Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
File: KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json)
Hash identifier: dIV3wXmzfnbfeqWROOjek56wBYXXdeJ9iqzbMULFdG4=
Subject key identifier: 3A:53:16:D2:ED:03:57:D0:B5:C8:55:AB:48:83:B5:C3:87:C6:18:AD
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial: 019352073CB99DDE32FFD96CF1DA30C55454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
Manifest number: 136F
Signing time: Fri 22 Nov 2024 04:00:26 +0000
Manifest this update: Fri 22 Nov 2024 04:00:26 +0000
Manifest next update: Sat 23 Nov 2024 04:00:26 +0000
Files and hashes: 1: 1PrDc34ymc0esPW5-DHXDo8ijGI.roa (hash: gqszA+5UBcV1CZif3ET3u8dbYxKdfrTSbS35G0yDDPU=)
2: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: CmZabnZEOJEsCqw2qS/OE6N4qu0VjdnXDWxxOicLX+g=)
3: rHxtg2T9xiMBrInVtNCZcROEVVA.roa (hash: UAF9iP/lVsWcP4FjW5sDTH0p2cf2OWJauOgFEAp0UNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:07:3c:b9:9d:de:32:ff:d9:6c:f1:da:30:c5:54:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Validity
Not Before: Nov 22 04:00:26 2024 GMT
Not After : Nov 23 04:00:26 2024 GMT
Subject: CN=3a5316d2ed0357d0b5c855ab4883b5c387c618ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:39:25:f8:07:c4:9f:31:ab:19:2b:9e:af:54:
94:42:9f:8e:fe:8c:f2:ec:eb:f3:a9:6a:ac:4f:32:
f8:82:dc:98:f5:96:10:b8:cf:00:3b:06:f6:bb:6c:
1a:aa:79:16:02:58:72:b0:32:2f:db:6e:13:1a:d1:
94:07:49:ef:2f:c8:f4:31:ee:c1:50:ea:93:3a:34:
1e:19:89:52:98:fc:3a:c0:19:3b:2f:53:af:39:e2:
48:fb:68:f6:d5:16:cc:03:aa:38:7f:2a:d7:b8:3d:
f3:e3:9d:2b:9a:19:f0:98:91:43:ff:a2:9d:9b:58:
16:58:71:32:d4:47:01:98:61:8d:89:ca:fb:10:48:
b1:1b:28:ed:07:7a:f1:81:2a:38:33:6c:3d:94:b6:
47:06:4e:1e:77:20:78:78:73:d7:2b:b1:0c:01:d7:
e0:0c:6b:bc:37:71:49:bb:d3:44:9c:da:72:2d:9b:
3e:ae:6e:17:af:63:ab:80:fe:a5:ed:b7:1f:80:09:
92:78:9c:37:59:60:c2:f0:9f:6f:1c:84:97:2e:93:
ba:92:fd:ac:d5:ce:dd:a6:57:79:db:cf:8c:73:b3:
14:e1:99:8e:c8:3b:14:6d:fa:8a:24:99:0d:a6:66:
0b:61:c5:10:6b:d1:54:3f:04:7d:2f:73:b1:88:38:
44:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:53:16:D2:ED:03:57:D0:B5:C8:55:AB:48:83:B5:C3:87:C6:18:AD
X509v3 Authority Key Identifier:
keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:1d:cd:6c:af:f9:0b:fa:43:77:5c:5f:95:3e:71:da:e7:b7:
ee:f9:7b:ad:a1:ad:fb:af:07:d8:c8:4c:90:6c:f3:f1:d0:71:
28:de:11:11:bb:82:41:a9:90:b5:a5:23:33:34:ed:bf:d8:62:
ca:66:50:f3:ef:22:67:fc:3b:8d:08:0b:c5:bb:b2:b0:bf:ff:
38:c4:6c:02:74:13:81:10:81:b1:98:14:f2:c5:68:ba:03:06:
4a:1e:6c:a3:65:1e:23:7d:51:c3:46:59:da:4f:7b:f6:a5:43:
2c:11:dd:a9:4a:b9:03:5f:3f:cc:e2:e8:6f:0e:3d:3c:37:84:
0d:07:8b:9b:92:98:72:35:37:24:9f:59:1f:64:b6:51:4f:f4:
d3:91:ae:d2:aa:07:61:b1:5e:b9:68:f7:a6:c4:34:9b:48:69:
20:7f:ee:a8:2a:0c:31:e3:95:5a:27:b8:2e:80:bb:fd:55:73:
e1:89:16:4a:4e:84:32:0f:64:9c:22:7d:f6:16:d7:6c:d8:21:
ed:9f:ff:c5:b1:69:ad:ba:58:b9:c3:46:b5:86:66:78:be:8a:
ab:04:92:f5:14:28:46:16:71:1f:38:4c:a5:62:22:c8:9d:48:
b3:51:79:3a:46:0d:ee:cf:92:52:58:bc:87:64:71:8e:b5:e6:
28:cc:70:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:40:24 2024 by rpki-client on console-ams.rpki-client.org