Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
File: 7_ktk2igmtNvelft-9CgXZ_UDh0.mft (raw, json)
Hash identifier: u5Ifqb9ZRcbu1hQW88O1vbQWoQxqN8PTT6pZO6YsQBg=
Subject key identifier: 57:0F:11:35:E7:C3:28:D4:32:11:90:F4:17:07:25:12:E9:3A:B1:89
Authority key identifier: EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D
Certificate issuer: /CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d
Certificate serial: 01936A7DB0C8BD7E038D6B85558695DBF76E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
Manifest number: 137C
Signing time: Tue 26 Nov 2024 22:00:42 +0000
Manifest this update: Tue 26 Nov 2024 22:00:42 +0000
Manifest next update: Wed 27 Nov 2024 22:00:42 +0000
Files and hashes: 1: 1-lz0nFUI1y0v8SBY_R-4Uq8-BY0.roa (hash: VG/JnKZElYNIGh89HVAngmxCEcurmKg7MzHOLkoTCUU=)
2: 7_ktk2igmtNvelft-9CgXZ_UDh0.crl (hash: 8XbW8mWVTDSvh7icFAPmTfpWOe2IC51fiUcA9JreTlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:7d:b0:c8:bd:7e:03:8d:6b:85:55:86:95:db:f7:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d
Validity
Not Before: Nov 26 22:00:42 2024 GMT
Not After : Nov 27 22:00:42 2024 GMT
Subject: CN=570f1135e7c328d4321190f417072512e93ab189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:ab:f8:99:d8:52:7f:f3:e7:96:bd:98:a9:
f2:7c:6e:36:36:df:58:d5:c0:ce:7f:48:c6:24:08:
2d:b3:78:02:8a:28:fd:84:bd:30:22:b2:8f:a0:cb:
ab:6a:30:29:6d:f8:e4:67:e8:55:ae:35:b5:57:16:
0e:e4:fa:31:97:19:d5:15:26:bc:e9:24:86:50:67:
3a:9e:13:4e:ba:40:a9:1e:dd:83:ef:44:bc:c4:0a:
d1:0e:ad:ac:6c:d9:84:4b:d4:6a:2d:6f:c5:e8:a5:
b7:d2:86:5b:5d:42:6e:25:74:e3:63:8d:02:b4:cf:
f9:fe:a8:0f:90:35:16:bf:1a:48:57:da:e8:d0:a0:
25:a9:c8:62:2e:8b:73:32:3a:66:cf:33:5c:79:c5:
31:84:90:d6:a8:d7:ed:86:a9:7c:f2:c1:c0:90:e9:
b3:71:d5:94:09:8d:3c:ca:5b:1d:ee:d6:e6:1d:96:
24:a5:56:fd:48:a3:22:7e:93:1f:33:38:31:8d:42:
68:eb:fa:fd:8b:e8:9a:11:e3:e7:c9:b6:97:2b:de:
ce:50:3f:84:e3:a9:c9:1b:50:40:39:62:3e:42:aa:
a9:c5:97:9f:8a:c9:fe:97:86:d3:f8:bb:a7:da:53:
38:4e:7c:53:8b:6b:06:33:82:09:5f:12:df:6b:96:
72:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0F:11:35:E7:C3:28:D4:32:11:90:F4:17:07:25:12:E9:3A:B1:89
X509v3 Authority Key Identifier:
keyid:EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:22:d2:27:55:a2:bf:b4:62:46:d8:f0:70:f2:83:ba:f2:98:
6a:58:b2:f3:4a:7f:58:78:11:5e:af:75:0b:e4:40:83:65:96:
2b:ad:44:2c:da:ac:0f:50:f9:7b:a8:48:da:29:f8:d7:a4:b4:
78:48:24:e1:21:18:c6:c7:0e:8f:c8:28:5b:63:81:e4:cb:57:
2c:ef:cb:82:90:7f:50:cf:a9:47:d1:84:5b:a6:52:0d:f3:a8:
ba:c5:f3:70:e2:1f:22:44:52:b9:20:18:be:95:37:33:40:9f:
11:6a:77:ad:ae:8d:2f:af:4c:c0:75:be:d7:94:12:fb:86:6f:
79:f1:cc:0f:e5:88:58:04:d3:a2:8a:c2:a1:07:ce:3d:3c:3e:
08:63:44:77:a4:bf:d2:42:98:96:c5:2c:8e:6c:6c:a5:20:6c:
32:84:8d:f6:72:41:60:fc:96:78:e4:f0:f7:8a:a9:d3:d7:ef:
a5:b2:83:3f:aa:cb:c9:03:2d:1a:ba:a3:e1:b9:75:8b:6c:d4:
6e:77:4c:5c:3c:e4:98:61:5e:77:b9:56:af:48:5d:11:5c:68:
7b:3a:49:73:67:47:91:0d:b4:42:a1:2b:f4:75:2c:de:dd:8a:
bb:9c:7a:2d:24:58:cb:72:5c:a7:ec:5d:fa:4f:ea:d5:86:e1:
24:21:cd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:43:33 2024 by rpki-client on console-fra.rpki-client.org