Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft
File: KhfSVHdMl6nGhansXSTy_GlomQg.mft (raw, json)
Hash identifier: 8DflMAE4ku2k2pwNdFBMQUc6GoO7mDPzWTtduy4PhOg=
Subject key identifier: C3:C0:75:A4:7C:D3:DD:B5:87:90:00:50:74:26:CE:80:83:96:28:CE
Authority key identifier: 2A:17:D2:54:77:4C:97:A9:C6:85:A9:EC:5D:24:F2:FC:69:68:99:08
Certificate issuer: /CN=2a17d254774c97a9c685a9ec5d24f2fc69689908
Certificate serial: 019357D2EF1B182420A4B455C43A61B7863D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhfSVHdMl6nGhansXSTy_GlomQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft
Manifest number: 10AC
Signing time: Sat 23 Nov 2024 07:01:01 +0000
Manifest this update: Sat 23 Nov 2024 07:01:01 +0000
Manifest next update: Sun 24 Nov 2024 07:01:01 +0000
Files and hashes: 1: 9WFsq3uZZdssDU8GBjPAbEp0Gxg.roa (hash: Bfteh9sbF6Yy9esRf5jZ0jhZyvUnaacVYZs5p43jOEA=)
2: KhfSVHdMl6nGhansXSTy_GlomQg.crl (hash: La2DuEyPMYNLpT8sRa7DGKjT6XvL2vjE3/0goj2ueM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhfSVHdMl6nGhansXSTy_GlomQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:ef:1b:18:24:20:a4:b4:55:c4:3a:61:b7:86:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a17d254774c97a9c685a9ec5d24f2fc69689908
Validity
Not Before: Nov 23 07:01:01 2024 GMT
Not After : Nov 24 07:01:01 2024 GMT
Subject: CN=c3c075a47cd3ddb5879000507426ce80839628ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fe:d4:c8:03:3c:67:91:01:56:27:cc:d2:89:
83:1b:dd:27:fe:78:b7:50:23:1d:e2:40:8e:a8:2e:
27:1a:68:1b:20:90:8e:26:99:c1:50:c6:ff:02:2d:
91:ac:55:81:27:52:79:1b:28:4f:d1:59:20:db:41:
27:46:19:ce:af:f5:6c:39:85:a1:c0:91:f5:1c:1c:
c2:2e:9e:1d:05:0e:46:f4:c5:8d:40:c5:76:c8:7d:
12:0b:ad:0c:2e:e9:a2:89:f5:ac:f6:65:ae:bb:21:
de:15:7e:2e:e8:75:3d:c4:a2:36:1c:8e:33:9b:14:
06:f7:3d:bd:ef:7b:04:1b:3c:2e:fb:f1:13:bb:0f:
f1:2b:86:24:ea:f1:51:38:79:f2:b9:c7:40:f8:75:
b2:e7:31:94:3f:34:99:d2:af:2a:1c:83:78:6d:56:
ab:f2:da:82:aa:d9:56:22:86:d2:0c:fc:fb:20:e2:
8b:a8:60:76:5d:ab:a6:0b:0b:09:60:7e:6d:27:67:
19:32:7d:a5:fd:a9:8d:52:11:d2:ca:27:1a:95:13:
cc:7d:f2:ff:e3:0c:8e:e7:ec:9e:91:35:4e:b4:16:
4f:55:c9:04:f8:88:6b:b7:68:d1:87:76:ed:26:fb:
ff:2c:6b:f8:7e:54:94:73:72:f3:59:9c:b8:67:05:
61:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C0:75:A4:7C:D3:DD:B5:87:90:00:50:74:26:CE:80:83:96:28:CE
X509v3 Authority Key Identifier:
keyid:2A:17:D2:54:77:4C:97:A9:C6:85:A9:EC:5D:24:F2:FC:69:68:99:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhfSVHdMl6nGhansXSTy_GlomQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:fa:d8:47:2f:ba:4d:10:ff:e3:c5:2c:15:1a:79:f9:3d:dc:
68:c9:58:a5:bc:2d:07:1c:aa:0e:cf:b9:c2:51:6c:38:4d:d6:
d4:a4:36:51:d6:cd:3f:c9:8e:9b:a9:80:3e:46:e6:5e:42:61:
a1:d3:2b:69:a2:51:e1:ef:2a:d9:c3:2d:5f:21:77:05:cf:d6:
1b:c9:68:df:b1:63:ea:f6:72:ee:c1:f1:1a:b5:9e:48:90:af:
69:75:17:09:93:d6:a7:19:6e:ee:06:1e:a7:a2:0b:7c:03:46:
c4:2e:aa:02:1b:aa:97:22:38:76:db:73:71:21:c3:44:a9:44:
f6:53:55:60:f3:06:91:3b:4a:41:ee:42:47:15:d5:4e:87:15:
75:7e:f9:6f:d1:4f:23:37:4f:82:9b:ae:fb:30:96:84:3a:55:
86:af:ad:29:82:9b:9b:30:3f:f5:b9:a8:65:cc:98:37:be:62:
4e:9d:d7:ce:fc:77:91:41:a5:63:e5:48:89:43:cf:f8:ce:bb:
2f:a4:39:93:97:4b:41:5a:3c:40:03:06:90:b7:9e:f8:31:e3:
1b:93:d8:74:0e:06:ea:98:b5:e8:c7:c4:f3:e9:df:ed:bc:c6:
b1:4b:fa:09:f4:a6:35:c4:b3:6d:37:0b:f9:c8:bf:8a:3a:f5:
ac:3e:f3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:54:24 2024 by rpki-client on console-ams.rpki-client.org