Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
File: KVqSt3jt36jc2RfLuHzeMboscy8.mft (raw, json)
Hash identifier: DL4/jIq/6IyDYBvasKhlMaJHqnROGCiEEQ3CTYCyj7o=
Subject key identifier: D5:99:2E:2A:D8:01:FD:F2:3F:9B:CD:05:24:4B:39:F8:9C:67:9C:B7
Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Certificate serial: 018F885AF9D430C981C4AF075129DE7A9C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
Manifest number: 117A
Signing time: Fri 17 May 2024 21:00:14 +0000
Manifest this update: Fri 17 May 2024 21:00:14 +0000
Manifest next update: Sat 18 May 2024 21:00:14 +0000
Files and hashes: 1: Fq9qiGZ--CZJvxBOe54VzFlZ4Ts.roa (hash: u3rbyxgrEC94JHN1UWfVZVfHCo0mq/NqeZvhVKl92YI=)
2: KVqSt3jt36jc2RfLuHzeMboscy8.crl (hash: i10Ek4DA67DG3asqpClw3mGYtCRQnlGnxHF0nhwTsUo=)
3: T-o8yWa6xmKcUltG9N2dNTfHF_4.roa (hash: 7QLOJFIipzK863a/vqSSSFIi1lLlsY4wpnLZQjG1sAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:5a:f9:d4:30:c9:81:c4:af:07:51:29:de:7a:9c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Validity
Not Before: May 17 21:00:14 2024 GMT
Not After : May 18 21:00:14 2024 GMT
Subject: CN=d5992e2ad801fdf23f9bcd05244b39f89c679cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:91:a4:3c:0c:22:36:d9:f7:dc:02:8a:58:03:
17:fd:6c:e4:3f:ea:b4:bb:dc:ab:c9:2a:91:36:f5:
d0:2b:7d:57:a3:bf:a4:4b:34:3d:fd:4b:9d:ee:7d:
76:30:76:d3:94:9c:fb:ef:35:75:75:e4:95:d8:3d:
20:d5:06:b5:5b:a3:db:70:db:ce:dd:9d:d3:2a:d5:
87:9f:d7:1e:a5:1b:8e:f4:54:73:5e:f2:27:bc:5e:
fe:84:a1:62:51:71:90:c4:e7:a3:6d:cd:a8:32:43:
02:03:27:3c:47:45:df:ef:f8:1d:57:05:fa:5d:07:
3d:21:8c:c8:e0:94:a5:ae:06:f7:93:a5:82:4b:ea:
89:c3:09:0c:b8:96:82:2f:2b:00:61:3d:8f:07:78:
98:cf:d3:6e:77:02:3a:fd:83:9e:21:76:c1:41:70:
0e:a5:78:87:5d:9d:44:ba:1a:19:af:ea:a0:5a:c6:
d3:06:c2:11:dd:62:b2:61:5c:d3:80:74:f1:37:b9:
34:ec:1a:f6:05:bb:38:7b:77:6d:d0:4b:96:ad:74:
6e:d2:57:a8:66:18:7f:a1:90:c8:3a:42:fb:76:6e:
33:c8:34:c0:af:95:90:aa:dc:e7:53:e0:e0:a9:a4:
f2:39:89:83:bd:c2:a8:f5:88:fb:7b:50:42:45:29:
fc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:99:2E:2A:D8:01:FD:F2:3F:9B:CD:05:24:4B:39:F8:9C:67:9C:B7
X509v3 Authority Key Identifier:
keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ce:82:f4:ee:70:d6:d2:a1:6d:d9:e7:18:cc:98:81:0e:35:
da:75:53:ed:7a:23:34:f3:52:47:d5:2c:ae:4e:26:d2:43:fd:
f7:60:9c:91:64:61:47:a5:50:4e:d7:78:57:ca:2e:a8:b4:06:
fa:a7:87:ec:b5:93:53:76:62:69:3a:d6:e6:ce:28:7a:c5:0a:
7c:7d:42:25:ee:60:71:1d:e1:42:49:eb:5e:6b:5f:c0:57:f8:
5d:20:1f:58:0d:14:30:32:b2:35:9f:f4:9f:c9:6b:ab:91:2d:
6f:85:f7:24:d8:93:fc:b0:8d:ad:16:60:d0:4b:83:08:cf:c7:
a6:91:14:5a:d8:79:1f:75:ca:4f:61:ba:45:93:c3:34:c0:28:
ad:a3:19:87:a4:51:43:fd:49:e3:21:9a:78:7b:38:79:a7:f7:
5d:4a:18:c7:00:92:3c:91:6e:f8:55:74:ff:cc:10:dd:f5:fd:
b0:31:f6:cb:42:01:7f:ce:3e:22:e8:b8:d9:01:2f:62:20:a0:
e0:70:1f:ff:4a:a2:3d:97:1d:9c:be:41:d9:73:2c:22:b9:a9:
34:85:27:20:e6:48:51:1f:ed:37:44:bb:62:17:7f:b0:3c:b8:
94:d9:f8:6a:a0:b2:76:f4:e2:04:2f:b6:bf:7a:2f:ee:07:72:
9a:bc:be:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:45:06 2024 by rpki-client on console-fra.rpki-client.org