Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
File: kCmtIleaaAXB_4se5dc1KQwBNAs.mft (raw, json)
Hash identifier: buCrzEE2vQum4klPqBwtGQ2ee7JaVN3xbu7582zdSgg=
Subject key identifier: CB:AF:23:93:5A:0C:FD:E8:4D:20:07:33:86:9E:7A:BF:98:A8:98:E5
Authority key identifier: 90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
Certificate issuer: /CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Certificate serial: 018F87487F9890CE9CC0603BC34D439E4C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
Manifest number: 10E0
Signing time: Fri 17 May 2024 16:00:26 +0000
Manifest this update: Fri 17 May 2024 16:00:26 +0000
Manifest next update: Sat 18 May 2024 16:00:26 +0000
Files and hashes: 1: kCmtIleaaAXB_4se5dc1KQwBNAs.crl (hash: cHrM7RHlTCOxIGly4/XSCP7H7T6KuxhaAQb7g+vGE1U=)
2: x_ZIT4T3tcux8Be1pDOp1p2gxYE.roa (hash: g5G3oOg2XZaIbh4MRw4CKKu68m3Axa/0GOeZXMrazCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:48:7f:98:90:ce:9c:c0:60:3b:c3:4d:43:9e:4c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Validity
Not Before: May 17 16:00:26 2024 GMT
Not After : May 18 16:00:26 2024 GMT
Subject: CN=cbaf23935a0cfde84d200733869e7abf98a898e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0d:1b:85:a8:7b:04:d1:94:b7:a3:4b:e8:81:
40:11:ae:f6:e5:e8:c0:ba:50:41:67:00:0f:e5:19:
b4:6a:a3:b8:4b:3c:ef:29:79:bc:57:fb:21:42:01:
52:6e:54:31:0c:f0:da:71:a6:93:c6:7e:9d:18:52:
68:96:9d:03:ef:e3:3d:e6:bd:ee:27:af:6f:39:56:
58:f1:81:e7:0c:3f:ae:71:f3:25:66:bf:0d:99:d2:
0b:d9:59:f4:3f:2f:a7:6c:7c:b2:75:f1:cf:7e:73:
e0:71:bf:56:71:80:1e:23:a3:19:15:b9:de:f5:93:
01:82:03:71:5e:7b:e0:4f:ba:f0:f1:61:69:e3:33:
67:5a:67:bd:62:0c:f4:aa:0b:fe:19:3e:2a:9a:c8:
91:c2:80:44:0e:c1:c2:96:b6:2f:69:58:d0:43:05:
93:37:48:00:d3:72:43:3a:da:53:d6:1f:5f:30:a4:
37:ae:b0:ba:94:ba:f7:c5:2a:14:d9:df:f9:e8:9a:
84:34:c7:c1:6c:1f:8f:32:c6:2b:f7:48:ed:38:1b:
fa:f7:39:43:0d:f3:61:80:9c:d0:1e:00:67:2d:d7:
88:54:67:74:df:af:c1:1c:4f:29:82:a7:21:6a:b1:
c8:10:e8:ea:b4:1d:49:b0:c0:24:7b:b1:e7:87:28:
d8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AF:23:93:5A:0C:FD:E8:4D:20:07:33:86:9E:7A:BF:98:A8:98:E5
X509v3 Authority Key Identifier:
keyid:90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:9c:f8:0e:55:b3:d3:e3:78:4b:2c:79:cf:eb:0b:8a:6d:85:
a4:77:8b:b8:c1:12:5c:40:c4:23:02:be:ec:a8:ef:84:6d:51:
6d:45:12:78:ed:e4:43:7c:d6:09:93:9d:2d:07:d3:53:b7:93:
24:7b:ea:b1:53:40:4a:e5:17:d3:32:47:b6:5c:dc:a3:1a:76:
21:f9:0b:6e:59:40:b7:e8:43:83:35:42:0e:78:a7:52:c7:04:
83:d9:9a:20:c3:47:09:60:74:11:7b:c1:7d:9b:ff:5d:8f:66:
2a:d0:21:6c:98:4e:3d:9b:68:30:38:d3:6a:8f:75:de:7f:47:
7f:56:ae:d8:12:bc:e9:ce:a2:25:48:26:12:98:43:f1:e1:bd:
8b:77:a9:e0:99:9f:65:d8:3e:68:45:88:e5:60:18:9a:b1:ce:
bf:53:b4:82:8b:1f:8c:e9:6d:98:91:5a:54:7c:d1:23:9e:b4:
bd:ab:97:de:4a:ac:f8:62:81:91:54:a2:73:a7:34:c3:70:fd:
0c:9e:cd:07:01:9a:b3:b7:02:58:de:e6:e6:d6:a5:74:5d:87:
ac:59:c6:0f:6c:78:38:b7:4e:c4:62:8c:14:01:b1:2c:93:d5:
d6:da:15:ca:07:8c:ab:f1:f1:2a:23:eb:34:2e:95:2b:70:17:
e1:46:4a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:34:21 2024 by rpki-client on console-ams.rpki-client.org