Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
File: KTbYQje3g8aiQFErjKckFhwNYds.mft (raw, json)
Hash identifier: FjQJ5e+CZGgDN+JbZYPgw4Xqa4wD1BYXVMuyfjOSLag=
Subject key identifier: CA:61:4D:81:F6:35:C7:1D:AE:68:C5:54:9B:96:8E:F5:7A:24:04:86
Authority key identifier: 29:36:D8:42:37:B7:83:C6:A2:40:51:2B:8C:A7:24:16:1C:0D:61:DB
Certificate issuer: /CN=2936d84237b783c6a240512b8ca724161c0d61db
Certificate serial: 018F9917ADC63D4A723D59586B60573E03C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
Manifest number: 117E
Signing time: Tue 21 May 2024 03:00:16 +0000
Manifest this update: Tue 21 May 2024 03:00:16 +0000
Manifest next update: Wed 22 May 2024 03:00:16 +0000
Files and hashes: 1: KTbYQje3g8aiQFErjKckFhwNYds.crl (hash: T5xFFJ4GvKf68Q0nufm5S5md3K6kIRxwKKVkuoVzJFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 22:57:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:99:17:ad:c6:3d:4a:72:3d:59:58:6b:60:57:3e:03:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2936d84237b783c6a240512b8ca724161c0d61db
Validity
Not Before: May 21 03:00:16 2024 GMT
Not After : May 22 03:00:16 2024 GMT
Subject: CN=ca614d81f635c71dae68c5549b968ef57a240486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:48:1f:ce:b4:bc:43:a4:96:a4:8b:ef:7e:de:
03:3b:06:9c:f7:da:66:a5:e1:2d:6d:b7:76:29:c0:
a2:d2:b6:b3:67:09:6a:9c:67:d5:ad:46:6b:fd:45:
f3:4e:10:50:5e:53:bd:e7:4d:f6:3a:73:a0:87:24:
9a:8e:53:85:6f:f7:dc:49:11:bf:9b:ff:f2:38:a4:
00:59:69:79:10:54:ce:ed:d7:8d:94:23:5c:24:2e:
f6:46:35:86:2a:d4:49:a1:70:ef:fe:79:9c:ab:48:
f1:68:e5:b5:b5:3c:d3:1d:33:ab:3a:8a:e4:0a:e3:
d3:70:5d:1d:eb:25:94:87:16:18:69:63:0f:a1:b6:
d4:79:c1:80:b3:b1:89:c9:93:30:1f:87:18:a1:ad:
92:83:01:cf:97:02:2f:7b:a4:a1:e6:f7:11:6c:b8:
0e:e8:8e:f0:2c:ea:dd:09:15:b0:52:34:3f:9b:0e:
86:08:e9:06:2a:48:34:fe:9f:e3:7f:ae:49:71:0d:
40:2a:37:d9:74:9c:6c:bf:c2:1f:3e:46:f0:58:52:
e9:a1:1a:07:54:c3:2e:a6:71:70:0b:1e:ff:ee:a7:
92:1c:bf:a7:7b:6a:bf:b1:71:e2:e0:d9:93:bc:21:
e7:cc:84:12:70:e9:5e:58:5e:b3:68:44:bd:99:46:
65:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:61:4D:81:F6:35:C7:1D:AE:68:C5:54:9B:96:8E:F5:7A:24:04:86
X509v3 Authority Key Identifier:
keyid:29:36:D8:42:37:B7:83:C6:A2:40:51:2B:8C:A7:24:16:1C:0D:61:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:50:34:71:92:9c:23:c0:97:b9:ac:e1:5d:31:96:72:64:9b:
c0:a6:60:d4:d7:09:1f:89:1e:b7:89:2a:5b:87:a3:6a:eb:07:
e9:0a:34:06:fc:ab:7e:91:90:2d:98:f8:21:0d:0c:de:6f:a6:
d2:70:40:7f:fa:76:70:64:43:ff:c1:77:00:70:a3:15:8b:24:
0c:32:c2:df:91:97:b9:b6:98:6a:28:f6:aa:6b:5c:90:3f:5f:
57:07:ea:02:58:bd:69:cb:f7:da:27:53:bb:5d:54:52:96:ba:
97:97:e8:45:7d:49:c5:33:db:e5:19:35:7f:51:6a:8c:58:32:
ec:1d:12:c7:b0:76:22:29:cb:ed:11:ed:13:7e:ff:4a:30:79:
7a:00:e9:80:e2:e6:99:8c:19:89:23:5e:d6:eb:da:91:25:c3:
fd:c4:87:f1:fd:22:06:d2:1d:a6:9c:8f:12:0e:b3:4a:a4:ed:
27:c4:69:4a:ea:ca:6b:fd:c9:86:76:f3:a3:af:fa:fa:19:52:
d4:88:d4:21:f5:58:8e:23:05:48:85:68:77:2e:ff:e9:39:ce:
b3:29:c3:da:4a:9f:3f:af:57:0f:d0:ec:34:0d:6c:b0:85:ad:
5a:2a:a2:05:1e:85:29:71:ff:41:74:53:26:8c:90:63:bd:1a:
a3:87:03:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 03:50:48 2024 by rpki-client on console-ams.rpki-client.org