Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
File: kRbcv3jGLVHakHag0Gra027jt1U.mft (raw, json)
Hash identifier: kbQbu3hAEeA0Dt8vTksWHcKHOpZqHryFAUzZlGDb4Bk=
Subject key identifier: B0:48:FC:E7:F0:7A:F9:0C:51:A0:75:61:18:C5:71:F7:F5:05:D0:B2
Authority key identifier: 91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
Certificate issuer: /CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
Certificate serial: 01935764A65A872E666886390D71FAABEB76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 05:00:34 +0000
Manifest this update: Sat 23 Nov 2024 05:00:34 +0000
Manifest next update: Sun 24 Nov 2024 05:00:34 +0000
Files and hashes: 1: 3dHvMefjUIkuYQzbH1hXDLV5ptE.roa (hash: /0kEtwkR5mTjeAeBzfF8rk9vlecuF+Qtw6WCbmhEj2M=)
2: kRbcv3jGLVHakHag0Gra027jt1U.crl (hash: Z9zZLHr9bILBASQtBhd0OX3iG8Ev6zDfcawBqFBiCeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:a6:5a:87:2e:66:68:86:39:0d:71:fa:ab:eb:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
Validity
Not Before: Nov 23 05:00:34 2024 GMT
Not After : Nov 24 05:00:34 2024 GMT
Subject: CN=b048fce7f07af90c51a0756118c571f7f505d0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:39:29:f4:c4:d9:00:c6:75:c7:58:dc:c9:96:
32:30:bb:36:8e:71:ee:79:d3:de:e8:37:c8:79:c0:
59:89:ff:57:9a:30:e7:b3:e5:5e:9f:6e:64:96:de:
66:f8:65:c4:4d:e7:8e:a3:3e:b0:30:18:4d:b9:39:
66:a8:e4:6b:42:47:58:5c:cc:60:88:ca:82:51:f0:
d6:80:ce:9f:65:49:f0:16:6c:db:2b:01:b9:bf:fb:
3e:87:98:df:c1:f1:1d:dc:8b:a8:f5:e1:bd:54:7a:
85:e0:8f:76:12:63:72:d7:b0:c8:56:e8:e3:d3:7b:
10:43:06:78:f3:92:85:e2:3d:72:ff:89:8b:8a:75:
c9:00:37:5e:c6:25:f0:25:5c:7f:4c:03:23:89:ad:
d5:0c:cf:71:b2:14:4f:c2:27:cf:5b:6f:5e:b9:99:
32:32:ed:c9:7d:01:45:55:62:c6:43:5f:46:2c:3c:
dd:cd:cc:ff:59:3f:20:66:91:89:fe:72:60:31:93:
c5:30:ac:a1:da:39:8a:b9:43:97:54:88:7b:93:86:
92:63:2d:10:12:94:c1:79:c8:bc:c2:0d:19:4e:58:
da:dc:72:73:a6:6c:61:ca:04:81:73:f4:d6:ab:ce:
3e:45:8e:76:7e:c0:8d:94:45:ba:06:a4:7d:30:01:
5b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:48:FC:E7:F0:7A:F9:0C:51:A0:75:61:18:C5:71:F7:F5:05:D0:B2
X509v3 Authority Key Identifier:
keyid:91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:5d:0c:e7:3a:bf:af:0a:b8:2b:aa:7f:79:91:f5:1e:41:1a:
e8:3b:61:6f:6d:49:ed:f4:19:23:66:32:3b:d4:17:61:dd:94:
de:f4:07:d8:45:09:67:ce:87:a4:97:98:18:36:2a:5d:d3:7d:
13:e7:97:02:86:4d:20:b5:a4:98:c8:18:32:70:de:e4:71:d7:
20:48:ae:2b:7b:30:89:5f:e1:1a:7d:d6:db:37:b3:ee:a7:84:
81:5e:6f:eb:1f:42:56:cb:ce:80:de:cc:de:d6:14:7b:58:22:
77:3a:b7:98:ad:ab:95:bd:fe:a2:37:f3:b4:c2:4b:3e:91:bf:
1c:8e:47:36:19:0d:e3:1d:73:70:8d:64:11:ca:4a:9c:1a:0f:
a3:d3:72:af:ee:93:3c:ea:a2:b9:7d:43:34:96:7a:64:74:fa:
b5:23:18:5f:c4:c9:e7:5a:31:e8:c9:c7:67:8c:f3:14:05:da:
7b:c3:b7:52:57:08:c3:c7:75:92:d8:25:70:9a:43:68:1b:11:
f1:2a:49:2c:b8:40:fa:19:a9:fd:1c:39:1a:c1:90:d8:99:6c:
cf:c3:f3:a4:5e:7b:bd:ec:e4:67:42:5e:1b:b3:94:20:2c:6c:
44:dc:24:fc:39:c3:58:41:47:4f:b4:18:8b:44:69:54:b0:f4:
6c:29:07:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:01:59 2024 by rpki-client on console-fra.rpki-client.org