Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b35c9a-8495-4169-8c50-3692f7841619/1/kNWCLTx7v3q1QE3aiP2dqSE43iE.mft
File: kNWCLTx7v3q1QE3aiP2dqSE43iE.mft (raw, json)
Hash identifier: ecFNLGWej511sT/Vzes8xdS5b75ELO/4BZ1efPPxAWo=
Subject key identifier: D4:5C:11:68:90:3F:00:42:1A:91:D2:6E:1D:83:6B:FD:A8:8A:85:16
Authority key identifier: 90:D5:82:2D:3C:7B:BF:7A:B5:40:4D:DA:88:FD:9D:A9:21:38:DE:21
Certificate issuer: /CN=90d5822d3c7bbf7ab5404dda88fd9da92138de21
Certificate serial: 019369DAC1D4240963FDEB2608423312C8DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNWCLTx7v3q1QE3aiP2dqSE43iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b35c9a-8495-4169-8c50-3692f7841619/1/kNWCLTx7v3q1QE3aiP2dqSE43iE.mft
Manifest number: 0437
Signing time: Tue 26 Nov 2024 19:02:43 +0000
Manifest this update: Tue 26 Nov 2024 19:02:43 +0000
Manifest next update: Wed 27 Nov 2024 19:02:43 +0000
Files and hashes: 1: kNWCLTx7v3q1QE3aiP2dqSE43iE.crl (hash: IaRHcjjtR6GDcHufgk1Evi8a8yuXED4qgnOQX8E3yQU=)
2: naARcsex1DejgWaGL2FELhm5lwQ.roa (hash: TEgnWR+b2w3ordqKeZNBCQqxuq+8jGU7piUmVFo6scM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/b35c9a-8495-4169-8c50-3692f7841619/1/kNWCLTx7v3q1QE3aiP2dqSE43iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/b35c9a-8495-4169-8c50-3692f7841619/1/kNWCLTx7v3q1QE3aiP2dqSE43iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNWCLTx7v3q1QE3aiP2dqSE43iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:da:c1:d4:24:09:63:fd:eb:26:08:42:33:12:c8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d5822d3c7bbf7ab5404dda88fd9da92138de21
Validity
Not Before: Nov 26 19:02:43 2024 GMT
Not After : Nov 27 19:02:43 2024 GMT
Subject: CN=d45c1168903f00421a91d26e1d836bfda88a8516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:90:88:07:3a:1f:92:bd:1f:d5:d8:02:9c:be:
26:41:93:cc:55:36:cc:4b:ec:d3:24:b5:80:ab:97:
a0:d5:b3:4a:b9:ef:fc:63:96:12:71:80:13:cd:51:
91:aa:eb:37:e2:2f:47:ce:f9:66:fb:2e:0e:c8:2d:
d7:49:bd:33:8a:b6:08:2f:96:49:e4:92:5e:05:16:
23:1c:a9:a7:d6:8b:06:95:0f:bb:67:ae:0c:e0:2e:
96:11:1c:da:d9:0e:91:b2:38:40:c8:53:d6:77:4e:
4b:1f:c5:68:5e:98:d5:a8:94:a1:d9:0a:d8:a6:46:
15:6a:99:25:ca:71:53:24:81:cc:59:55:76:b6:18:
05:9a:cd:17:e6:08:af:b6:bf:a4:97:87:45:48:58:
59:7c:a5:82:49:07:2c:15:e9:3e:c5:64:f9:b6:5d:
26:ea:0f:55:14:c1:ba:ec:e8:c0:4a:82:fa:a4:ca:
6c:7b:99:c0:50:db:77:31:df:52:3d:d5:95:81:ef:
18:17:4d:9d:6f:46:1c:04:c0:8b:c2:b1:45:b7:f5:
99:ed:90:20:21:96:68:ff:09:f9:64:0d:32:7e:ff:
7c:f8:f6:0a:38:7f:a7:49:82:d4:43:5c:46:b1:ed:
2b:3c:a1:2e:4b:32:b4:cc:b2:24:3a:7e:a7:b1:d9:
54:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5C:11:68:90:3F:00:42:1A:91:D2:6E:1D:83:6B:FD:A8:8A:85:16
X509v3 Authority Key Identifier:
keyid:90:D5:82:2D:3C:7B:BF:7A:B5:40:4D:DA:88:FD:9D:A9:21:38:DE:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNWCLTx7v3q1QE3aiP2dqSE43iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b35c9a-8495-4169-8c50-3692f7841619/1/kNWCLTx7v3q1QE3aiP2dqSE43iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b35c9a-8495-4169-8c50-3692f7841619/1/kNWCLTx7v3q1QE3aiP2dqSE43iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:1a:68:ef:58:3d:57:0a:d6:cd:ea:96:d7:10:33:77:5b:eb:
e9:34:52:f6:43:d0:ce:f1:40:45:2b:3a:d1:4b:98:b6:91:fd:
92:5a:84:97:d5:22:94:e5:c5:b1:08:98:25:0a:3b:35:26:77:
11:6e:18:47:67:dd:78:5a:48:11:74:c3:9b:73:92:de:0f:fa:
26:57:d9:8f:b5:75:e1:80:4c:0e:a5:5a:23:ca:6d:b2:4c:8d:
49:84:66:94:fe:2e:1e:57:9a:87:93:d2:0b:ea:df:5f:9b:c3:
c8:f7:30:3e:c6:4b:73:33:c3:1d:76:c7:10:56:fb:9c:a5:13:
9e:d7:2a:48:26:b7:4c:d5:47:4e:f8:6b:9d:1a:a3:85:3d:63:
08:b0:97:6d:f6:8c:9d:56:e1:e8:e7:d7:b8:2b:fd:96:64:b9:
ae:a8:50:f0:9b:8a:a2:ef:77:48:b3:11:f5:e9:2b:3e:b6:4c:
c7:fd:41:46:c8:d5:6a:a2:33:2d:eb:9a:3a:fe:36:90:e9:bd:
47:c9:09:56:38:f4:5c:8c:5d:4b:9f:8b:c0:5e:52:c7:21:95:
11:6e:b3:a8:43:bf:3d:63:ee:aa:76:02:9b:af:1c:dd:25:be:
22:71:a0:e9:3e:fd:38:9d:81:c8:6f:0f:46:05:3d:71:78:4d:
e7:7c:f2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:32:09 2024 by rpki-client on console-ams.rpki-client.org