Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
File: 2ckTFygydpN9Q29LIW3No---Kog.mft (raw, json)
Hash identifier: UaH0vprQRfoAYZ+VQnyKbVRdbqfDh/LMQXUpdl8piKM=
Subject key identifier: 29:D8:28:68:0C:71:7B:E7:7F:8B:AB:56:CF:8F:8F:0D:14:0B:0D:38
Authority key identifier: D9:C9:13:17:28:32:76:93:7D:43:6F:4B:21:6D:CD:A3:EF:BE:2A:88
Certificate issuer: /CN=d9c91317283276937d436f4b216dcda3efbe2a88
Certificate serial: 019355E3DDD2AC9AF28F03744BF3B7D12B64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
Manifest number: 07D8
Signing time: Fri 22 Nov 2024 22:00:16 +0000
Manifest this update: Fri 22 Nov 2024 22:00:16 +0000
Manifest next update: Sat 23 Nov 2024 22:00:16 +0000
Files and hashes: 1: 2ckTFygydpN9Q29LIW3No---Kog.crl (hash: cHzr/ZfrRLTuvdM7bqUj6mNcTtNuyZVdgYjKyvj6MTw=)
2: d-h2LOkgUI5DR5f4h1C4rCCNJdQ.roa (hash: XUt0Ozmc1D5ACc5JW3tgj8hp613qy6tqdwSjh+Wou9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:e3:dd:d2:ac:9a:f2:8f:03:74:4b:f3:b7:d1:2b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9c91317283276937d436f4b216dcda3efbe2a88
Validity
Not Before: Nov 22 22:00:16 2024 GMT
Not After : Nov 23 22:00:16 2024 GMT
Subject: CN=29d828680c717be77f8bab56cf8f8f0d140b0d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:74:a2:8a:32:7d:b5:e0:05:49:0b:52:76:e8:
71:a2:66:31:ab:91:48:9e:d3:73:8d:b6:5f:c0:23:
5b:58:bc:8e:c6:a2:a5:92:d7:aa:5f:f2:6a:6c:c8:
91:22:21:a2:e4:00:8a:90:32:bd:73:c2:20:08:17:
30:eb:c9:10:3c:e1:24:45:cb:22:f2:91:9a:18:4b:
63:ad:22:43:b4:ed:09:a6:9a:24:cd:07:e3:c6:ec:
bb:d2:4d:e5:ae:11:2c:29:48:4a:37:68:89:f6:b3:
cf:cb:81:e9:8f:16:c4:e2:62:2c:61:9b:ca:89:86:
70:88:af:cc:d7:a5:29:26:32:0e:46:f0:50:41:92:
89:66:ba:b1:75:7a:fd:1f:3a:44:22:c4:d8:79:98:
4d:de:96:b1:6a:36:a6:4a:e2:43:d9:ed:89:d4:c3:
47:cc:bf:02:bc:f3:e9:ee:85:0a:f0:64:0f:43:e9:
0f:96:6a:1d:6b:a8:4c:e6:d2:fa:6c:23:eb:eb:1f:
e2:d7:33:78:56:6c:7c:fa:27:f6:20:f1:b5:cf:56:
42:8f:f8:9a:2b:9d:14:2a:15:15:48:43:96:f7:65:
12:c5:6d:01:dd:42:68:cb:c8:8f:4c:c9:82:61:34:
a2:cf:4f:a9:95:41:ed:a0:ff:e5:56:2b:79:38:4b:
23:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D8:28:68:0C:71:7B:E7:7F:8B:AB:56:CF:8F:8F:0D:14:0B:0D:38
X509v3 Authority Key Identifier:
keyid:D9:C9:13:17:28:32:76:93:7D:43:6F:4B:21:6D:CD:A3:EF:BE:2A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ckTFygydpN9Q29LIW3No---Kog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f636c6-10d2-4f6f-b418-50b9d52361c3/1/2ckTFygydpN9Q29LIW3No---Kog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:f3:a5:ef:29:d4:e7:91:0a:bd:0a:db:36:7d:18:aa:00:e8:
9f:c4:e2:a3:f1:4e:69:b0:3a:61:51:12:b0:1e:d9:cc:46:81:
7a:65:f8:8e:03:13:f2:d3:27:65:63:e8:59:d0:81:25:d2:b6:
a6:57:21:cc:86:cf:f7:02:e8:a1:5f:05:e8:49:0b:16:9b:53:
87:0e:80:3e:db:c2:24:8e:08:5d:5a:eb:29:92:35:b3:db:fd:
d6:13:e1:64:c3:11:da:67:23:2d:b5:c5:3a:79:28:ec:0f:a8:
59:9a:63:49:b6:e1:fe:b8:f8:ca:f3:eb:49:1a:76:07:3c:15:
be:4c:95:cf:28:2d:f9:e8:a0:e8:59:b2:7a:b7:c0:14:2f:2f:
b8:69:05:5e:9d:4e:71:ee:e6:92:64:b0:30:e7:3b:23:dc:33:
bd:6d:3a:aa:49:31:d7:b4:e9:95:64:6c:e2:56:7e:0f:0a:77:
5d:de:2f:fc:21:c8:f9:bd:c9:01:07:48:3e:d7:aa:03:1c:db:
a8:e4:e0:32:86:74:4f:d3:1d:71:ed:3c:38:da:15:8e:5c:89:
36:16:ac:af:6b:e6:dc:72:03:21:97:2f:e1:c3:23:44:6c:d6:
64:03:09:eb:50:9e:09:4e:12:a9:26:48:92:6a:7d:40:83:7e:
89:02:54:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:42:33 2024 by rpki-client on console-fra.rpki-client.org