Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
File: KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft (raw, json)
Hash identifier: N1lOe5zrJdusJK+mJIyuotcFCWVX0JcxSK+URTO2Vf4=
Subject key identifier: C1:BC:16:BE:A4:27:C4:3E:71:6F:04:47:53:FE:96:B3:EA:26:BA:BA
Authority key identifier: 2B:17:07:88:97:94:CE:A0:62:2B:D4:92:1D:6B:DB:DD:56:EF:0B:06
Certificate issuer: /CN=2b1707889794cea0622bd4921d6bdbdd56ef0b06
Certificate serial: 01936520848C8DECF13AB2C5A8EE550C4B7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxcHiJeUzqBiK9SSHWvb3VbvCwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
Manifest number: 0347
Signing time: Mon 25 Nov 2024 21:00:49 +0000
Manifest this update: Mon 25 Nov 2024 21:00:49 +0000
Manifest next update: Tue 26 Nov 2024 21:00:49 +0000
Files and hashes: 1: KxcHiJeUzqBiK9SSHWvb3VbvCwY.crl (hash: aCM8U4yLV7qDmol7j4T6dc5doZ5RolhV9ph1pGcIMWc=)
2: fTgqHx8XnJ_vGIkZIaaYvUlg1LQ.roa (hash: jvlU2zf58URx/nHgs2m8nt5IoJqtnZ0RqJji3p44LkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KxcHiJeUzqBiK9SSHWvb3VbvCwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:65:20:84:8c:8d:ec:f1:3a:b2:c5:a8:ee:55:0c:4b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b1707889794cea0622bd4921d6bdbdd56ef0b06
Validity
Not Before: Nov 25 21:00:49 2024 GMT
Not After : Nov 26 21:00:49 2024 GMT
Subject: CN=c1bc16bea427c43e716f044753fe96b3ea26baba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:03:dc:be:6d:c8:c5:d6:39:b1:ba:f2:16:22:
4c:a5:b5:cf:06:1f:48:95:13:37:30:62:a1:a0:62:
ed:f5:87:95:4d:22:a6:f6:21:57:bf:3e:f1:66:7c:
d0:0c:56:3b:e7:8d:fa:9f:d6:fd:b0:bf:6c:93:0d:
89:af:28:0a:c8:d6:3d:e3:09:bd:ff:1c:b0:56:38:
02:90:13:b3:73:df:e0:3a:77:e6:21:5d:cb:00:e0:
dc:cd:23:17:42:4b:69:c4:94:14:5b:25:ca:bf:ce:
d0:b3:08:f8:f8:61:18:59:98:87:d8:f1:c7:31:1c:
7a:ac:2b:ce:fa:e4:4a:2d:f4:98:64:a3:23:d3:4b:
a6:c2:e0:f7:ae:ce:45:d5:bd:79:82:7c:cd:5b:7d:
99:ad:f0:64:e4:7c:c8:be:28:51:83:9f:df:40:82:
70:6c:23:eb:d5:38:1e:5c:36:ec:57:9f:fb:fd:c4:
7e:8d:05:ae:17:2f:23:3a:94:19:bb:53:00:91:9e:
dd:b5:e9:61:2b:2d:a6:83:58:57:16:a4:6a:12:33:
fd:28:ff:41:6f:9f:13:b2:7a:7f:3e:8c:02:bb:dc:
bc:c2:77:41:85:7e:77:51:8d:bb:ed:73:fe:65:db:
80:dd:0a:6a:4a:a4:74:fe:56:52:16:d7:ea:b4:ad:
38:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BC:16:BE:A4:27:C4:3E:71:6F:04:47:53:FE:96:B3:EA:26:BA:BA
X509v3 Authority Key Identifier:
keyid:2B:17:07:88:97:94:CE:A0:62:2B:D4:92:1D:6B:DB:DD:56:EF:0B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxcHiJeUzqBiK9SSHWvb3VbvCwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:99:17:1f:64:fe:ab:ec:14:d5:a8:a4:64:04:f7:cf:41:04:
