Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
File: KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft (raw, json)
Hash identifier: aA3mfA+RCef7bGki8kAAU0nG8s0HQfywIWwIpsR3d80=
Subject key identifier: 32:0E:23:0D:F9:0E:DB:A7:37:12:C6:03:56:32:E7:1D:DD:34:38:64
Authority key identifier: 28:20:8B:A4:E7:5E:27:B0:46:F9:E5:27:82:21:B4:47:78:B6:AE:8D
Certificate issuer: /CN=28208ba4e75e27b046f9e5278221b44778b6ae8d
Certificate serial: 01935764AEA3DC3FF7A59BD2B2760CCBBC23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
Manifest number: 1356
Signing time: Sat 23 Nov 2024 05:00:36 +0000
Manifest this update: Sat 23 Nov 2024 05:00:36 +0000
Manifest next update: Sun 24 Nov 2024 05:00:36 +0000
Files and hashes: 1: 9ZejYcr2DvwSq2bAceL1F3gIkSY.roa (hash: 0N4WVxZZWC50jr7bHkPwm26ctvQhCuMBfdgFnYW+B6A=)
2: KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl (hash: p3fGyNEMMxwB4E2nG29bERW4erekYePSUmvnwu+IJaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:ae:a3:dc:3f:f7:a5:9b:d2:b2:76:0c:cb:bc:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28208ba4e75e27b046f9e5278221b44778b6ae8d
Validity
Not Before: Nov 23 05:00:36 2024 GMT
Not After : Nov 24 05:00:36 2024 GMT
Subject: CN=320e230df90edba73712c6035632e71ddd343864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a9:58:c7:20:c8:6e:ee:32:6c:be:10:d3:0c:
e5:8f:b4:60:f3:a9:51:94:7c:f6:8d:a8:27:78:cd:
35:18:b9:af:ac:2a:ac:99:bd:39:44:5f:44:f1:ae:
0a:0f:0e:c8:b2:76:f9:e5:ad:b3:a6:45:3d:75:03:
f1:34:6d:3f:fb:21:0d:72:4c:9b:e1:96:cb:20:68:
11:e1:dd:82:09:05:c7:91:8a:81:d5:4c:d0:d5:77:
a6:14:35:33:bf:75:bd:50:e6:5e:f6:1d:3e:86:e0:
97:17:61:1d:80:c7:e8:64:fe:00:5f:d0:56:5c:6e:
0a:91:4f:ca:92:cc:ad:35:12:0e:e5:eb:f8:56:54:
78:1b:3b:84:7c:b3:50:6e:00:a3:e0:08:52:14:53:
17:f3:b1:34:a5:30:92:16:86:dc:27:fa:d5:23:3d:
d1:f9:28:44:b0:92:79:3e:1a:90:10:3a:e8:5b:e3:
09:8c:50:a5:f0:bf:3f:6c:a0:86:e4:27:c2:e5:4a:
d3:7c:2b:f2:1e:96:ad:a0:6f:f6:29:84:c1:ca:97:
6d:5b:3d:03:f4:78:40:cd:42:de:52:07:e0:7a:3e:
eb:39:87:50:82:97:64:8c:bb:6f:65:9c:19:58:5d:
5a:3a:71:dd:89:e4:34:f7:d0:b6:68:4b:dc:fe:17:
d5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0E:23:0D:F9:0E:DB:A7:37:12:C6:03:56:32:E7:1D:DD:34:38:64
X509v3 Authority Key Identifier:
keyid:28:20:8B:A4:E7:5E:27:B0:46:F9:E5:27:82:21:B4:47:78:B6:AE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:96:fc:ca:e3:6d:b4:34:3c:6d:21:67:65:6d:42:63:ba:f3:
65:ae:2d:28:d8:15:28:64:9d:0e:4f:22:f2:44:0e:da:3d:d6:
51:a6:bf:8e:1c:74:58:e4:e4:44:d9:ca:00:24:97:c7:9c:11:
a1:22:1f:62:d4:bb:b3:c8:e8:e0:39:cc:65:39:82:0e:dc:06:
e7:63:e0:72:a3:c6:2b:a1:56:6a:b8:9a:84:21:22:1e:9b:88:
66:9d:1c:c7:d5:ac:d1:f6:2a:aa:f4:1f:3e:03:bd:cd:2a:bb:
fd:fc:27:a6:ab:a9:a1:66:99:03:df:1a:07:4e:20:5d:b1:de:
35:d0:0b:8b:3c:b1:3a:28:50:e9:da:3e:73:56:5c:b0:83:44:
db:15:4f:ac:48:66:32:dc:d2:be:80:92:9f:08:be:38:fa:d0:
72:6a:d6:b5:c1:40:5c:fb:e4:ca:b2:ee:35:11:b9:7f:b2:7c:
62:29:c0:ca:97:18:33:a3:e3:10:a2:4c:d9:e5:f0:8e:ee:18:
e3:7b:5f:56:74:71:7f:8a:39:ae:c9:22:b7:f6:2f:4f:2a:fc:
25:0e:07:1c:28:8c:31:20:12:65:97:cb:cf:36:76:cd:b4:a2:
5a:7d:dc:0d:ab:e3:90:db:84:36:ed:bb:5c:73:13:94:ad:db:
30:a9:a1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:02 2024 by rpki-client on console-fra.rpki-client.org