Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
File: KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft (raw, json)
Hash identifier: 3wd4CJGyO9Vx/h59QooR5WygompSSAM1Nmiklfy39t8=
Subject key identifier: 4D:0A:B3:8C:C6:C6:C4:9F:C0:62:F5:15:81:A0:61:15:77:08:D6:45
Authority key identifier: 29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16
Certificate issuer: /CN=29275327a5e85f3c8c14c984036f493feb59b016
Certificate serial: 018F93F1808163835FE2CBDC64CA1BB33717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
Manifest number: 1181
Signing time: Mon 20 May 2024 03:00:28 +0000
Manifest this update: Mon 20 May 2024 03:00:28 +0000
Manifest next update: Tue 21 May 2024 03:00:28 +0000
Files and hashes: 1: KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl (hash: UuwzOE9N5g4L7CUEuNR5l/XXXTW/RuFE/WvUTsbaePA=)
2: mmUPmzv2mbZ_eMSYwLTu3bhgwRA.roa (hash: 08HLr65lqcvYq9HeqZ/RoOeX9AiVoSUyQiL9TyPSEDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:93:f1:80:81:63:83:5f:e2:cb:dc:64:ca:1b:b3:37:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29275327a5e85f3c8c14c984036f493feb59b016
Validity
Not Before: May 20 03:00:28 2024 GMT
Not After : May 21 03:00:28 2024 GMT
Subject: CN=4d0ab38cc6c6c49fc062f51581a061157708d645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:59:9d:52:97:25:17:2f:fc:29:ae:8e:68:56:
d1:68:f1:91:b3:31:03:23:c8:a1:5c:61:7f:72:af:
e9:f2:d1:33:97:44:c6:d6:0b:b7:ff:48:96:e2:aa:
d1:e3:e0:27:4b:16:07:96:b2:2a:e7:d5:2d:43:0e:
b2:94:ad:02:a2:20:99:fc:84:23:1e:43:9b:a7:85:
c2:9f:6e:94:b5:5d:86:94:97:72:9d:21:f4:63:53:
ce:40:0b:73:1b:3b:9d:74:ca:2e:ef:de:ab:8b:29:
a8:95:df:cc:f6:5a:84:ca:9b:3f:94:ef:52:cd:48:
ce:82:3c:91:2e:1d:40:a5:59:be:02:48:a0:79:7b:
05:4f:bc:f0:cf:a7:4a:79:38:a9:7a:24:a4:b5:de:
a1:df:3a:c3:2c:16:b4:74:a2:25:9d:ae:aa:1a:21:
7b:ff:8f:0c:9c:f6:64:97:10:b9:61:7c:a1:58:e9:
c5:d3:53:14:a5:3d:8f:da:9e:7e:56:83:01:3c:84:
6f:09:69:cf:47:d3:bf:85:7c:2f:b2:e5:c6:b2:2a:
43:31:e6:bf:f4:80:f3:14:06:71:f7:45:47:29:d5:
a8:ea:e3:07:4b:c9:4c:b2:d1:39:94:53:e4:7d:8f:
e7:06:6f:b8:7d:a1:4a:dd:37:d9:c9:16:b6:a9:a1:
68:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0A:B3:8C:C6:C6:C4:9F:C0:62:F5:15:81:A0:61:15:77:08:D6:45
X509v3 Authority Key Identifier:
keyid:29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:82:51:37:2e:d5:8f:7f:bc:64:44:2c:e6:d1:68:f2:35:15:
ce:83:5f:0c:45:5f:31:3c:80:2f:1c:fa:57:29:86:5c:26:36:
de:8f:5c:d9:e2:2c:eb:cc:e1:a3:62:f3:c9:8e:24:3f:85:dc:
c1:fe:76:66:6b:c9:9d:66:67:a0:82:6c:61:f9:7f:e9:bc:35:
0f:ca:b5:9c:06:ff:7a:01:2c:4a:97:86:c9:c5:67:09:17:69:
4c:15:69:20:d8:ae:18:1e:2e:a1:aa:cc:b8:38:d3:b1:91:ad:
6b:f9:12:48:af:80:01:b2:12:e4:4d:c7:8c:46:be:10:c7:5c:
eb:00:12:0d:c5:3c:8b:de:cb:fc:74:fc:b4:b3:9d:60:68:e9:
80:b0:1f:8b:3e:0a:f4:56:3d:a0:68:2e:c0:85:bc:50:20:38:
3f:5d:80:1b:a5:3e:d4:04:a1:00:ac:ef:da:36:73:8d:5d:d0:
84:a9:b4:b7:4b:61:cf:6c:9c:e0:07:bc:56:25:53:ca:a7:b6:
9d:06:af:5f:c0:d4:ce:57:ee:88:7e:ad:5a:0f:eb:d7:c1:62:
62:c1:36:e9:3b:f9:d3:64:24:cb:d9:f5:b0:e2:23:41:0c:ba:
55:51:c7:83:c3:85:36:48:19:65:cc:fc:53:c5:62:62:51:51:
28:0d:cb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 05:23:21 2024 by rpki-client on console-ams.rpki-client.org