Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
File: kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft (raw, json)
Hash identifier: XJA0e95TzoirE001a0qN3xQ97goZG7BotD34a8GJZxk=
Subject key identifier: 81:4D:FD:80:A8:5D:99:53:54:6F:59:EE:74:A1:57:3D:9D:67:22:BD
Authority key identifier: 90:87:83:3E:02:5B:23:20:F9:05:3A:10:3B:A6:1D:E5:2E:AB:2A:FB
Certificate issuer: /CN=9087833e025b2320f9053a103ba61de52eab2afb
Certificate serial: 0193579BCADEC20B8AC0E6023C7A45F20270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
Manifest number: 031C
Signing time: Sat 23 Nov 2024 06:00:47 +0000
Manifest this update: Sat 23 Nov 2024 06:00:47 +0000
Manifest next update: Sun 24 Nov 2024 06:00:47 +0000
Files and hashes: 1: kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl (hash: tP0MNEoeYwLBj7SgGubwUxqW0UZDbA8q/Mdnqk3W50Y=)
2: yfaCoEQGZ1B5vI35ePi2mj6CCsc.roa (hash: 4dtWlU+THt08+uD9+UM94CJzz5rDBT7irahl7TkEhdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:ca:de:c2:0b:8a:c0:e6:02:3c:7a:45:f2:02:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9087833e025b2320f9053a103ba61de52eab2afb
Validity
Not Before: Nov 23 06:00:47 2024 GMT
Not After : Nov 24 06:00:47 2024 GMT
Subject: CN=814dfd80a85d9953546f59ee74a1573d9d6722bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:56:5d:f6:0c:19:b7:76:ad:af:9f:9c:4f:ba:
66:78:03:25:c5:65:ba:04:05:b8:e0:8e:3f:28:ba:
fb:9e:40:fb:f9:8e:c5:c5:90:8b:0a:a9:0c:8c:46:
13:f0:06:2d:54:0e:df:fb:e7:a4:c4:4d:64:19:f2:
c1:0b:ca:d9:b3:cd:6e:96:62:c0:61:d9:8d:76:07:
72:d0:12:83:a8:af:7c:fb:04:32:75:78:bd:33:1b:
ab:2a:1d:91:8b:7b:26:fe:17:8b:98:45:49:f1:18:
a6:a6:ad:d3:f1:43:5b:92:e8:cd:09:d6:9e:af:1f:
dd:76:b6:54:5f:ed:bb:95:cd:c5:8b:02:54:8d:78:
91:25:a5:17:94:2c:ef:9a:8d:e0:71:df:5a:81:f7:
1d:7b:d9:68:e0:fd:3f:7a:43:2d:6d:e2:2b:cd:88:
0c:ce:51:2b:e6:8d:fe:b9:79:f2:af:5e:de:84:f9:
47:28:32:ec:09:2e:95:1f:ba:06:03:e8:7c:32:03:
20:64:1a:7d:91:cd:59:55:1f:63:20:00:78:4f:ee:
b9:4a:72:43:33:e1:fb:43:b0:18:de:d4:1f:99:42:
e8:6e:1a:6a:e1:35:15:79:54:87:d9:ec:c9:b0:d8:
08:c3:e7:cd:b9:0f:0f:46:0f:6c:86:43:fe:53:67:
dd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4D:FD:80:A8:5D:99:53:54:6F:59:EE:74:A1:57:3D:9D:67:22:BD
X509v3 Authority Key Identifier:
keyid:90:87:83:3E:02:5B:23:20:F9:05:3A:10:3B:A6:1D:E5:2E:AB:2A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:53:50:8b:21:f6:f5:ed:03:c9:ec:21:62:a5:50:78:2a:fd:
41:bb:c6:15:c1:15:32:27:94:e9:0d:a4:48:f3:57:70:c3:9c:
04:15:60:35:6c:70:47:ce:7c:9c:a3:16:96:3a:4a:a4:13:0a:
66:71:1d:d2:cf:85:0d:96:9e:a8:d9:77:25:67:e7:99:8d:2a:
e1:ce:c0:5f:c6:30:ed:2b:41:67:4d:3e:d3:8e:49:14:97:d7:
54:a7:b1:1c:96:93:4a:2d:f7:a6:d6:57:54:df:22:eb:20:18:
33:4d:aa:f3:f6:a2:3c:be:95:da:e1:eb:d9:ec:da:3c:1a:17:
27:04:6a:f0:74:a1:38:bb:5a:3c:e1:54:26:94:a5:51:d6:ac:
26:ab:32:41:d6:30:41:4c:27:81:6d:f7:51:63:b0:cd:73:10:
bf:34:af:13:8c:00:a3:7d:19:6d:66:38:32:f5:38:d9:06:99:
a4:01:f0:23:f9:61:9f:80:42:7c:5c:8b:87:8a:2a:38:74:c3:
9a:60:59:ec:2c:a4:4e:25:64:a0:c9:80:38:28:4e:67:f1:dd:
89:f7:81:ab:9c:28:15:b9:04:6a:82:47:3a:a0:ba:d6:f1:1e:
45:62:ff:39:f7:3f:69:e8:36:f9:87:7e:e6:07:b3:af:0c:f0:
3f:76:db:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:36:13 2024 by rpki-client on console-fra.rpki-client.org