Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
File: KKye3SQL_EUgzgvJskWWPSTiv-I.mft (raw, json)
Hash identifier: dFxBkhdntIJ9hVU45VqE1ZZDJjFvB9Rshl3W4+h75jo=
Subject key identifier: 91:1F:56:5C:8F:00:5D:74:95:C8:3F:E9:B1:06:76:47:8E:77:B5:42
Authority key identifier: 28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
Certificate issuer: /CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Certificate serial: 01935508ACEB806303BF08A3FA0135F92304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
Manifest number: 10C2
Signing time: Fri 22 Nov 2024 18:00:52 +0000
Manifest this update: Fri 22 Nov 2024 18:00:52 +0000
Manifest next update: Sat 23 Nov 2024 18:00:52 +0000
Files and hashes: 1: J-j-1_Q3-AgdH5_2mblGepigdE4.roa (hash: l9qxua7fcMxy+Mg6som3dhxYgWapLMZHlacNbsqj3X8=)
2: KKye3SQL_EUgzgvJskWWPSTiv-I.crl (hash: 8HfHayXFYGpZ8jYLjIfTVfYGi+1aKtKyc6wnnyYCZgo=)
3: oU28c1s-ycsQLCFqJgR6MeIP1zM.roa (hash: 7c/AJUIOTJ0l8YYqt7pZwb0ES63c+/e50yfRYmJkgJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:08:ac:eb:80:63:03:bf:08:a3:fa:01:35:f9:23:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Validity
Not Before: Nov 22 18:00:52 2024 GMT
Not After : Nov 23 18:00:52 2024 GMT
Subject: CN=911f565c8f005d7495c83fe9b10676478e77b542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c5:08:0f:df:98:47:04:11:36:85:17:22:96:
50:00:5e:00:c6:73:f3:9d:7f:c8:4f:90:06:c4:3d:
ce:ea:9c:e6:e6:c1:4d:31:6b:6d:2d:1a:bf:09:a5:
b7:68:8b:37:a8:b7:d3:aa:8a:47:1b:6d:df:17:5e:
3a:df:c9:78:55:8a:a1:0b:18:16:1a:26:33:ef:d6:
1c:71:9e:9b:75:e4:a5:1f:cb:8d:f6:20:e8:2f:71:
8a:3b:44:ec:e1:fc:36:e1:58:07:54:62:46:83:15:
a3:05:39:29:2c:07:6a:8b:43:1e:04:00:87:63:24:
bf:f8:6c:aa:4b:c5:81:8c:c9:5d:bf:8e:4f:8c:48:
ad:0e:91:00:fc:fc:a1:df:cf:d7:53:b2:25:55:ae:
23:ab:4d:45:f1:fe:87:90:5d:12:0a:05:8d:64:c3:
21:08:14:49:e7:cc:a5:c6:01:6b:dc:80:7c:ef:e2:
90:74:f0:57:cc:d9:0b:58:05:bc:28:27:fa:02:39:
a4:17:84:5e:14:b6:64:ff:b5:c4:c2:ae:b5:23:94:
e2:eb:8f:f1:88:c3:8a:8d:5c:3d:0a:ee:ff:5c:17:
93:04:15:e1:d9:30:20:a9:70:3c:1d:ee:5d:84:77:
d0:3a:1d:97:4f:1b:c0:3d:14:8e:61:49:4f:cd:bc:
f2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1F:56:5C:8F:00:5D:74:95:C8:3F:E9:B1:06:76:47:8E:77:B5:42
X509v3 Authority Key Identifier:
keyid:28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:78:f9:68:53:6a:85:78:14:14:6a:fa:1c:f9:c5:03:70:f7:
0e:54:02:81:7e:3f:d5:11:8b:82:76:5d:2c:ed:58:4f:fb:b4:
50:6b:6a:dd:81:91:86:17:e5:9b:a1:2c:bf:98:9f:59:c9:5b:
24:31:b0:ad:cc:2b:0d:3e:86:d2:2c:0e:6b:ba:5c:e8:c4:78:
2e:bb:3b:54:e4:77:d1:dd:2e:fd:92:bf:cd:2c:80:7d:c6:24:
51:b2:c0:12:c0:60:7b:8a:a7:2b:51:f3:8d:e2:26:b9:aa:75:
04:d1:96:98:e1:3b:aa:f5:0d:c0:52:bb:14:5a:cc:cf:f5:4d:
d5:bd:41:70:80:58:3c:6c:c1:93:a2:fe:4f:0c:dc:2e:4c:ef:
3f:26:78:9c:86:94:50:d2:28:cc:33:b0:6c:80:1f:4d:54:8f:
42:e6:38:a6:ff:57:5a:52:e6:91:3f:44:f5:9e:5b:52:d6:79:
bc:a1:e0:a7:37:44:d5:22:16:90:27:2f:d3:c7:0d:b3:04:55:
7f:30:f6:f4:d2:71:a4:8b:c3:7f:e6:37:62:58:a4:8e:35:72:
44:6a:45:43:4b:3b:cd:e7:6c:6f:7d:8e:98:7f:a5:02:72:a8:
7f:bd:e5:86:85:c1:69:7f:61:89:b0:26:4f:40:d7:e3:aa:2a:
f1:3a:7a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:22:56 2024 by rpki-client on console-fra.rpki-client.org