Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
File: KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft (raw, json)
Hash identifier: tFt6szL6FCL+C86VuNlb6/RNGCHtFZNiecHly0I96Sg=
Subject key identifier: 99:39:EE:2A:B7:14:72:01:0C:5A:18:E6:8C:00:B2:71:9B:4B:59:1F
Authority key identifier: 29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E
Certificate issuer: /CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
Certificate serial: 01935688D8F0BB3412D7584B792E4E8742D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
Manifest number: 041C
Signing time: Sat 23 Nov 2024 01:00:29 +0000
Manifest this update: Sat 23 Nov 2024 01:00:29 +0000
Manifest next update: Sun 24 Nov 2024 01:00:29 +0000
Files and hashes: 1: KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl (hash: DprcqlAzDEUvZbwfNnZjLwqY2wumG/btLb8tSk3Sris=)
2: UinKlJEuaGaXD7NgfXQekgTGK8Q.roa (hash: FUzeKZUq9DWkZI//mzfW48jXf69JKABsurDNx2IB4s4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:88:d8:f0:bb:34:12:d7:58:4b:79:2e:4e:87:42:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
Validity
Not Before: Nov 23 01:00:29 2024 GMT
Not After : Nov 24 01:00:29 2024 GMT
Subject: CN=9939ee2ab71472010c5a18e68c00b2719b4b591f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:aa:b0:c4:72:74:f7:1c:2d:9e:8f:50:94:14:
ed:35:a6:d8:3a:34:01:db:ba:d7:7d:56:50:79:d1:
5c:15:6e:4c:6e:91:b9:8f:83:0a:ff:3e:91:20:96:
a9:66:0e:67:2e:b1:46:0e:bd:f2:5f:4c:65:38:61:
ab:f2:04:ab:dd:f1:1f:7f:fb:14:9f:78:22:ea:28:
52:60:4b:b6:b6:8e:2e:f0:b2:e8:35:ee:59:a3:81:
ed:ae:85:75:d6:99:6c:00:6a:a1:5f:0f:47:31:90:
63:13:e8:47:b0:1e:ed:b0:49:01:b6:05:b8:e6:63:
7a:2a:5b:28:8b:69:a1:83:3c:30:4d:be:00:0c:5b:
97:1c:eb:1f:11:46:54:e2:6b:8d:29:d0:1a:b5:fc:
4f:c4:c1:18:8d:df:0c:5e:9e:20:e4:5f:e6:b8:85:
07:23:7f:74:4e:8b:12:e7:68:c4:18:13:b2:b1:2e:
32:55:67:ae:77:90:e1:4a:da:13:e5:f8:1b:9b:53:
79:cb:60:20:64:4c:8f:0c:77:ae:cf:44:d3:03:db:
4a:be:b3:68:dd:67:d7:45:b3:78:e6:ba:22:8c:ae:
c5:df:4e:14:6a:d5:6f:89:00:6e:54:04:4c:75:0f:
d5:05:76:ea:5b:3f:24:39:4b:a2:8c:90:58:bc:4e:
23:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:39:EE:2A:B7:14:72:01:0C:5A:18:E6:8C:00:B2:71:9B:4B:59:1F
X509v3 Authority Key Identifier:
keyid:29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:17:42:71:61:49:53:b6:63:22:06:19:be:ae:10:f4:ee:98:
be:ef:2a:9a:bb:2a:c6:57:5d:a7:ed:01:94:ec:92:58:4d:03:
af:a0:e6:5b:8f:1d:20:71:43:57:34:49:c7:da:c5:71:2f:6d:
16:a0:66:f5:b9:c6:57:4b:cc:d3:e6:99:58:c7:a3:fc:c6:9c:
e7:ff:a3:4f:a3:0e:5b:81:64:ef:c8:44:c5:78:65:3d:70:e3:
bd:76:8d:5b:7b:68:ae:25:e9:73:71:37:39:12:0a:3f:ca:92:
a4:10:18:dd:d4:9b:ad:3c:4e:c7:5c:82:81:e2:a5:50:2e:64:
c6:c8:2b:a6:2c:03:9f:2d:42:72:8e:3f:fa:2b:b5:ef:a6:01:
5f:08:cb:64:c9:69:2f:7e:a7:63:bf:bc:8f:a7:66:c7:d0:9d:
37:52:23:7e:30:25:25:9c:37:53:57:8f:ac:7b:a1:19:17:46:
a6:8f:95:7e:87:e7:80:35:b2:30:25:9e:4c:da:8d:2b:42:fd:
0a:d8:6a:fc:77:81:5b:40:a0:af:e7:46:7d:44:da:02:d9:cd:
24:3a:f6:fc:d5:68:53:fd:f7:12:7c:28:e3:29:3f:32:1a:2c:
b5:2d:02:f3:2c:ac:9f:45:97:b1:f0:1a:3d:ba:28:7f:d4:e9:
f4:20:54:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:45:21 2024 by rpki-client on console-ams.rpki-client.org