Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
File: KR2Dw_S4d899CEy1MMSp42_PetA.mft (raw, json)
Hash identifier: wF8lUF7I46hA+KUUdq1nE3qJOw45RWuPNNwizHpTOO4=
Subject key identifier: 2E:00:EF:A6:64:E9:A3:81:AD:6A:F0:3E:64:0C:D6:96:05:1B:E5:A4
Authority key identifier: 29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
Certificate issuer: /CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Certificate serial: 018F87B6571F868D2C404AC38B4514CAEBD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
Manifest number: 0E85
Signing time: Fri 17 May 2024 18:00:24 +0000
Manifest this update: Fri 17 May 2024 18:00:24 +0000
Manifest next update: Sat 18 May 2024 18:00:24 +0000
Files and hashes: 1: KR2Dw_S4d899CEy1MMSp42_PetA.crl (hash: OBa5FA0DDBg9+rjp8UppV06199T6dhfGfCT83FYGNWs=)
2: eEl_1mYwR1yVr3DQHR2RLiYRLJI.roa (hash: Itrvz//iN3iI/25rSpHB5Y6mBOTyW44S5q4oupqsuCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:b6:57:1f:86:8d:2c:40:4a:c3:8b:45:14:ca:eb:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Validity
Not Before: May 17 18:00:24 2024 GMT
Not After : May 18 18:00:24 2024 GMT
Subject: CN=2e00efa664e9a381ad6af03e640cd696051be5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d1:e1:b6:70:dc:7c:31:dd:91:46:89:20:01:
9c:3b:85:84:80:30:d1:ce:84:60:06:a2:a1:f2:23:
2e:18:18:36:6a:68:15:64:4d:e6:bb:01:c8:f8:3e:
3a:d2:5b:21:01:23:69:90:d0:fa:5d:8c:01:d4:13:
f9:e7:e2:9d:da:86:18:8b:90:43:b2:ea:d6:f6:de:
6e:9e:18:37:85:d3:79:e3:cb:ae:cb:df:a2:3a:99:
fc:84:08:b3:45:76:8e:47:f3:c3:8a:50:c3:6c:e9:
11:0a:b9:9c:f4:c4:31:67:8d:77:14:e7:5f:38:68:
73:f5:54:02:ed:9f:bd:53:c0:fd:fd:d8:76:18:af:
01:96:71:2d:03:b3:61:9a:16:34:c9:3a:03:b6:b1:
9a:58:0d:7d:8f:1d:15:ba:e3:58:48:19:e7:f0:e4:
6e:a3:5e:dd:2e:a6:dd:f6:70:2b:32:ad:fc:f7:b2:
3b:d0:ec:96:5a:fa:4c:7b:ce:f2:ad:98:9a:f5:01:
8a:ce:de:30:5f:c0:19:63:2c:88:0e:50:fb:84:29:
72:db:e7:e8:23:91:60:3d:5a:43:e3:26:7e:ba:a5:
a0:d6:ac:1a:f4:d4:df:23:4b:6a:0e:4d:36:21:13:
f5:f4:a7:81:c2:dd:e0:d4:c3:3d:2a:07:e7:23:f4:
ff:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:00:EF:A6:64:E9:A3:81:AD:6A:F0:3E:64:0C:D6:96:05:1B:E5:A4
X509v3 Authority Key Identifier:
keyid:29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ef:1a:fe:f6:de:00:c8:10:90:51:37:aa:63:f7:1f:96:52:
b3:b5:70:69:b8:ad:89:84:48:ed:5c:93:73:02:93:ee:63:9f:
9e:d8:43:a8:d1:ba:d1:27:ce:85:c4:d9:a1:40:22:fc:5b:61:
fc:21:7a:7d:46:f7:06:a0:d8:4b:19:67:a4:aa:54:fc:df:38:
49:25:f4:90:c6:08:3a:8d:88:a4:63:c4:2d:93:1a:50:5f:a4:
73:2d:13:a7:c7:7b:6c:a6:0a:a5:51:6e:35:8b:9e:0a:a2:c2:
7f:36:9f:6b:01:a5:bd:75:06:e6:79:95:75:6b:9f:86:ca:3a:
64:59:39:11:7d:ff:c1:1c:c1:9d:a4:68:30:70:9e:c8:85:97:
6d:58:37:9a:3c:60:c9:37:87:0a:b5:96:77:6c:b8:a9:2c:41:
9a:2f:91:5e:01:06:b3:b7:1b:98:93:be:41:5f:63:fc:ef:dc:
a8:02:c1:95:f8:d0:ea:99:60:c2:c6:f2:b4:8d:33:df:bb:e2:
08:af:ef:59:59:f5:d6:91:d2:fe:15:5d:00:f8:74:c9:b6:23:
3b:ef:45:4f:c5:91:c0:0e:97:7c:7c:86:3e:1c:26:f6:b9:8d:
1a:c9:82:25:99:5a:ca:3e:a6:9b:67:0d:5e:a0:94:83:d2:0f:
e2:d0:42:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:17:49 2024 by rpki-client on console-fra.rpki-client.org