Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
File: KIUcb8brOBbhFsikqFHQ0XjJDzE.mft (raw, json)
Hash identifier: C3/7Se1KgMcNDSyWY/B3d+zEVP0wYKcycpODiU33Jyo=
Subject key identifier: 33:AF:F8:94:29:B1:AF:C9:6A:BA:FF:AC:05:04:55:E2:21:41:70:4E
Authority key identifier: 28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
Certificate issuer: /CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Certificate serial: 019357D235B844E36CF50EEAE3607096A014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
Manifest number: 114F
Signing time: Sat 23 Nov 2024 07:00:14 +0000
Manifest this update: Sat 23 Nov 2024 07:00:14 +0000
Manifest next update: Sun 24 Nov 2024 07:00:14 +0000
Files and hashes: 1: 99hL1M0Kvtc8JTPpQAYPcI3Zq9o.roa (hash: A0pfMFVZTusr8PW8FcxYb99YfBgnjaJMvX5sYI5zJ+M=)
2: ADQP9eb0sJNTO5TKDJg5Hf3lwO4.roa (hash: s8eo+e5rTcDypvfHU7bpTDYeNlZnc2+W87V01eOJvDA=)
3: KIUcb8brOBbhFsikqFHQ0XjJDzE.crl (hash: REg5zglmdwwi0uapYTwchGxLR+z+EdNtJT25mG81SsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:35:b8:44:e3:6c:f5:0e:ea:e3:60:70:96:a0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Validity
Not Before: Nov 23 07:00:14 2024 GMT
Not After : Nov 24 07:00:14 2024 GMT
Subject: CN=33aff89429b1afc96abaffac050455e22141704e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7e:c5:1e:0e:14:86:51:f2:74:19:1c:07:08:
8d:b4:d1:87:a3:8c:77:1b:60:ce:d1:43:b8:8a:c6:
62:80:ab:13:b3:03:da:17:0e:85:8a:8c:9e:84:a8:
59:db:8c:4a:8b:15:b2:8a:df:b4:fd:93:96:a8:02:
54:a2:e8:37:ee:a8:f6:04:1f:b9:5d:d7:82:8f:8a:
97:a3:7d:39:2f:06:1b:89:79:c3:45:36:d0:b8:6c:
2c:bc:50:5c:4e:30:94:0c:81:67:08:d4:71:c0:7d:
fb:44:f2:2c:be:90:ad:d9:76:bd:96:ec:22:f9:5f:
aa:33:97:d7:01:85:0d:71:f2:a1:e0:14:e6:97:ba:
56:ee:f6:6c:e3:56:ac:13:fe:5b:d6:f1:a5:fb:6a:
9c:fa:8e:78:f3:b8:d8:e9:29:33:09:5e:b5:18:32:
6b:ee:e8:1c:a7:eb:b0:75:aa:3f:24:6c:15:56:ad:
fb:b4:a7:3f:63:dd:f6:85:f1:a0:f0:77:94:36:0c:
bd:b5:32:d1:7e:74:10:18:41:bd:78:e5:ba:84:c5:
e0:9a:4b:eb:86:70:8e:6c:bd:b4:08:c7:e1:7a:41:
48:ac:31:93:ce:2d:16:2c:bc:f7:15:40:34:89:fe:
99:ac:9e:53:7a:6f:f7:94:7f:db:4c:75:f2:da:0e:
d6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AF:F8:94:29:B1:AF:C9:6A:BA:FF:AC:05:04:55:E2:21:41:70:4E
X509v3 Authority Key Identifier:
keyid:28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ef:a7:a3:4e:ec:9e:e1:f6:16:90:0b:b1:fb:4b:63:bb:1d:
37:dd:88:14:a8:13:7e:aa:9e:64:90:a3:6e:23:d7:4d:87:bb:
8a:01:6a:46:b7:6d:de:39:36:5b:ab:97:ad:54:e5:72:10:7b:
75:db:4b:df:96:51:5d:08:02:76:5d:01:5f:17:cb:64:bc:8f:
7f:fe:a3:3a:60:ed:9b:e1:f7:01:f3:54:e1:3e:94:55:01:10:
5f:58:c1:fa:93:f4:68:1d:df:ef:b0:15:80:b3:ad:de:ed:0a:
bb:aa:57:f3:52:d6:b0:ad:5b:68:86:38:61:38:66:7d:98:93:
24:a1:68:81:ee:87:81:29:4d:57:1c:73:b6:77:a9:bd:f2:35:
b1:7d:ed:75:51:e4:9d:4c:b6:af:67:0f:d8:85:bb:a5:58:6e:
0e:12:c8:70:e8:62:9d:6e:69:08:d3:10:14:44:a3:03:e1:48:
8e:c4:de:6e:40:17:d8:cc:80:1f:ad:00:7d:54:c8:33:69:80:
b7:b9:b1:d0:e7:8a:56:b6:86:4a:3d:21:c5:cc:eb:60:79:1f:
6f:4e:3d:3d:5b:85:29:5a:af:76:bf:9b:e5:e1:71:e5:1b:77:
18:78:ec:96:95:f8:15:fc:17:d1:d7:46:76:ef:e7:b5:ec:aa:
21:4d:e9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:57 2024 by rpki-client on console-fra.rpki-client.org