Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
File: KC6tuNjCny5wNVBD4meGIpc08LI.mft (raw, json)
Hash identifier: /fGTpcghdndLrc3roWUFJKZEszJM2Nq1Sz+dLjn55JI=
Subject key identifier: A5:67:8B:BC:AB:69:2F:0A:0A:49:67:D9:1B:AF:C0:7F:EA:47:AC:00
Authority key identifier: 28:2E:AD:B8:D8:C2:9F:2E:70:35:50:43:E2:67:86:22:97:34:F0:B2
Certificate issuer: /CN=282eadb8d8c29f2e70355043e26786229734f0b2
Certificate serial: 018F866C9B4539EFA60E2E6A831B003D8C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
Manifest number: 1178
Signing time: Fri 17 May 2024 12:00:15 +0000
Manifest this update: Fri 17 May 2024 12:00:15 +0000
Manifest next update: Sat 18 May 2024 12:00:15 +0000
Files and hashes: 1: IQH0yD5obC0d69ImWCEcoX_tKU8.roa (hash: PImbsFJZrpxIf4gmuJJtJVycOSHio0+vXvj/bzFoEY0=)
2: KC6tuNjCny5wNVBD4meGIpc08LI.crl (hash: l/7VLoHq4hpBMGCnmhsHGK6PrpxzQDMhCnGO8GF0Gxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:6c:9b:45:39:ef:a6:0e:2e:6a:83:1b:00:3d:8c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282eadb8d8c29f2e70355043e26786229734f0b2
Validity
Not Before: May 17 12:00:15 2024 GMT
Not After : May 18 12:00:15 2024 GMT
Subject: CN=a5678bbcab692f0a0a4967d91bafc07fea47ac00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:2c:22:e8:a1:92:b7:98:8a:eb:f0:80:37:
e9:ec:54:4d:8e:0c:65:83:bb:b8:79:a0:2d:3c:d5:
1a:25:ea:da:8e:cb:ee:43:c8:3a:31:4c:46:42:4a:
55:0b:45:22:f9:18:b9:9f:29:34:e2:68:cf:ea:5d:
b6:94:5d:0b:d1:a8:8b:7e:15:f7:45:72:f3:dd:0f:
74:ea:f6:71:72:d1:22:5a:c1:61:5a:b2:a5:8a:3f:
fe:1f:c0:af:a1:ac:b8:5e:fb:7a:97:66:48:ba:db:
d1:f8:f9:fd:5b:8c:4b:a4:93:01:4d:86:60:69:00:
d7:55:ae:b3:c9:c8:27:b0:58:42:e6:5c:bf:a4:5c:
cd:dd:4a:75:87:41:82:37:79:86:21:2e:78:c8:72:
0b:91:ac:76:b6:f5:f0:8e:78:96:14:26:9a:0a:e4:
61:61:1e:9e:bd:da:62:09:30:26:22:4e:76:97:82:
64:3c:ca:dd:24:cf:2b:fb:36:18:77:1e:0f:c5:60:
8a:65:65:91:0c:0d:d5:33:7e:bd:02:83:99:b2:46:
2a:ac:a6:d9:ff:65:1d:f7:17:db:fd:5a:86:09:f8:
02:ab:4d:8a:c1:9b:a7:60:ea:55:19:86:79:d6:3c:
0f:6b:fe:3a:fd:b4:31:2b:f8:42:fb:7d:b3:52:e3:
7e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:67:8B:BC:AB:69:2F:0A:0A:49:67:D9:1B:AF:C0:7F:EA:47:AC:00
X509v3 Authority Key Identifier:
keyid:28:2E:AD:B8:D8:C2:9F:2E:70:35:50:43:E2:67:86:22:97:34:F0:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:9f:a0:ec:d4:f0:9b:0f:59:b2:cb:e9:60:48:50:95:55:1b:
47:2d:66:e0:5f:db:e0:10:4a:e8:76:f2:9a:96:25:c8:4b:b2:
50:59:d9:cf:9c:34:75:4c:de:13:8b:2c:d5:70:b2:c6:c8:e9:
e4:56:d2:d1:54:38:0c:b8:da:8c:a6:77:62:20:e8:a2:36:bb:
ef:5d:ad:f5:b0:56:4d:8d:54:7f:84:6e:f9:4f:c1:4f:ff:77:
28:96:7c:cf:98:dc:b0:86:2e:b0:5d:5d:3e:9f:19:ae:09:58:
94:8a:a4:38:f2:12:db:a9:70:52:3a:c7:b3:8e:1a:6d:7c:f3:
b9:28:3f:d0:3a:ac:89:c0:23:0f:99:ec:2e:fb:2c:2f:25:58:
a4:7d:bb:e7:d1:d9:c6:ec:5b:d0:46:63:06:dc:08:7c:33:2c:
2f:ac:0c:d3:c0:fa:20:1e:55:62:c4:25:c2:6c:19:3c:f6:30:
7e:5e:cc:d4:35:8e:13:6c:8c:98:20:7d:b1:15:dd:76:f5:5f:
0d:24:60:59:eb:c5:0e:f5:89:09:20:67:ff:d6:32:2f:cc:64:
17:fb:e6:31:98:47:3d:fe:87:6b:53:48:66:64:2c:5c:61:1d:
a4:44:2f:ac:70:f0:f0:a3:e4:b0:28:cd:0d:8d:22:0b:3e:44:
21:3e:a1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:41:59 2024 by rpki-client on console-fra.rpki-client.org