Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/02f6cc-9691-4831-8e2f-91d62e826428/1/KPXiqEB6tD1tJkGkeP-UkGUlb40.mft
File: KPXiqEB6tD1tJkGkeP-UkGUlb40.mft (raw, json)
Hash identifier: Fe2O9G0667HZvokIJhLH/Zun1KXsjQnTaRVvXPtEsLM=
Subject key identifier: 98:59:87:07:78:71:8B:9A:FC:E6:F8:1C:3C:35:94:47:82:0B:2D:1C
Authority key identifier: 28:F5:E2:A8:40:7A:B4:3D:6D:26:41:A4:78:FF:94:90:65:25:6F:8D
Certificate issuer: /CN=28f5e2a8407ab43d6d2641a478ff949065256f8d
Certificate serial: 018F874AA7A1F2F45C0097CCC9F3F14BF52E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPXiqEB6tD1tJkGkeP-UkGUlb40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/02f6cc-9691-4831-8e2f-91d62e826428/1/KPXiqEB6tD1tJkGkeP-UkGUlb40.mft
Manifest number: 0C48
Signing time: Fri 17 May 2024 16:02:47 +0000
Manifest this update: Fri 17 May 2024 16:02:47 +0000
Manifest next update: Sat 18 May 2024 16:02:47 +0000
Files and hashes: 1: KPXiqEB6tD1tJkGkeP-UkGUlb40.crl (hash: 0/cP1RUoZgj9BgtCg6KJHLC9sE800MffUYeOYQFnFwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/02f6cc-9691-4831-8e2f-91d62e826428/1/KPXiqEB6tD1tJkGkeP-UkGUlb40.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/02f6cc-9691-4831-8e2f-91d62e826428/1/KPXiqEB6tD1tJkGkeP-UkGUlb40.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPXiqEB6tD1tJkGkeP-UkGUlb40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:a7:a1:f2:f4:5c:00:97:cc:c9:f3:f1:4b:f5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f5e2a8407ab43d6d2641a478ff949065256f8d
Validity
Not Before: May 17 16:02:47 2024 GMT
Not After : May 18 16:02:47 2024 GMT
Subject: CN=9859870778718b9afce6f81c3c359447820b2d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8b:dc:38:c5:25:81:5e:e5:f0:76:31:10:f1:
aa:41:ef:08:08:70:e6:1f:51:ec:a1:bf:7a:88:f3:
59:e5:22:10:f3:e1:72:14:7e:44:5d:25:95:de:4f:
bb:35:7d:fc:71:bb:ea:51:d2:9a:15:9b:71:77:ef:
42:79:28:82:77:a6:1a:01:e0:e9:b3:f0:69:42:a6:
fb:8e:bb:f9:c2:00:4a:3e:0e:a4:f5:90:42:39:01:
67:be:3d:f8:d5:2f:29:32:80:31:72:48:9c:16:34:
6e:cf:6d:af:90:25:db:cc:5b:3b:fc:4e:0d:0b:84:
fd:16:6c:67:67:f9:b2:34:d0:e9:97:14:44:6b:08:
04:b1:6d:62:b8:55:81:b8:ee:eb:0a:86:5a:78:f9:
56:70:b1:9c:c5:6b:c6:6a:f3:28:65:ac:b8:ca:85:
70:25:b1:2b:59:69:02:db:06:6a:18:81:d6:70:27:
fa:71:67:e5:94:6b:9a:cf:43:5d:9c:92:8c:6a:77:
34:8a:be:15:4e:b1:4f:65:d3:94:d1:6e:73:b1:2c:
d6:f1:9f:59:e9:aa:f0:63:97:85:1e:3f:76:26:94:
a7:31:94:66:8c:95:da:f4:59:c6:ef:05:13:5e:ce:
2d:88:2a:cf:fd:6e:e3:cf:51:9b:dd:bd:33:9d:73:
88:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:59:87:07:78:71:8B:9A:FC:E6:F8:1C:3C:35:94:47:82:0B:2D:1C
X509v3 Authority Key Identifier:
keyid:28:F5:E2:A8:40:7A:B4:3D:6D:26:41:A4:78:FF:94:90:65:25:6F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPXiqEB6tD1tJkGkeP-UkGUlb40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/02f6cc-9691-4831-8e2f-91d62e826428/1/KPXiqEB6tD1tJkGkeP-UkGUlb40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/02f6cc-9691-4831-8e2f-91d62e826428/1/KPXiqEB6tD1tJkGkeP-UkGUlb40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:2b:f6:67:2d:0f:9f:cd:f1:a4:43:fe:16:9f:9b:7f:a6:05:
97:63:c9:22:56:62:b0:c5:01:55:ef:89:e2:15:1f:b7:89:db:
f0:48:81:66:ec:74:51:35:5e:07:b5:18:2f:cf:36:ba:05:18:
3d:61:5e:1a:f8:e1:c6:25:1d:35:33:28:dd:78:20:5c:c8:01:
2a:0d:31:10:a0:89:dd:31:4a:88:8e:3d:8e:d8:55:62:26:5f:
77:4e:f5:9a:76:72:24:cb:c6:53:47:1c:30:b3:7f:6a:9b:55:
78:55:67:c7:fc:6b:35:11:42:de:01:98:17:b6:46:64:55:f6:
37:74:f2:e9:05:aa:99:f8:0b:88:79:55:5d:fa:08:35:42:c4:
7d:9a:8e:0f:78:57:85:79:1a:b1:cb:57:f4:8d:16:f4:f2:d0:
8d:e6:77:e7:0f:c3:05:0b:aa:e0:c4:51:2e:55:ef:05:04:df:
d7:1c:15:29:41:46:b7:91:bd:cb:f9:08:a0:4a:db:54:0b:fd:
62:ac:64:ef:15:6f:3a:cd:0d:9e:18:2d:38:0f:4b:e0:27:62:
a3:93:24:61:86:b6:d4:80:5a:77:78:be:ca:9d:2c:ca:a7:65:
66:41:9e:36:b5:9f:a8:0c:ae:05:8d:2d:e3:aa:27:7d:e7:dc:
6f:fc:a7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:44:26 2024 by rpki-client on console-ams.rpki-client.org