Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
File: KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft (raw, json)
Hash identifier: nuVMHkWfOKvrS7CGGMDZlUQVfkPaXx9NmTDOKcb/CW4=
Subject key identifier: F3:7C:18:DA:A2:40:60:65:E5:FF:05:3C:63:11:76:2B:28:78:A4:CF
Authority key identifier: 29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
Certificate issuer: /CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Certificate serial: 019359C1063361BCCB6BB20562A3879CE93E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
Manifest number: 1376
Signing time: Sat 23 Nov 2024 16:00:42 +0000
Manifest this update: Sat 23 Nov 2024 16:00:42 +0000
Manifest next update: Sun 24 Nov 2024 16:00:42 +0000
Files and hashes: 1: 4Xd9JhXhBaDmrhm2wYWXJB08Dn0.roa (hash: bbsZwfCChkCYiS9njVPuOfsd0DMfKNdlsEzf1h+7bVc=)
2: KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl (hash: yHub17trZossC5PgrVpaGjzY5/Wrnnj49bTWchPOVrw=)
3: Nu2Q4WSlK0NAFDaTKQYyjGqUXBo.roa (hash: /Rdiw1XGCDFwvuPEgAqB9waTtdUx5Wa15CXUbdNcFMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:c1:06:33:61:bc:cb:6b:b2:05:62:a3:87:9c:e9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Validity
Not Before: Nov 23 16:00:42 2024 GMT
Not After : Nov 24 16:00:42 2024 GMT
Subject: CN=f37c18daa2406065e5ff053c6311762b2878a4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d3:34:ed:46:2e:ae:2c:50:87:ca:af:a8:c1:
62:50:ce:f2:8b:76:21:15:86:46:49:26:d5:4b:f5:
95:cd:f0:4b:29:db:ed:c3:fd:9b:0a:12:09:71:16:
db:85:8b:ba:18:71:83:df:1d:1a:4d:7b:e0:d2:c4:
a7:06:e9:af:bb:cc:52:b0:eb:be:12:1e:5d:82:4f:
60:77:1a:da:60:df:39:67:de:41:4c:4c:90:c0:fa:
f4:b2:f6:f6:f5:ac:18:ec:9d:fb:dd:37:fc:6f:cd:
0b:ec:8f:2a:82:d0:f2:94:d1:32:81:ca:42:aa:a1:
14:53:69:26:41:50:eb:d0:1d:6f:a7:54:eb:1c:30:
61:16:9c:1d:60:26:16:d5:4a:a3:72:97:2e:42:20:
81:e8:94:ec:48:1f:7d:3d:7a:bc:9b:4c:18:91:86:
41:ab:22:1d:be:ee:05:7f:6b:0b:67:31:f2:61:81:
9a:1b:75:02:63:41:ab:41:93:a1:98:b9:54:a9:d6:
dd:21:6d:a1:4e:93:c8:1f:71:c1:85:43:5e:83:22:
c9:14:83:ec:a5:90:af:da:9d:93:49:a8:2e:80:a5:
1f:0f:c7:e1:e6:b6:67:7d:ac:fa:3e:e3:ab:51:31:
f0:7f:64:9e:ba:92:17:d1:4d:3b:82:18:dc:8d:07:
86:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7C:18:DA:A2:40:60:65:E5:FF:05:3C:63:11:76:2B:28:78:A4:CF
X509v3 Authority Key Identifier:
keyid:29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:8f:a5:07:41:9f:2b:0c:fa:e3:50:6b:dc:94:1e:9e:ea:06:
8f:88:ad:05:37:ba:38:ac:91:a7:45:d5:3e:86:3b:52:b2:a0:
ee:25:e5:d6:83:b0:81:de:d3:82:4e:ec:63:13:fe:48:f0:4c:
30:4d:70:1d:14:9b:c5:dd:0a:14:bb:2c:04:c0:61:7d:df:c7:
64:3f:ce:05:52:38:a3:56:63:ce:fc:fc:6b:fd:52:82:6e:bb:
e9:60:65:d1:73:84:ec:e0:f0:6a:b8:79:32:2a:54:92:95:52:
68:6a:11:fc:37:d1:ee:3b:bc:98:e5:4a:62:4b:5b:69:c6:96:
0f:7f:11:db:cf:84:d0:54:8d:b7:04:67:06:99:c7:57:17:b3:
3a:ab:cd:ae:43:a7:c2:e0:05:22:d3:79:11:11:cb:5a:96:ff:
55:41:e0:2c:52:0f:4b:f3:ea:00:b0:bd:06:4f:83:eb:b3:f9:
4f:a7:11:de:a3:87:4f:cb:78:47:c5:3a:97:9c:dd:8f:b2:93:
63:55:48:d8:d2:34:c2:dd:b7:9f:3a:74:09:7a:cc:f2:f1:a8:
cc:4f:2f:38:1f:dc:15:6f:5b:c7:2f:be:1d:5b:c2:b4:3e:c9:
a6:a4:07:ae:5a:85:1b:93:da:62:f2:56:8e:74:cc:22:c3:dd:
44:c9:44:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:39:42 2024 by rpki-client on console-fra.rpki-client.org