX1IPdVNi0jK8kjvv2pLX+ilS+F4=
Subject key identifier: 9D:CF:5F:49:19:32:1C:4A:3B:95:02:46:B8:ED:F0:CE:74:0C:7F:87
Authority key identifier: 2A:94:C7:DF:85:57:B6:53:44:7C:3E:06:FB:4B:37:2D:51:20:A2:22
Certificate issuer: /CN=2a94c7df8557b653447c3e06fb4b372d5120a222
Certificate serial: 018F8937DD73DC5DD332D1140E489215AA46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KpTH34VXtlNEfD4G-0s3LVEgoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft
Manifest number: 1176
Signing time: Sat 18 May 2024 01:01:30 +0000
Manifest this update: Sat 18 May 2024 01:01:30 +0000
Manifest next update: Sun 19 May 2024 01:01:30 +0000
Files and hashes: 1: KpTH34VXtlNEfD4G-0s3LVEgoiI.crl (hash: OJbAkLaELjvbqizzBxoHoDwyLLCnRgKQvYC5qhAUBL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KpTH34VXtlNEfD4G-0s3LVEgoiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:89:37:dd:73:dc:5d:d3:32:d1:14:0e:48:92:15:aa:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94c7df8557b653447c3e06fb4b372d5120a222
Validity
Not Before: May 18 01:01:30 2024 GMT
Not After : May 19 01:01:30 2024 GMT
Subject: CN=9dcf5f4919321c4a3b950246b8edf0ce740c7f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e7:91:71:49:f7:84:14:58:a4:13:ac:84:f3:
92:e0:2f:c1:83:5d:e0:cd:91:f0:5a:ea:a5:70:70:
f8:d2:a4:44:9b:21:fe:aa:19:bf:d2:a3:06:aa:91:
03:5c:50:04:d5:2d:59:76:cf:f5:20:83:71:9e:a1:
13:75:5c:aa:9d:dc:a0:9e:5f:38:82:8f:49:95:43:
09:db:a4:83:6c:40:dc:cb:56:9e:c1:43:02:6a:da:
60:59:b9:9b:b2:1c:73:64:71:40:48:72:ce:0e:4d:
0d:e3:98:f0:0e:5d:de:ad:5a:44:75:65:8a:31:9a:
1d:59:04:c7:89:ca:99:b1:b4:4a:07:53:4b:7f:ce:
4e:79:ca:ff:a2:eb:d9:e0:ac:3a:9e:68:ea:63:57:
8b:8a:10:c5:77:02:9f:f0:66:71:d7:2b:06:44:06:
00:2c:9d:f8:b1:11:6b:03:fd:4f:1f:cf:e7:65:b1:
6d:f7:98:34:3c:22:de:d3:d8:0c:ab:46:de:da:fe:
e5:ce:25:b8:d9:95:05:82:c5:2a:29:e8:c3:83:a7:
e7:90:ed:bd:73:2d:ff:f7:3e:40:6f:ab:dc:4d:47:
28:d7:03:b5:46:bc:86:5d:be:c9:7e:9e:a6:19:f6:
d5:41:e0:47:e3:73:6e:7e:92:7c:b4:92:7c:fd:a8:
ee:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CF:5F:49:19:32:1C:4A:3B:95:02:46:B8:ED:F0:CE:74:0C:7F:87
X509v3 Authority Key Identifier:
keyid:2A:94:C7:DF:85:57:B6:53:44:7C:3E:06:FB:4B:37:2D:51:20:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpTH34VXtlNEfD4G-0s3LVEgoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ff:f5:bb:4b:49:8f:1b:ac:4e:b6:bb:f8:63:fd:56:84:18:
21:17:95:a5:67:66:f1:37:5e:ca:4f:4d:85:bb:c5:44:7f:fa:
6d:93:28:ad:e0:6c:09:47:e3:30:0c:bd:2a:6e:6b:dc:f3:16:
d6:23:03:e6:58:52:c7:75:e8:e1:c5:21:51:23:b3:84:e8:7b:
14:8d:96:7c:05:fa:7a:15:63:1f:b3:7c:6f:82:16:b4:28:83:
74:b2:04:c4:9e:a2:fe:61:ad:e4:62:9b:eb:9f:d4:0f:c8:bb:
76:d6:9f:5d:24:5d:50:ac:95:7a:f0:01:9d:67:84:7e:10:f6:
2b:f2:45:a9:50:53:1f:cf:46:67:2e:ba:6c:7f:14:27:10:2c:
50:7f:3a:e6:51:37:8e:77:d1:23:23:23:8d:8f:1d:91:69:5a:
cb:65:4c:16:6f:ba:7e:f1:96:5b:1a:f4:a0:9b:50:4d:97:28:
65:1b:73:2b:bc:8a:a9:6a:d2:17:8a:b9:8b:55:73:6b:97:77:
f1:a5:23:10:b4:db:69:ad:44:43:e9:3f:6a:30:1e:6e:41:91:
5e:c1:b5:f4:4c:4c:b5:f7:91:55:79:ab:b3:4b:b0:70:71:e3:
b1:20:0c:9f:05:5f:01:9e:1f:6e:6f:95:bf:3b:63:9f:0e:82:
2c:5e:4b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:17:52 2024 by rpki-client on console-ams.rpki-client.org