Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
File: KXrnWSylJJHcFmow_hR31xK9Rl0.mft (raw, json)
Hash identifier: 2wpEcZJRhHUFiEXt2FgzWI0TuPdRNk7u6v39Ci6jBes=
Subject key identifier: 96:3D:2F:DF:2A:D7:BA:29:E0:3D:67:40:7C:E1:71:72:CE:82:C1:AE
Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d
Certificate serial: 01935651C0624E20FE276529414361570414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
Manifest number: 1381
Signing time: Sat 23 Nov 2024 00:00:18 +0000
Manifest this update: Sat 23 Nov 2024 00:00:18 +0000
Manifest next update: Sun 24 Nov 2024 00:00:18 +0000
Files and hashes: 1: 1X07qfAuxtb3a7iVVxKVOBF_g3E.roa (hash: 3nVwR/tzl2Mm7GvKEY7GAeFvMzp94047umEZoJkDpk8=)
2: 6t9icJaYCV18zfqCTWXG_iZERm0.roa (hash: Ft8Wnep1HEXHhBo0A0NCMXIzxphln4N5EJLDJz5rqOc=)
3: 701tZk2HGE4Sz8qVEZbJ0k-MKls.roa (hash: zECqP17EX29rqrVoHpx5FsMRGI7F+8MHELi1g/7vy74=)
4: FGsL__Hdnu2FdQDFH9ATeFhif0Q.roa (hash: JVqOty6HQJMARdCy4KWAXukarIp01bubF/91RyWCFPo=)
5: KXrnWSylJJHcFmow_hR31xK9Rl0.crl (hash: RZUrCGQA8PR1v7Atk7bXekchRuumKMbqgqxEbA0QLuU=)
6: exb-9vyfpS78VwmocNJ6DJgrEcg.roa (hash: cHIY4RtkUYGGP/0SoMSIh/bMHIW+rwtKCtApzHNFgDQ=)
7: k94io_FtUbMo2NSp-RxBt85QId8.roa (hash: ZqjrS/bO0A3Njaa0d3rolvnyU8yYvNos+hQcgXxq2ZI=)
8: pLvK0bnpjcS5YzPt0yHkKKoGKds.roa (hash: tN/ID28PuqS0easHI77UaJccAQXmFfeukorXtiMUtnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:51:c0:62:4e:20:fe:27:65:29:41:43:61:57:04:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d
Validity
Not Before: Nov 23 00:00:18 2024 GMT
Not After : Nov 24 00:00:18 2024 GMT
Subject: CN=963d2fdf2ad7ba29e03d67407ce17172ce82c1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a4:09:f5:ec:35:ae:d1:fb:d2:ee:49:16:3a:
6b:04:21:72:90:ef:da:b9:45:40:f7:60:81:07:16:
9e:75:a0:61:ba:9b:0a:0c:25:c6:4b:86:86:1b:b4:
79:2b:c0:62:51:05:f7:8d:c0:6e:18:1f:bb:d4:83:
0d:64:6e:50:43:6e:69:7e:5d:a6:9e:03:eb:ac:48:
b9:72:6b:28:2a:f9:30:cf:9c:44:55:07:4e:7d:7e:
fc:ae:11:4b:b1:eb:d1:d1:ca:93:f0:9d:19:d5:8f:
47:3b:1a:35:fa:02:cb:30:6e:48:25:77:a2:2a:a1:
a0:1a:cd:96:28:c5:77:8c:5e:2c:ca:ce:7d:1e:f1:
b1:15:2e:70:b9:a4:99:86:cf:e0:14:6c:e6:68:a8:
66:32:fe:63:7e:12:a7:fc:7b:19:f7:6b:a0:49:0c:
27:0a:24:3d:4b:7b:96:6e:30:0b:60:0e:f3:b3:8b:
cf:f8:6a:66:2d:56:ab:bc:3a:05:cc:6d:ca:c0:25:
e5:03:57:61:0f:39:49:cc:9b:cd:bb:ee:a7:af:c5:
e5:af:c3:ff:14:d2:c4:ac:31:96:99:9d:2d:64:de:
b3:e9:d0:f3:78:d0:52:af:3f:e9:fe:1f:6b:d6:27:
ef:8c:b7:21:8e:33:0f:c8:71:3f:3c:c6:47:6b:91:
46:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3D:2F:DF:2A:D7:BA:29:E0:3D:67:40:7C:E1:71:72:CE:82:C1:AE
X509v3 Authority Key Identifier:
keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:5c:84:d2:8e:e3:c4:16:e6:38:aa:0f:fc:e9:6d:b6:7f:2d:
3c:d3:cd:ae:0c:a5:9a:88:38:3f:e8:c4:2d:8d:50:52:1e:26:
f8:a6:2d:16:d0:07:ad:96:97:bf:c7:ba:b1:db:4e:b9:f3:b0:
83:b2:18:62:38:b4:27:f4:50:40:1e:ff:05:2a:93:c6:d2:31:
f1:c2:73:97:8b:44:9d:58:16:c6:2d:f9:9f:97:43:5a:8f:98:
01:29:0c:61:35:06:f9:e3:7b:e1:f0:dd:3a:ce:9f:5e:44:12:
d9:8d:14:19:6c:cd:0f:ea:4b:c6:89:78:f9:f8:2f:8a:b7:22:
09:87:a0:42:c9:0e:bc:72:10:0d:e6:53:b4:37:bb:3e:10:24:
1c:41:3f:6f:ec:b5:c5:be:03:9f:b9:0c:67:55:bf:4f:eb:ba:
31:0b:9a:c5:c7:3a:d6:9c:f8:27:25:ff:09:93:bd:49:e2:68:
c7:f8:a0:81:06:d5:6b:34:09:e3:46:ab:e8:4f:14:5b:66:35:
93:7c:5f:2d:55:4b:dd:d8:6c:7c:ca:81:12:68:84:d9:ec:f2:
1d:41:92:fa:3e:72:6f:30:17:89:93:55:29:39:e5:5a:07:36:
c4:c8:8d:1f:1c:b5:82:18:41:fe:04:65:ae:15:89:c4:57:83:
cc:b6:7d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:18:35 2024 by rpki-client on console-fra.rpki-client.org