Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
File: K5rePBkSeLKqitdnQu673v5yheY.mft (raw, json)
Hash identifier: 1epW4QfRbLdNX0PWGwSwuuBpR3B7Fo3jZUF+Yb+AXJ0=
Subject key identifier: 82:10:B8:1A:88:A5:A4:39:67:34:67:1A:60:58:E5:2B:88:0B:05:C0
Authority key identifier: 2B:9A:DE:3C:19:12:78:B2:AA:8A:D7:67:42:EE:BB:DE:FE:72:85:E6
Certificate issuer: /CN=2b9ade3c191278b2aa8ad76742eebbdefe7285e6
Certificate serial: 019357D2CADBCE9F98E324ED0D932A812E8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 07:00:52 +0000
Manifest this update: Sat 23 Nov 2024 07:00:52 +0000
Manifest next update: Sun 24 Nov 2024 07:00:52 +0000
Files and hashes: 1: K5rePBkSeLKqitdnQu673v5yheY.crl (hash: klcp9mtzUiy1IJqnlOdJLXXGF3SF44N6ax+elRkqFP8=)
2: gxLencVjTaSaBnbTcIbFvuHarZ0.roa (hash: 5NjdQb5GklnJxT8Yxe4eE/zquIRU/YGIygsi1jDP2aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:ca:db:ce:9f:98:e3:24:ed:0d:93:2a:81:2e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9ade3c191278b2aa8ad76742eebbdefe7285e6
Validity
Not Before: Nov 23 07:00:52 2024 GMT
Not After : Nov 24 07:00:52 2024 GMT
Subject: CN=8210b81a88a5a4396734671a6058e52b880b05c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:97:b5:f7:8e:03:e8:9f:88:f1:d5:bc:48:e4:
35:b2:89:b1:04:f8:37:bb:4b:77:13:ee:27:12:b7:
ff:d4:6f:dc:e2:33:23:d8:51:a5:52:29:0d:e2:9b:
cb:03:42:d8:8c:5a:11:6a:3b:5d:8e:6e:2d:c6:29:
cf:5b:8c:9f:15:3d:41:00:45:bb:76:02:b3:9e:6e:
85:c9:cc:98:82:b1:76:07:6b:07:48:0b:82:fd:f1:
84:e3:88:bf:68:4b:c2:6f:a5:23:cf:f3:c5:e1:83:
4d:0e:d2:e8:23:17:55:0d:f9:e5:8f:4c:3d:dd:e7:
83:c3:e8:2e:2b:47:18:10:b1:5f:e5:dc:07:4c:81:
a1:73:89:98:86:a7:8c:bb:c3:93:7a:2b:ce:cf:6f:
59:d8:48:14:56:51:bb:00:c7:bb:73:b6:df:f0:0d:
75:d7:cf:bb:98:12:a1:e6:8e:b1:5b:dd:62:75:c5:
fd:f1:c2:cf:ae:56:94:cd:f8:e2:2e:a9:fb:13:0e:
f3:a5:3f:24:ad:93:cc:cd:79:e3:92:30:4b:9c:f4:
64:50:24:66:a3:6d:b1:f6:da:2c:df:d5:35:76:2d:
84:f6:0a:31:26:6e:80:42:5c:b9:99:f9:a7:a4:65:
33:f1:f5:3e:81:35:16:d5:a2:15:41:cd:7d:a3:41:
a8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:10:B8:1A:88:A5:A4:39:67:34:67:1A:60:58:E5:2B:88:0B:05:C0
X509v3 Authority Key Identifier:
keyid:2B:9A:DE:3C:19:12:78:B2:AA:8A:D7:67:42:EE:BB:DE:FE:72:85:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e0:3e:1a:19:71:c8:de:c9:dd:88:37:90:a8:27:42:3a:9e:
75:4e:32:e2:73:c6:2e:c8:5b:dd:0a:15:49:e8:e9:74:ba:ec:
79:48:fc:a8:22:4f:7c:aa:16:9a:3c:93:25:b8:5a:52:26:89:
f2:04:15:05:63:96:02:0c:d1:e8:63:4c:1b:a6:81:87:7e:2d:
65:b9:33:d2:1b:f3:e2:01:4e:89:be:a1:f3:c2:65:98:43:cf:
2d:83:a6:74:0d:98:4d:d4:7c:0c:89:1c:a2:3f:c4:19:86:ac:
2f:23:f2:9b:08:32:c3:f2:78:11:9d:dc:ee:4a:00:05:c8:bf:
6e:2d:f9:35:7a:d0:17:1b:2e:db:c0:83:fb:c0:6d:7f:fa:6e:
ec:3e:44:1c:1a:d3:68:62:41:78:44:6e:30:fd:24:da:37:91:
6e:a2:3d:0d:05:f7:f6:d5:4a:4d:5f:1d:92:1e:b7:21:97:a2:
49:fe:36:f5:ab:ce:26:62:c0:6c:31:14:d7:46:5a:fb:69:b0:
bf:70:c4:63:fc:51:5f:c4:03:3e:34:08:4e:69:bc:77:36:30:
ad:a3:12:36:16:e8:12:60:12:e2:92:d5:68:91:6b:3d:5c:92:
22:de:19:86:86:ed:a9:b3:6d:b4:6d:3b:67:6f:d8:b6:ee:32:
07:b2:d6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:56 2024 by rpki-client on console-fra.rpki-client.org