Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
File: KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft (raw, json)
Hash identifier: INbby4cP1gwelhf/9ekEQIp26rhOns925D9mPHkqnK0=
Subject key identifier: 5D:FC:22:4D:F5:51:CB:F5:EF:2A:DA:98:C9:16:A5:15:6A:1C:CB:DD
Authority key identifier: 29:5B:6A:34:A2:10:9B:A7:C4:D9:7F:76:C7:44:66:F1:4C:33:33:E0
Certificate issuer: /CN=295b6a34a2109ba7c4d97f76c74466f14c3333e0
Certificate serial: 01920ACD105A6235A3A763E9BCEB2B74B189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
Manifest number: 12C7
Signing time: Thu 19 Sep 2024 15:01:04 +0000
Manifest this update: Thu 19 Sep 2024 15:01:04 +0000
Manifest next update: Fri 20 Sep 2024 15:01:04 +0000
Files and hashes: 1: 1dy_5oIRfBH9jr9Uq32oCI5RVuU.roa (hash: HvySJI6uPNMO/1yxbVmVpr+dOkUrN9gdiuvoQ5zhefs=)
2: KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl (hash: k6rk8kx7OJu1k95wG121pS9+AQU/XY+uQsinTbnv1ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0a:cd:10:5a:62:35:a3:a7:63:e9:bc:eb:2b:74:b1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295b6a34a2109ba7c4d97f76c74466f14c3333e0
Validity
Not Before: Sep 19 15:01:04 2024 GMT
Not After : Sep 20 15:01:04 2024 GMT
Subject: CN=5dfc224df551cbf5ef2ada98c916a5156a1ccbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8a:68:18:d1:71:6c:04:27:d5:71:67:aa:04:
3b:48:43:96:bd:2f:b4:25:dc:e2:5b:b0:47:c6:6b:
26:03:82:ed:8f:53:65:84:70:55:ce:c7:44:f3:2d:
2a:ab:6e:4c:f0:d4:03:6d:7f:52:4b:db:be:d4:8f:
e8:5f:4f:9d:5e:29:d3:07:a7:93:32:26:41:7e:ed:
85:ad:0c:83:94:84:d5:e0:a5:1a:4b:87:df:4b:87:
02:c0:d7:ce:5f:eb:a0:f3:75:8d:39:bd:69:93:cb:
4c:90:8e:c9:ec:08:3d:69:c4:96:e4:bc:12:9a:99:
57:a5:28:38:e2:47:27:02:e0:2c:dc:27:93:85:7d:
33:2c:16:00:57:63:ad:98:59:ae:29:74:4b:41:f2:
f7:f4:58:2b:2e:ca:7d:1a:31:85:de:4d:d1:33:a8:
a3:da:08:47:a4:63:d9:32:12:55:91:66:65:d1:19:
4b:7f:85:e1:e9:b3:c2:f4:89:90:b6:10:c7:0f:fd:
64:0d:a7:1e:7e:27:1d:b9:fe:63:46:f1:48:22:9e:
65:19:45:ff:18:1f:33:1e:5b:42:0b:7c:af:57:1d:
27:e0:7d:a8:98:35:cd:96:ca:77:0c:96:ae:48:1a:
3f:0b:32:b6:07:10:40:2a:f9:ca:70:1f:37:5d:e0:
af:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FC:22:4D:F5:51:CB:F5:EF:2A:DA:98:C9:16:A5:15:6A:1C:CB:DD
X509v3 Authority Key Identifier:
keyid:29:5B:6A:34:A2:10:9B:A7:C4:D9:7F:76:C7:44:66:F1:4C:33:33:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b0:23:e5:4c:4b:b9:50:3f:09:6f:63:f1:9a:97:1b:8e:e6:
ff:cc:04:92:5b:ef:4b:39:f1:f1:43:46:25:de:1c:03:dc:b5:
c9:79:44:39:56:57:b3:d6:9c:f8:a4:67:1d:0a:10:71:ef:f2:
2f:9d:86:87:6b:80:dc:66:fb:2e:59:38:b8:8d:0b:0a:c2:f9:
1f:90:4e:00:7b:31:8d:d8:b3:41:5b:11:c3:ee:58:01:53:74:
b9:eb:b4:82:3c:60:0a:bc:3b:fe:29:c8:29:b0:87:a9:fa:d6:
06:40:a4:ce:87:d8:27:2e:48:86:48:26:1b:9b:44:2c:4c:57:
58:31:2f:45:66:c6:e0:0d:71:86:05:66:05:59:b2:92:aa:3b:
70:08:c2:44:2a:6e:4a:86:6d:f2:1e:0a:7b:da:4b:30:71:fc:
2d:9a:96:06:ae:bd:a6:a4:20:49:fb:23:9c:ed:d3:fd:97:8b:
6c:41:2c:b5:5d:af:ee:a8:90:4e:94:3c:80:ee:1a:e5:11:6f:
c9:3e:9c:bf:2b:93:e4:2a:ca:db:b3:2d:35:33:51:0e:82:1c:
57:3f:fc:a5:33:6a:78:ed:5a:39:8d:42:b7:1f:7b:fe:67:c8:
d4:93:d9:12:63:8b:4e:6d:f1:bc:fb:30:04:00:3a:94:9a:58:
21:9b:d9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 22:55:46 2024 by rpki-client on console-fra.rpki-client.org