Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
File: kN_zHRsERNQgTeFYTQDd-WjQsBI.mft (raw, json)
Hash identifier: hcMufqJiQBH6Rd0syH4RnMKHCyMWeQVuzUdnvmbm3dw=
Subject key identifier: 9D:12:AF:FF:54:4A:D0:0B:21:DE:B0:F7:7A:B1:BD:96:F2:20:F0:43
Authority key identifier: 90:DF:F3:1D:1B:04:44:D4:20:4D:E1:58:4D:00:DD:F9:68:D0:B0:12
Certificate issuer: /CN=90dff31d1b0444d4204de1584d00ddf968d0b012
Certificate serial: 019352E2CE366CEAA240848828698F7E4303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
Manifest number: 07E0
Signing time: Fri 22 Nov 2024 08:00:15 +0000
Manifest this update: Fri 22 Nov 2024 08:00:15 +0000
Manifest next update: Sat 23 Nov 2024 08:00:15 +0000
Files and hashes: 1: btux7feZhJ1BqBuWh4_v4sk8smQ.roa (hash: CPqz+M1T47JJLNXi32iORwbH6OKUcww7HUT0G/bccUI=)
2: kN_zHRsERNQgTeFYTQDd-WjQsBI.crl (hash: K6d7cY6DdWe99W5hDn+012yNIuoCU0vFJjpCM/JTwyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:e2:ce:36:6c:ea:a2:40:84:88:28:69:8f:7e:43:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dff31d1b0444d4204de1584d00ddf968d0b012
Validity
Not Before: Nov 22 08:00:15 2024 GMT
Not After : Nov 23 08:00:15 2024 GMT
Subject: CN=9d12afff544ad00b21deb0f77ab1bd96f220f043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3e:f4:43:07:ad:39:5d:8f:4a:19:eb:2d:5d:
e1:cf:df:99:c5:0f:59:41:44:58:26:47:cd:99:26:
14:4f:56:f5:69:73:54:03:ab:0a:0d:ce:40:13:08:
69:8f:60:4d:52:ef:ea:bc:d9:5c:c5:30:24:80:a5:
ba:99:c8:1c:b6:92:92:98:bc:74:8d:56:49:e6:fb:
80:f0:06:d8:6d:57:14:07:86:ff:6f:48:f8:a6:9f:
23:1e:97:a6:46:b7:b6:2a:55:96:58:b1:89:c9:79:
05:2b:da:5c:58:12:91:08:72:5e:06:61:d4:10:2c:
cb:6f:0f:cd:67:0b:7d:e9:18:a3:0b:42:08:15:6d:
4c:6a:c4:94:89:fd:44:f2:d4:6d:ab:5c:df:11:11:
04:76:00:85:22:42:9b:f4:32:72:4f:3a:bf:b1:30:
31:f2:5a:02:cf:b2:e9:e1:be:f7:f4:0d:a6:c9:7b:
5f:02:09:ed:7a:85:98:68:c0:0c:76:21:51:96:c9:
96:2b:8b:db:db:36:da:33:e2:03:aa:af:b7:8c:ad:
69:02:f2:31:ba:b0:46:83:84:76:38:e2:4e:3b:bc:
ae:64:2e:e6:3c:8e:ca:b9:0c:96:26:55:62:b9:b3:
1f:ce:67:8f:e9:e8:95:52:09:8e:ef:b4:bf:78:d3:
b6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:12:AF:FF:54:4A:D0:0B:21:DE:B0:F7:7A:B1:BD:96:F2:20:F0:43
X509v3 Authority Key Identifier:
keyid:90:DF:F3:1D:1B:04:44:D4:20:4D:E1:58:4D:00:DD:F9:68:D0:B0:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:12:7f:5a:fc:d3:83:fa:fb:80:2b:3a:4e:38:3c:78:03:92:
00:32:05:40:9d:16:bc:00:74:bd:fc:0d:b1:9b:4e:a2:7d:6a:
bb:ed:26:fa:1f:53:c7:ee:98:bd:21:ed:a5:2f:f0:b5:1e:47:
e1:e8:f4:1b:64:8d:9a:1e:cb:00:96:7f:2e:ad:62:cf:45:fd:
6c:8a:54:ff:e9:69:c6:3a:3e:b1:a2:ba:a9:5d:63:d0:00:a5:
c5:f0:cb:06:44:63:d5:72:2d:12:b8:d2:e7:f6:7d:26:4b:0f:
6a:5d:c4:16:d7:77:11:dd:ac:f2:fa:b4:24:c1:02:78:ca:4b:
dd:eb:a8:73:d2:bc:d6:56:a6:5d:72:db:79:90:5d:e1:bd:cc:
34:7a:7f:3d:fa:74:96:57:84:50:9e:74:7c:85:49:73:a8:6d:
78:71:d7:99:d3:16:07:dd:a5:c2:b8:a3:08:c5:09:f0:ca:77:
3c:d1:42:43:61:e4:c5:75:ee:15:e2:36:10:c3:62:5e:c6:8f:
1b:21:b7:ca:f1:d6:c0:6a:9a:9b:d7:67:9a:23:b9:d6:0b:d0:
46:12:35:b4:51:e5:e0:95:57:a4:59:b3:9a:c9:88:b1:a0:66:
40:9a:45:f4:09:e0:78:83:82:52:38:72:b5:45:91:b3:75:bd:
25:82:3c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:42:53 2024 by rpki-client on console-fra.rpki-client.org