Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
File: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft (raw, json)
Hash identifier: 3cgxMNesqU6ZR+4v1FLxIlkhxVYXepQUQ/+dMxF4ORA=
Subject key identifier: 06:FD:7B:B8:E6:6B:5B:41:1D:42:65:F4:98:1B:72:F5:F7:FF:0F:6A
Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0
Certificate serial: 0193572DE64FB98CCA52A912261CCA2741A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 04:00:46 +0000
Manifest this update: Sat 23 Nov 2024 04:00:46 +0000
Manifest next update: Sun 24 Nov 2024 04:00:46 +0000
Files and hashes: 1: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl (hash: +hm6KnxPCJ9UCrui1X8xmYe0CSeUXTp3g69JwdAdDk8=)
2: Nzvr0WDSK_lhCxbv62DyT5cKF-o.roa (hash: xvSPIvr41yxFF5t3qB7CbjM8GCAp+ahO3U6+60VleNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:e6:4f:b9:8c:ca:52:a9:12:26:1c:ca:27:41:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0
Validity
Not Before: Nov 23 04:00:46 2024 GMT
Not After : Nov 24 04:00:46 2024 GMT
Subject: CN=06fd7bb8e66b5b411d4265f4981b72f5f7ff0f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8d:f0:81:75:30:09:b9:35:dc:37:b1:2f:20:
d7:32:01:f5:3c:6b:f2:63:3b:b1:c0:be:46:19:a5:
3d:95:83:85:ef:7c:f9:bf:a3:e1:e3:8f:be:80:bc:
cb:5a:e6:27:25:6a:56:52:bb:56:d9:fe:bc:8b:e5:
08:55:2d:c4:52:f0:05:f4:d2:f0:cb:52:f6:a9:e9:
74:0e:ed:85:f1:09:65:bb:9d:7d:2c:1b:d2:24:9b:
bc:c0:20:53:89:ec:01:8e:b1:4e:73:2e:1c:a6:b9:
dc:4e:f8:30:0a:6a:6c:31:97:c2:48:09:ec:17:41:
10:e3:7c:79:04:43:d3:76:dd:a5:86:67:2d:16:d3:
57:82:f9:6e:7c:ad:d6:89:55:d3:98:e2:21:1d:7f:
51:f1:67:c5:60:7c:cb:10:6f:9a:91:db:3f:e6:1e:
61:6a:0e:78:98:84:2d:70:0d:ff:8e:59:e6:d9:58:
cf:ee:71:b6:d9:91:1b:dd:ad:90:87:e8:d5:fb:d6:
30:91:75:61:55:98:bc:86:a2:cf:d5:7f:2f:08:ee:
a3:ee:37:e8:4f:c1:8a:ea:d6:5f:ed:1a:e4:b3:5f:
50:41:8d:86:a8:d4:64:f7:2f:36:10:c8:ae:29:eb:
c0:8f:68:cc:6e:79:a0:3c:c6:a6:37:84:b4:7c:15:
b0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FD:7B:B8:E6:6B:5B:41:1D:42:65:F4:98:1B:72:F5:F7:FF:0F:6A
X509v3 Authority Key Identifier:
keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ab:22:86:5c:6a:9c:71:60:c6:96:93:ef:b6:15:77:40:db:
03:d8:cd:6f:23:32:66:f7:63:e6:89:11:86:63:00:fb:6f:68:
ee:1d:dc:e1:bf:f9:77:c2:51:a4:d3:94:a9:89:a9:46:8c:12:
a7:45:99:b0:c2:16:1e:fb:c6:f7:c7:11:22:d2:60:fc:10:90:
88:6e:5d:91:dc:7c:16:bd:2d:8f:84:df:9c:a7:b5:76:15:66:
70:95:bc:95:19:69:ce:9b:ab:cc:a0:e7:ad:82:24:a1:38:df:
54:f6:ae:39:47:56:9a:ae:ea:48:7d:0d:e9:9e:82:72:fd:6b:
d9:79:db:72:cc:d4:47:3f:f0:7f:92:b9:19:c1:26:0b:d1:b0:
93:2c:17:5d:8f:c4:95:be:e3:7e:77:47:04:6c:90:90:b4:86:
0c:ac:7d:5f:a9:63:1b:5a:7b:a1:e2:e6:32:60:6b:f8:a3:1e:
ca:fc:23:8d:08:a9:0a:64:36:df:0c:5f:e9:d2:0d:f1:ae:67:
10:fd:44:a3:fe:cc:cc:df:7c:79:b5:50:a0:8f:f0:e3:7e:48:
7a:37:c7:44:ef:c3:2a:50:6f:4d:b9:b4:22:9d:5c:6c:f2:d3:
d3:90:c3:8f:23:fb:73:e7:39:61:cd:74:42:c9:ac:2f:3b:ec:
00:e0:be:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:57 2024 by rpki-client on console-fra.rpki-client.org