Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
File: kCmtIleaaAXB_4se5dc1KQwBNAs.mft (raw, json)
Hash identifier: RmJ/+d7dzp5UdvBwI9Gd2gefyUeOUUSafVn+4fydBkc=
Subject key identifier: D3:32:68:19:3D:5B:DB:98:BE:C1:AE:9A:7A:E1:77:CA:5C:0E:4F:CC
Authority key identifier: 90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
Certificate issuer: /CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Certificate serial: 0193621FC72A3B5E6FCB025F599A3BC29FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
Manifest number: 12DF
Signing time: Mon 25 Nov 2024 07:01:09 +0000
Manifest this update: Mon 25 Nov 2024 07:01:09 +0000
Manifest next update: Tue 26 Nov 2024 07:01:09 +0000
Files and hashes: 1: kCmtIleaaAXB_4se5dc1KQwBNAs.crl (hash: 8jj3oYKgROl0f1BMhYbqd2OHxQtgbYTIOxPA896/93A=)
2: x_ZIT4T3tcux8Be1pDOp1p2gxYE.roa (hash: g5G3oOg2XZaIbh4MRw4CKKu68m3Axa/0GOeZXMrazCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:1f:c7:2a:3b:5e:6f:cb:02:5f:59:9a:3b:c2:9f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Validity
Not Before: Nov 25 07:01:09 2024 GMT
Not After : Nov 26 07:01:09 2024 GMT
Subject: CN=d33268193d5bdb98bec1ae9a7ae177ca5c0e4fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:04:74:5f:37:17:66:16:1b:68:96:21:d7:12:
1c:0c:a6:b2:2c:a4:9d:ef:55:06:b2:69:97:2d:13:
1d:b7:d2:99:a9:2e:62:a0:22:a5:01:9a:d5:1d:fe:
5a:a9:7c:0d:69:19:ba:3e:15:c2:6f:79:71:a0:27:
09:71:cf:bd:78:1c:25:b4:2b:56:5a:35:fd:26:05:
e0:b7:79:67:1e:97:07:90:6c:b9:a4:67:ef:6a:e4:
e7:fe:35:5f:42:e7:f1:3e:23:c3:92:e8:f1:6d:1c:
f4:6e:73:c9:2c:48:11:15:ff:cf:c1:a6:31:f8:16:
62:ea:af:b7:81:88:f9:27:ca:bd:87:5e:23:ee:be:
fb:b0:7f:9a:a9:48:3c:f8:fa:e3:cb:04:e8:a6:b6:
92:8d:44:5c:3c:8b:72:a0:7b:59:84:1d:83:58:10:
37:3d:25:fa:f8:06:d2:60:b7:2f:d3:3e:5b:de:ab:
10:bc:e3:ca:07:45:00:9b:ec:5c:76:68:93:59:e4:
0a:00:5b:4a:41:16:02:ac:6d:f7:8b:22:6f:89:5d:
ef:a6:31:3c:ce:2e:62:71:73:92:a3:16:38:60:de:
1e:51:7a:a5:a2:c2:32:5f:d0:d5:79:31:c3:d1:d9:
b6:3e:47:21:f4:e4:54:5c:3c:ec:0e:9e:11:b4:d7:
a0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:32:68:19:3D:5B:DB:98:BE:C1:AE:9A:7A:E1:77:CA:5C:0E:4F:CC
X509v3 Authority Key Identifier:
keyid:90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:8f:49:46:34:e4:2f:17:a8:7e:ab:b1:e7:7b:d2:3f:8b:2a:
c6:51:cc:4d:39:6a:59:81:84:03:d5:87:43:70:7b:73:47:b4:
23:7f:c7:64:30:49:29:38:15:33:c5:ab:9a:28:70:f2:4d:48:
66:f1:70:ca:2e:30:a4:70:f4:3f:61:a4:87:3b:ed:75:5d:68:
1d:7c:aa:7f:d8:9d:48:35:55:11:b1:7c:df:35:f7:b6:be:68:
bb:e1:22:4b:78:37:68:04:65:45:b5:77:79:b8:fb:c5:e3:4c:
3d:f0:00:e4:81:9b:d2:c4:5c:e8:27:f2:e5:08:f3:50:b5:87:
69:19:bc:ce:cc:c2:ba:03:c4:33:d8:9d:ca:6d:2e:05:0b:7d:
4f:8e:2a:54:a2:f3:fb:e4:63:3f:74:a7:75:d9:63:4d:1b:03:
f5:4f:c1:23:4c:5d:19:1d:78:19:34:e2:1c:26:50:60:a9:ff:
dc:8f:ba:83:08:d0:08:1d:9d:8d:44:51:02:0c:c6:ad:80:cc:
1f:60:d6:fb:70:f7:75:77:b7:e3:d4:8b:f0:91:74:fb:de:e8:
31:d6:0d:25:34:16:67:56:61:84:b6:31:38:0a:5a:6d:e2:81:
eb:cd:59:b4:fa:e8:4b:53:e7:80:e1:a0:88:d2:f0:69:d4:51:
39:86:7e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:33:10 2024 by rpki-client on console-ams.rpki-client.org