Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
File: kwTroql6CcmzsIz_g9-0dxQbwcs.mft (raw, json)
Hash identifier: o9v5kWdtgAwIQbDJyrzBjl5Zo7WA7e7syYEa/vi6yV0=
Subject key identifier: 8A:AA:61:5B:1C:30:07:C3:59:5F:24:27:5E:67:6A:58:B9:B3:73:9B
Authority key identifier: 93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
Certificate issuer: /CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Certificate serial: 01935508094C1041B457EBD6FA6CA21986FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
Manifest number: 1371
Signing time: Fri 22 Nov 2024 18:00:10 +0000
Manifest this update: Fri 22 Nov 2024 18:00:10 +0000
Manifest next update: Sat 23 Nov 2024 18:00:10 +0000
Files and hashes: 1: AjOuCJyXQ10AFVM5FxxJqGwF_xY.roa (hash: fvsoZHundr5WgSaOuIq+PAxDspNpypqcHTBZ14qU004=)
2: kwTroql6CcmzsIz_g9-0dxQbwcs.crl (hash: JQI0mlDKdazXGK9GVbc+h5rTpCI2RzaajY2bUjukn5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:08:09:4c:10:41:b4:57:eb:d6:fa:6c:a2:19:86:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Validity
Not Before: Nov 22 18:00:10 2024 GMT
Not After : Nov 23 18:00:10 2024 GMT
Subject: CN=8aaa615b1c3007c3595f24275e676a58b9b3739b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:41:b9:62:13:79:61:1f:4d:ff:3e:05:34:18:
3f:c3:3c:cd:d0:63:bd:df:eb:b1:d6:e9:15:e2:96:
9a:49:9e:27:6b:b6:32:4e:23:c4:b3:e9:36:ea:b9:
82:1d:12:a6:d2:d7:a2:24:2b:cd:f3:fe:9d:26:b8:
f6:d5:80:7a:e3:d0:e3:17:4b:27:8a:e8:3a:b4:d7:
e8:b7:aa:88:e1:03:b9:bd:27:0b:78:61:ea:8a:67:
1a:94:1b:3a:05:87:88:bd:03:32:0b:07:11:5f:20:
d7:09:86:46:ca:1e:05:82:77:91:9b:68:ad:74:55:
45:d9:68:3c:db:fb:90:8d:05:c6:67:8c:9c:6e:ad:
92:3b:b0:ea:11:5d:a3:af:09:1e:32:b2:92:0a:5a:
8a:3d:13:e7:0d:32:c7:2f:0b:07:a7:ed:3e:50:8d:
c5:40:33:57:01:e7:88:5c:c1:62:fc:42:75:bd:a4:
72:0e:be:f5:4c:2f:e7:88:97:04:48:6f:ad:82:f3:
58:00:e0:dc:58:72:23:59:5a:26:4b:b7:2f:41:9b:
06:c5:b2:eb:77:94:5a:20:45:0c:90:be:a6:5d:78:
91:ca:7b:61:56:bb:94:15:83:fa:e6:66:9b:8c:ad:
1d:8a:ac:d5:d8:a4:8f:c1:2e:7c:03:aa:51:0c:c2:
93:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AA:61:5B:1C:30:07:C3:59:5F:24:27:5E:67:6A:58:B9:B3:73:9B
X509v3 Authority Key Identifier:
keyid:93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:60:86:4d:c0:4f:b0:9b:99:88:a8:1b:7d:45:a8:bd:74:e4:
9d:e9:96:4e:b2:3d:6d:1d:fe:b6:0b:1d:da:ca:cd:11:d3:6e:
d2:87:1b:0a:f5:f9:d8:66:ac:c6:84:70:e1:a9:a5:c4:57:7a:
3d:87:78:c2:d1:4b:60:5b:78:da:1a:3d:0e:c8:d9:55:8b:53:
a6:3b:88:5b:c7:71:8d:0d:e5:d6:cb:bd:e1:10:fa:97:7f:2c:
c3:a6:16:81:af:67:ea:a6:f2:2d:5f:9f:f9:68:a3:56:0f:cf:
30:cb:5c:6a:c8:2f:e1:aa:10:5d:a4:d6:58:cf:61:86:6c:1f:
8e:ee:78:62:bd:3a:29:a9:67:77:0a:1a:32:65:5b:17:3e:90:
e2:52:7e:50:52:da:ac:36:cd:cb:d6:87:f7:fb:4e:db:9f:fe:
5c:ba:51:d4:4f:b9:e8:8b:5a:8d:f5:d4:c9:37:05:44:20:30:
eb:d3:fe:dc:78:51:19:a7:75:a0:6a:d5:f0:3d:27:58:a8:4f:
99:a3:c8:25:4d:a8:7a:23:76:26:0a:f1:59:15:eb:98:a1:62:
2d:5f:a5:bc:79:dd:e4:75:39:dd:c4:93:8e:95:64:3c:c0:fc:
e5:db:18:14:41:02:cd:87:89:a6:18:0a:15:58:47:20:35:94:
39:5f:3b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:29:07 2024 by rpki-client on console-ams.rpki-client.org