Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
File: knr31AfwRdvqgHcyZbBM5XTQt-M.mft (raw, json)
Hash identifier: fWra3zwy+UfAArlm35gpZEXTsag1XvKEty9PeWNziWo=
Subject key identifier: F8:EB:25:6C:A9:DB:FF:2A:79:71:80:A3:62:97:D5:E5:24:55:A7:2F
Authority key identifier: 92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
Certificate issuer: /CN=927af7d407f045dbea80773265b04ce574d0b7e3
Certificate serial: 019356894B5560C0A58D054731928B03D809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
Manifest number: 0869
Signing time: Sat 23 Nov 2024 01:00:58 +0000
Manifest this update: Sat 23 Nov 2024 01:00:58 +0000
Manifest next update: Sun 24 Nov 2024 01:00:58 +0000
Files and hashes: 1: DkMqqzGLdAXpp82IBTfnfQkklNk.roa (hash: Do+TvIuhd1goj/rklwc/6oUNhZiNNZZQSKhLk/HdyNY=)
2: knr31AfwRdvqgHcyZbBM5XTQt-M.crl (hash: OU1RdpIAf90KbFThTblHKJAKI14GwjeQSdPZlAQMk1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:4b:55:60:c0:a5:8d:05:47:31:92:8b:03:d8:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927af7d407f045dbea80773265b04ce574d0b7e3
Validity
Not Before: Nov 23 01:00:58 2024 GMT
Not After : Nov 24 01:00:58 2024 GMT
Subject: CN=f8eb256ca9dbff2a797180a36297d5e52455a72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:60:33:c7:a6:81:2f:f6:ac:d0:8b:c5:60:e7:
84:7a:f5:5f:ff:85:0f:de:8e:71:6f:19:cb:c2:ee:
49:90:dc:7b:67:35:2d:4f:58:c1:69:94:5c:e8:82:
a8:49:18:63:47:e4:1f:9b:71:33:d8:a2:1e:b6:36:
eb:5e:fc:5d:a9:e7:a0:cc:10:aa:b9:a7:10:83:1a:
47:31:d7:10:6b:83:c4:3e:10:d8:86:56:43:3c:3e:
28:72:6d:8c:3e:35:dc:97:16:ed:4d:bd:48:c6:09:
88:17:ef:5c:51:10:7a:ce:68:35:2f:00:46:80:61:
9d:6f:8d:40:77:5c:0a:d6:1e:8c:8c:67:20:c3:45:
d5:aa:dc:ae:ff:80:48:a9:66:c1:7f:eb:0c:f5:e1:
31:de:c7:0a:c9:21:0f:1b:cf:b9:39:a1:bf:43:86:
d5:cc:af:81:d4:24:e7:c3:78:a1:1c:a8:11:6b:d0:
30:0a:b6:6d:83:4f:c0:96:5e:8c:9a:7a:bd:af:f9:
aa:99:e4:00:12:18:ec:f6:4c:7b:5b:97:f8:41:91:
cc:4b:fe:7a:bb:3a:a6:b6:1f:36:87:9f:f7:10:da:
39:7e:c6:99:89:4b:0b:92:3f:89:c0:f0:f0:62:25:
b7:9d:59:e5:77:55:a5:68:26:b8:0c:b8:6f:90:69:
0c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EB:25:6C:A9:DB:FF:2A:79:71:80:A3:62:97:D5:E5:24:55:A7:2F
X509v3 Authority Key Identifier:
keyid:92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e8:6f:ea:8a:1d:b5:88:8e:b0:a9:c7:3e:54:6c:c6:a8:4b:
82:8b:48:9d:cc:82:28:72:a4:51:2a:6a:90:8c:ce:d6:40:ad:
a9:b4:cf:70:2a:e1:0e:4e:04:1e:e1:cf:43:f9:ed:f1:aa:78:
fb:32:28:55:57:e8:b9:88:45:0d:1d:4f:85:72:e5:bc:8a:dc:
3e:4c:2d:b6:67:6f:b3:df:a5:5e:9d:a9:57:60:86:d8:b5:d0:
53:3e:09:12:3b:d2:56:b0:13:9e:20:62:97:a2:1f:e6:d7:3c:
9f:4e:1d:28:71:16:2c:43:3f:c6:15:59:19:86:db:b0:d0:57:
51:19:1d:30:c9:6a:39:30:5e:6f:41:1e:48:0a:23:1c:49:63:
11:ee:56:7e:2c:37:0f:2e:0a:81:c1:53:98:23:0b:e9:92:4f:
63:aa:80:69:ee:3a:c7:e3:9f:49:59:95:38:46:1d:dd:9a:7b:
75:82:d2:e4:aa:5d:44:c6:8b:5b:00:7c:e9:ed:75:86:78:13:
2f:de:0a:ec:27:69:0d:a3:51:90:48:ff:49:4a:ae:ed:d3:ea:
09:2b:3e:b0:df:9d:52:69:88:aa:d5:c1:fd:53:14:d7:a5:10:
7d:16:85:3b:e3:d1:69:ce:07:b3:60:05:38:85:ec:a7:38:9d:
77:6a:ea:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:20:44 2024 by rpki-client on console-fra.rpki-client.org