Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft
File: KpTH34VXtlNEfD4G-0s3LVEgoiI.mft (raw, json)
Hash identifier: BgyRbITWJZhPPHxAhowLqbI0lPY0BLtcfbI12AXpb0s=
Subject key identifier: 44:4B:08:AA:92:EB:7E:E7:7D:8C:BB:FA:E4:9A:9D:7E:02:BF:8C:58
Authority key identifier: 2A:94:C7:DF:85:57:B6:53:44:7C:3E:06:FB:4B:37:2D:51:20:A2:22
Certificate issuer: /CN=2a94c7df8557b653447c3e06fb4b372d5120a222
Certificate serial: 019369D9495255AD954A4214A339CC5455DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KpTH34VXtlNEfD4G-0s3LVEgoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft
Manifest number: 1378
Signing time: Tue 26 Nov 2024 19:01:07 +0000
Manifest this update: Tue 26 Nov 2024 19:01:07 +0000
Manifest next update: Wed 27 Nov 2024 19:01:07 +0000
Files and hashes: 1: KpTH34VXtlNEfD4G-0s3LVEgoiI.crl (hash: /MTgfRXSiHSqVisCwvg+y5U8NiqQsWuRVKjlPeCVsmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KpTH34VXtlNEfD4G-0s3LVEgoiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d9:49:52:55:ad:95:4a:42:14:a3:39:cc:54:55:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94c7df8557b653447c3e06fb4b372d5120a222
Validity
Not Before: Nov 26 19:01:07 2024 GMT
Not After : Nov 27 19:01:07 2024 GMT
Subject: CN=444b08aa92eb7ee77d8cbbfae49a9d7e02bf8c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9d:60:27:59:bb:2c:a2:54:30:d4:0d:5a:28:
dc:f2:72:d4:ae:af:d7:9a:52:70:e4:2c:05:61:cd:
73:1e:7f:56:90:0f:85:23:7b:56:1a:44:a4:0e:06:
1a:d2:6e:6b:ff:48:7b:93:50:92:38:33:8e:59:d6:
cf:73:eb:cd:8e:fe:7d:80:ac:48:f1:b5:fc:e8:34:
22:d2:f4:64:6e:bc:bc:df:40:28:ca:6a:ec:80:24:
f3:d6:98:f1:d7:44:93:bc:a6:af:97:07:01:56:78:
b1:18:1b:e4:7f:f2:0e:26:41:4e:b7:ea:5c:c9:ff:
bf:24:6a:9d:c6:5a:82:47:b0:e4:3a:2e:10:f9:da:
d3:5c:ac:e2:fc:81:b2:2c:39:39:2f:59:43:54:3a:
24:5b:ee:2a:c9:16:7b:1a:a9:67:8c:80:f1:fb:83:
ca:fd:a2:6e:00:20:ce:9e:80:b5:a9:9a:5d:d1:d2:
a5:3d:cf:23:d4:8c:a4:73:13:00:3b:3a:33:7b:d2:
d7:ab:14:77:92:56:0f:77:46:83:66:9f:8d:dd:f1:
16:ee:4c:c4:4e:7e:b5:f7:bb:92:fe:4f:13:ce:8c:
37:38:0e:b5:19:dc:ea:de:39:6b:fa:66:85:f0:e1:
38:e3:8a:e9:aa:01:c5:22:7f:51:1f:8e:f6:98:bb:
a6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4B:08:AA:92:EB:7E:E7:7D:8C:BB:FA:E4:9A:9D:7E:02:BF:8C:58
X509v3 Authority Key Identifier:
keyid:2A:94:C7:DF:85:57:B6:53:44:7C:3E:06:FB:4B:37:2D:51:20:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpTH34VXtlNEfD4G-0s3LVEgoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:65:ee:95:29:ab:14:41:52:2d:99:75:56:56:0a:3c:97:c9:
ad:8e:6e:99:54:7f:40:7c:d7:da:31:89:d0:22:d1:9d:59:76:
31:58:17:b1:8f:1b:03:ac:5e:83:ec:f7:43:b7:2a:6e:79:29:
ee:cc:5c:88:ac:cf:5a:12:6f:cc:f4:fe:4b:f5:16:9c:4f:46:
64:86:a8:1f:7a:98:19:a0:4f:bc:a8:d1:f5:3d:20:f4:a3:a1:
ca:2e:d9:6a:25:57:62:3e:48:d8:18:1d:ac:53:b7:05:5a:72:
ae:5a:01:32:b9:89:03:bf:da:74:f7:98:d7:7f:f4:19:ca:b6:
bd:b4:8e:84:bb:02:33:d9:75:a0:1d:55:99:39:63:e9:1a:75:
92:b3:ab:92:ee:4e:7f:3c:33:e6:35:4c:49:d5:27:d2:cf:28:
0b:3d:35:86:11:6d:f2:8e:9f:2d:3e:15:3c:76:17:8b:a0:6a:
24:44:19:19:97:5b:47:18:6d:d7:d5:b8:a4:b6:29:86:9d:8b:
dc:06:bb:89:e6:4c:d1:69:77:96:8c:7f:12:9a:74:57:94:b0:
72:22:f4:75:38:05:3f:18:6b:dc:01:cf:c0:b9:fe:75:ca:b9:
01:4a:d8:35:d2:51:99:b1:e1:8f:40:45:39:ac:d8:cd:0c:2b:
2e:67:dd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:19:07 2024 by rpki-client on console-ams.rpki-client.org