Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
File: KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft (raw, json)
Hash identifier: /f1AIiCPkozgxcf4kFEKNu8u+r3tP16uvT/MnswBi10=
Subject key identifier: 5D:06:06:E8:82:EC:37:26:C8:39:C4:FF:B5:D3:69:E8:35:E8:42:81
Authority key identifier: 29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
Certificate issuer: /CN=292d120970515846360ea223e9a0e6a3c3896934
Certificate serial: 0190524608C89F212FEF47E34DCB7692309C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
Manifest number: 11E2
Signing time: Wed 26 Jun 2024 02:00:39 +0000
Manifest this update: Wed 26 Jun 2024 02:00:39 +0000
Manifest next update: Thu 27 Jun 2024 02:00:39 +0000
Files and hashes: 1: KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl (hash: 0OkVXb1rN2QACPTK21DF1Kpg2APBct2h2VzPDaGknmQ=)
2: YiYxeZ-kXN71hSJr9bo7azD27b8.roa (hash: z0naVi8M0zqqDkmdT3ejLgI645AEXOCp/3QtrsnvKCw=)
3: zE_hvETmWKaaoyn5TFpnbiLJl78.roa (hash: +eT01zzvUeXBzvsgVRzHM5IgwTw5o8bFzRb2DGT8SiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:52:46:08:c8:9f:21:2f:ef:47:e3:4d:cb:76:92:30:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292d120970515846360ea223e9a0e6a3c3896934
Validity
Not Before: Jun 26 02:00:39 2024 GMT
Not After : Jun 27 02:00:39 2024 GMT
Subject: CN=5d0606e882ec3726c839c4ffb5d369e835e84281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f3:da:f7:2c:4b:cf:b3:31:9d:47:70:6e:e3:
14:ed:e3:0a:0d:ba:0d:ef:71:ea:f5:8e:d5:a9:34:
1a:15:36:d3:1e:10:fa:6b:4e:c0:11:20:43:a6:f4:
04:b9:46:83:95:d3:4e:de:76:a8:0b:cb:ef:fe:b3:
4a:ec:1d:16:61:c8:9d:3d:39:75:15:44:13:a7:7f:
e5:2b:44:95:29:37:19:80:de:25:df:1c:5c:49:c9:
28:17:50:3f:95:44:e9:55:73:67:3d:d8:c0:05:d9:
f7:76:bb:e6:ed:f0:d7:7b:43:3f:b4:fd:c3:59:42:
d5:71:aa:35:a1:0c:18:71:2f:aa:48:2e:fe:a4:1e:
b2:73:ff:a0:a2:78:54:53:78:5c:25:0d:87:17:c0:
92:e5:45:6e:f4:80:8f:37:f4:d3:41:4c:54:54:f0:
fa:01:5d:57:63:aa:e6:cf:67:e4:95:75:a3:ad:42:
91:08:20:70:6f:6f:42:0b:5e:10:f5:0c:81:5d:be:
c1:ce:75:0e:a1:d9:8f:1c:fd:19:44:51:ce:68:93:
5e:e6:1d:4a:1c:4a:75:f5:2b:f9:74:97:ef:d1:fd:
58:16:3c:ba:1b:89:6f:3d:39:7e:96:90:ef:24:90:
36:ec:67:e8:d1:17:22:08:99:04:6c:a9:c5:23:62:
3f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:06:06:E8:82:EC:37:26:C8:39:C4:FF:B5:D3:69:E8:35:E8:42:81
X509v3 Authority Key Identifier:
keyid:29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:83:ba:75:b9:53:94:ea:40:6d:aa:b8:ff:0f:37:fb:0e:81:
76:2b:ef:d2:4b:a2:f4:a8:57:14:b9:92:f0:84:97:0f:d0:ac:
4a:b1:4c:9e:4c:29:b1:10:1b:6b:69:0e:ef:86:ac:0c:38:ea:
e8:c6:4c:82:b4:d5:3f:48:fd:de:b5:69:3f:b9:ae:60:ff:d8:
c1:ee:0e:8d:d9:a7:18:61:fe:d2:59:46:17:38:79:d3:01:0c:
33:fd:a9:45:25:d1:0d:24:1c:d8:2b:72:40:d7:4e:e6:4a:c3:
ee:d3:af:a8:32:21:9d:6c:1e:b2:b2:1f:86:3f:9c:30:53:1c:
15:6d:17:13:6d:0a:48:79:41:6a:3d:10:01:9e:0c:7b:81:7f:
b1:ee:2d:79:71:2c:ac:4c:0f:b1:fb:9a:99:b1:f1:ed:c4:71:
65:f2:32:9a:48:ff:6a:bc:c8:05:b5:b0:d2:a7:4c:a3:81:61:
2f:e3:f3:2b:ca:a8:b4:b1:d3:db:7e:a4:5e:02:5f:41:ab:3e:
ba:70:4f:05:93:b8:2c:20:c6:8b:ed:a1:3a:c2:90:83:fd:22:
64:eb:2b:32:8b:ec:81:d5:5a:08:87:b2:b4:d5:82:ad:c3:11:
e1:33:01:a3:19:a6:3a:cf:a3:17:27:3e:4a:9e:81:6a:3d:5a:
74:e1:d5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:48:37 2024 by rpki-client on console-ams.rpki-client.org