Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
File: KC6tuNjCny5wNVBD4meGIpc08LI.mft (raw, json)
Hash identifier: SqpJgJjaw7Gmq9T88yxQOrDoDelBOrZfLSzEFX3zgnw=
Subject key identifier: BF:36:F3:50:9E:A8:82:7B:45:07:70:93:E3:DF:E0:DC:48:E3:5A:F4
Authority key identifier: 28:2E:AD:B8:D8:C2:9F:2E:70:35:50:43:E2:67:86:22:97:34:F0:B2
Certificate issuer: /CN=282eadb8d8c29f2e70355043e26786229734f0b2
Certificate serial: 0193579BCF23193FE11C2715692DFBD29607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 06:00:49 +0000
Manifest this update: Sat 23 Nov 2024 06:00:49 +0000
Manifest next update: Sun 24 Nov 2024 06:00:49 +0000
Files and hashes: 1: IQH0yD5obC0d69ImWCEcoX_tKU8.roa (hash: PImbsFJZrpxIf4gmuJJtJVycOSHio0+vXvj/bzFoEY0=)
2: KC6tuNjCny5wNVBD4meGIpc08LI.crl (hash: rQ1P68BS0keIJ6yErPo6lB0i8+TIrwSf7wwr2xDqkZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:cf:23:19:3f:e1:1c:27:15:69:2d:fb:d2:96:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282eadb8d8c29f2e70355043e26786229734f0b2
Validity
Not Before: Nov 23 06:00:49 2024 GMT
Not After : Nov 24 06:00:49 2024 GMT
Subject: CN=bf36f3509ea8827b45077093e3dfe0dc48e35af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:40:15:2d:55:64:a4:3c:5c:a5:64:41:b4:45:
b6:c3:60:e4:37:13:cb:50:d1:38:e9:8f:ce:4c:19:
50:17:1d:34:22:d8:f7:ef:70:f5:28:af:c0:f6:f9:
8a:7b:eb:73:6a:85:8b:9d:40:85:a2:57:fc:7e:bb:
5f:75:c9:34:49:af:13:fb:70:25:c3:4d:0c:44:7d:
6e:50:97:84:52:7a:04:e1:db:28:71:20:3f:4b:df:
92:05:10:0a:7b:ec:69:dd:e6:d4:20:49:c5:26:fb:
bd:b9:79:45:41:59:25:58:17:03:8b:b2:e8:66:3e:
f5:74:26:83:d2:08:85:16:f9:84:8e:b0:9d:51:cb:
94:40:65:58:c3:b4:b6:0e:e1:0d:7a:be:8d:5c:ad:
50:2f:9a:04:4d:a7:55:ba:9a:38:9a:4a:49:77:88:
0c:ab:3e:f9:80:1e:47:e2:92:93:af:8c:56:fc:6b:
20:e6:12:02:2a:97:9b:ba:ae:b3:87:19:c2:8c:56:
69:a3:06:14:06:39:93:84:e5:55:be:31:74:2a:d5:
8f:db:65:c1:25:ea:3d:0c:32:fb:34:d1:b6:16:be:
47:98:88:cf:d6:ad:62:f3:dc:dd:78:26:69:c8:cd:
bf:83:79:c1:29:4f:f9:1e:92:5f:8d:44:3e:ef:d1:
01:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:36:F3:50:9E:A8:82:7B:45:07:70:93:E3:DF:E0:DC:48:E3:5A:F4
X509v3 Authority Key Identifier:
keyid:28:2E:AD:B8:D8:C2:9F:2E:70:35:50:43:E2:67:86:22:97:34:F0:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:3d:ec:54:0b:73:5c:c0:e2:0b:9d:94:0c:bc:84:98:15:46:
29:c9:71:95:a0:16:8d:0d:32:53:0b:26:57:38:65:0c:b8:7a:
18:00:67:5d:09:08:d3:a2:f4:1a:74:a0:4c:66:a2:2e:3d:45:
9c:38:fc:1f:3d:96:4e:ad:6d:0d:c9:f9:a9:f6:bd:a1:40:c0:
ad:8a:06:5c:33:3a:78:1b:76:ec:34:cd:db:09:f8:7b:48:a4:
43:ec:31:fd:88:b3:f3:b9:ea:c8:1d:1a:83:ca:7d:a4:94:61:
24:6e:1b:ee:60:03:7e:b5:8c:12:5c:2f:4a:41:87:1b:bb:17:
b7:10:b5:cb:53:7f:91:9b:87:ab:65:66:fe:26:99:55:1e:a3:
e9:11:b0:08:53:d9:e2:a8:c4:b0:7d:bf:45:56:03:8c:38:c8:
b6:b9:85:3d:7d:ee:5d:b0:c1:3f:c8:4f:93:bf:02:00:18:6d:
7c:96:f1:5b:b2:18:dc:50:70:b0:7b:0f:80:ac:b0:da:85:18:
ad:81:d2:70:08:ef:f7:25:05:44:03:a4:eb:c9:ec:a2:2c:73:
51:a4:51:ff:5c:d9:ba:7e:e4:9d:f1:34:48:7e:c3:66:78:76:
5d:de:a4:2d:5b:15:eb:b4:e0:8d:a5:cf:00:ec:7f:51:e5:66:
31:c0:cd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:16 2024 by rpki-client on console-fra.rpki-client.org