Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
File: kQRcV5lsmjyeYnekMmsRgyFdW2o.mft (raw, json)
Hash identifier: D4M55CBijPmnmwqydaGfFTwT0zWEcfsnLeTr9C9WS1s=
Subject key identifier: 8B:A7:D7:9E:D1:41:62:80:94:47:10:CC:88:95:6C:11:E1:81:BB:02
Authority key identifier: 91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A
Certificate issuer: /CN=91045c57996c9a3c9e6277a4326b1183215d5b6a
Certificate serial: 01936AB4CEA890B917A97469C7CD53DCC61D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
Manifest number: 0D75
Signing time: Tue 26 Nov 2024 23:00:54 +0000
Manifest this update: Tue 26 Nov 2024 23:00:54 +0000
Manifest next update: Wed 27 Nov 2024 23:00:54 +0000
Files and hashes: 1: hngjTZ6cXLXkXlnxPKHBbXR3-JY.roa (hash: HeVk+dbYtuXEZg3c6Z9bxxZTpKOIaVL4f1N2Xi2c/QI=)
2: kQRcV5lsmjyeYnekMmsRgyFdW2o.crl (hash: /B4WvRTDMEqaqrnLTz6bZfzz5l3OHAYdRshaZOIshjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:ce:a8:90:b9:17:a9:74:69:c7:cd:53:dc:c6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91045c57996c9a3c9e6277a4326b1183215d5b6a
Validity
Not Before: Nov 26 23:00:54 2024 GMT
Not After : Nov 27 23:00:54 2024 GMT
Subject: CN=8ba7d79ed1416280944710cc88956c11e181bb02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c8:9f:5c:c3:cf:6a:c6:13:fa:85:61:f8:12:
a4:be:b1:53:43:95:76:0b:a4:83:98:29:bf:a8:3a:
1e:79:f6:db:b1:ed:b3:c5:47:9c:9d:a9:2d:d7:0f:
48:95:41:90:99:db:86:b6:13:a0:e5:e8:89:64:35:
ef:db:42:9c:74:1e:3d:44:5d:e6:6c:b3:43:70:93:
c1:5d:38:cc:3a:a6:51:cb:6f:cb:1b:49:73:df:bb:
a1:57:1b:07:ad:43:8f:0f:f7:19:f3:fd:fa:87:54:
4d:e7:28:ee:58:0e:60:26:60:0a:7b:cc:ab:b8:83:
49:41:86:4c:e5:4f:93:84:13:11:cc:b2:c0:ca:e1:
a2:db:88:2c:8c:6c:83:26:1b:1c:11:72:f0:83:e2:
cd:84:85:89:00:63:11:e0:f4:ca:ca:e0:40:a9:4d:
13:7c:a7:1a:a3:b2:8e:da:57:6f:04:0f:21:11:65:
74:7e:7a:61:6d:df:6b:a4:99:d4:cc:56:e2:24:2d:
d2:1b:5a:de:7a:42:32:7e:d5:35:e8:3b:4c:33:d7:
0d:e8:48:d3:9d:a9:c0:e7:5a:b0:b6:d1:b7:a1:44:
1b:f8:b4:08:49:c9:19:83:ab:1e:3e:ef:e4:3e:d2:
af:5c:ff:89:f6:e5:35:35:70:83:af:d5:4a:31:dc:
3a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A7:D7:9E:D1:41:62:80:94:47:10:CC:88:95:6C:11:E1:81:BB:02
X509v3 Authority Key Identifier:
keyid:91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7c:8c:dc:6b:90:dc:dc:d3:08:fd:96:1a:e4:48:3d:32:5c:
a7:a7:15:ce:a1:ab:3c:a8:25:e6:e5:e5:19:84:8a:2c:61:1f:
0d:4f:81:37:66:6a:16:fb:1a:07:c6:19:47:e4:f4:0e:b8:31:
50:7c:a0:c2:77:8e:06:0d:00:f6:1e:25:44:a0:fb:ab:09:f1:
6a:14:79:8a:65:75:6f:61:f9:f4:f7:04:9f:6d:fd:01:90:4b:
55:9f:ae:71:50:d4:c1:68:f6:1e:29:c8:76:de:d2:82:b4:96:
77:ab:6f:96:4c:ac:0f:8f:2c:92:4d:43:93:78:fd:47:e6:1b:
de:0b:14:ea:0b:30:0a:24:0f:90:ad:b9:ab:23:47:5f:11:02:
18:37:19:8b:0c:52:f6:91:07:37:86:f5:5e:fb:30:a3:ad:56:
13:0b:28:a9:08:4c:58:91:33:35:58:03:1e:a1:a3:b4:3a:cc:
f1:da:53:a4:99:21:60:0e:0a:52:f4:4a:53:97:d6:e5:01:ce:
bf:c5:9a:19:94:be:0b:49:7b:70:0a:ba:6a:47:49:9f:a7:95:
0e:8a:5b:84:7b:d7:53:c5:37:81:07:2f:c0:fc:bf:cf:b9:56:
c0:24:db:cd:09:a0:f3:f5:38:6d:8a:30:5d:f6:8d:db:c4:4b:
95:b6:5f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:36:48 2024 by rpki-client on console-ams.rpki-client.org