83:99:af:dd:bb:7f:4e:a3:df:02:ff:77:cb:c6:ea:95:74:e9:
fe:2e:15:f8:83:53:7c:d6:1f:bf:73:34:a5:1a:2d:f7:22:dc:
b7:be:41:f3:9b:e9:28:bf:4c:98:2f:2e:f1:ee:d4:33:da:08:
3d:85:44:72:12:5b:09:bc:b5:28:b1:7a:2e:a5:d2:7a:6a:8e:
53:df:b3:21:0f:aa:61:09:59:0d:df:1f:6b:92:cd:db:67:76:
9f:04:e7:fa:f7:71:42:58:e5:ad:43:c5:19:94:e2:e8:d4:bd:
48:86:b9:3e:9a:c4:ed:66:4f:3d:da:9f:4f:d4:b2:ac:8f:d4:
1f:54:37:ee:5a:5b:10:f9:d2:7e:3f:ca:79:4e:2c:4a:04:0e:
e1:68:3c:3a:7b:e5:0f:e4:5c:6f:1c:c3:29:f8:15:72:ad:2e:
73:b1:e5:80:c0:ae:5d:e2:da:3c:c7:7f:f7:5e:51:b6:ff:96:
a3:d5:91:ee:d0:b5:3d:07:5d:4e:0b:6f:7c:bf:3f:1c:91:64:
48:4c:1e:d6:12:fe:4b:3b:c1:4e:07:e5:b4:e7:37:48:53:e4:
9d:07:1b:9d:45:45:d3:b8:75:e4:22:16:a1:5f:58:67:27:33:
f7:17:66:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNlIISMjezxOrLFqO5VDEt6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMTcwNzg4OTc5NGNlYTA2MjJiZDQ5MjFkNmJkYmRkNTZl
ZjBiMDYwHhcNMjQxMTI1MjEwMDQ5WhcNMjQxMTI2MjEwMDQ5WjAzMTEwLwYDVQQD
EyhjMWJjMTZiZWE0MjdjNDNlNzE2ZjA0NDc1M2ZlOTZiM2VhMjZiYWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwPcvm3IxdY5sbryFiJMpbXPBh9I
lRM3MGKhoGLt9YeVTSKm9iFXvz7xZnzQDFY75436n9b9sL9skw2JrygKyNY94wm9
/xywVjgCkBOzc9/gOnfmIV3LAODczSMXQktpxJQUWyXKv87Qswj4+GEYWZiH2PHH
MRx6rCvO+uRKLfSYZKMj00umwuD3rs5F1b15gnzNW32ZrfBk5HzIvihRg5/fQIJw
bCPr1TgeXDbsV5/7/cR+jQWuFy8jOpQZu1MAkZ7dtelhKy2mg1hXFqRqEjP9KP9B
b58Tsnp/PowCu9y8wndBhX53UY277XP+ZduA3QpqSqR0/lZSFtfqtK04+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMG8Fr6kJ8Q+cW8ER1P+lrPqJrq6MB8GA1UdIwQY
MBaAFCsXB4iXlM6gYivUkh1r291W7wsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3hjSGlKZVV6cUJpSzlTU0hXdmIzVmJ2Q3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9iYWNjNzctZGYzMC00OTQxLWJlMzMt
ZGNiNWI5ZTg4ZTlhLzEvS3hjSGlKZVV6cUJpSzlTU0hXdmIzVmJ2Q3dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9iYWNjNzctZGYzMC00OTQxLWJlMzMtZGNiNWI5ZTg4ZTlh
LzEvS3hjSGlKZVV6cUJpSzlTU0hXdmIzVmJ2Q3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYJkXH2T+
q+wU1aikZAT3z0EEg5mv3bt/TqPfAv93y8bqlXTp/i4V+INTfNYfv3M0pRot9yLc
t75B85vpKL9MmC8u8e7UM9oIPYVEchJbCby1KLF6LqXSemqOU9+zIQ+qYQlZDd8f
a5LN22d2nwTn+vdxQljlrUPFGZTi6NS9SIa5PprE7WZPPdqfT9SyrI/UH1Q37lpb
EPnSfj/KeU4sSgQO4Wg8OnvlD+RcbxzDKfgVcq0uc7HlgMCuXeLaPMd/915Rtv+W
o9WR7tC1PQddTgtvfL8/HJFkSEwe1hL+SzvBTgfltOc3SFPknQcbnUVF07h15CIW
oV9YZycz9xdmpQ==
-----END CERTIFICATE-----
Generated at Tue Nov 26 03:26:46 2024 by rpki-client on console-ams.rpki-client.org