Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
File: KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft (raw, json)
Hash identifier: 89Hhwl4E/xdwgoBmGHllFxAiIGy8AHw1yL9FI3X0VTY=
Subject key identifier: 71:1B:01:EE:56:D8:F4:FD:BE:DC:8C:97:84:DA:A0:53:C2:20:AA:21
Authority key identifier: 2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24
Certificate issuer: /CN=2a9100a145dcb7b3795379bb0938fe89aa861924
Certificate serial: 019052EABF1EDEF2B872DBA58865C7A1FBBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
Manifest number: 0F1E
Signing time: Wed 26 Jun 2024 05:00:34 +0000
Manifest this update: Wed 26 Jun 2024 05:00:34 +0000
Manifest next update: Thu 27 Jun 2024 05:00:34 +0000
Files and hashes: 1: FymsKQcI75lLFdc1AbTqWJGE_qM.roa (hash: LufxZj9QzD3nX63MX/yyTm8k5QD8DA0v6X9t3D1FxjY=)
2: KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl (hash: Ol9x3DPWPfZAOfAAWN6nefuQz17PXVO+onQNLYPZNRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:52:ea:bf:1e:de:f2:b8:72:db:a5:88:65:c7:a1:fb:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a9100a145dcb7b3795379bb0938fe89aa861924
Validity
Not Before: Jun 26 05:00:34 2024 GMT
Not After : Jun 27 05:00:34 2024 GMT
Subject: CN=711b01ee56d8f4fdbedc8c9784daa053c220aa21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:01:f7:22:ec:fa:6f:95:4d:6c:c1:38:77:93:
2a:3e:69:73:42:0c:f6:bd:c0:73:0b:9e:36:24:6b:
90:37:26:04:87:49:d5:19:1d:cf:3b:50:0f:27:cf:
27:6f:0a:a1:81:22:71:2c:dc:dc:4d:37:72:f3:33:
df:89:c0:ce:a4:92:b8:ff:dd:64:93:16:f8:87:b4:
51:ed:a2:bf:d8:2c:fd:6f:b2:b4:f6:b0:ab:0a:c5:
f3:b1:24:f0:46:04:1c:c2:bb:bf:f4:58:32:4c:42:
fb:11:84:0b:cc:dc:2b:11:ff:c9:ef:97:6e:2d:c7:
e5:e6:0c:4a:fd:04:8d:d4:2a:70:29:71:93:bf:15:
62:36:cb:50:f8:e1:94:29:80:ba:66:76:0d:1e:d9:
25:0d:db:09:44:b1:11:88:84:12:a8:c5:53:c9:ec:
bb:0e:32:6e:02:3a:8e:57:47:a7:c7:81:d4:ff:5f:
89:fb:5c:ec:43:84:a6:b9:1b:4b:36:d2:c6:25:39:
da:e1:ad:e5:5a:f8:3f:dc:7a:d7:c6:79:64:70:8e:
3c:20:8a:b8:e9:ea:ba:47:fc:02:19:6b:e3:b8:6f:
51:f2:90:ba:7a:22:5f:df:4d:76:71:01:bf:42:8c:
3a:b0:5d:8b:c2:65:ef:1b:f6:15:38:eb:71:3e:67:
8c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1B:01:EE:56:D8:F4:FD:BE:DC:8C:97:84:DA:A0:53:C2:20:AA:21
X509v3 Authority Key Identifier:
keyid:2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:7a:d0:d1:ae:65:eb:64:59:2d:15:4b:1f:42:8b:26:61:d3:
fb:f3:ca:a8:19:b2:58:04:97:e7:8b:15:99:85:34:09:c0:15:
94:e6:81:21:d1:f9:4f:55:46:b3:e7:70:44:c2:54:bd:1e:71:
18:24:ed:2c:2a:60:fc:d3:98:e2:25:b6:02:70:67:2d:6c:10:
8f:50:72:66:0e:4c:68:11:bc:8a:ab:4e:86:df:8c:1c:02:ed:
d5:3a:a3:64:00:f6:4a:a0:8e:0e:f8:8a:f6:07:c5:0b:39:2b:
e5:5b:51:84:75:fe:1c:1f:c4:97:46:72:70:26:71:82:75:2e:
79:db:ab:d8:05:85:fa:52:80:e6:15:67:d2:d7:32:be:a7:53:
cd:89:61:5e:92:ea:ca:af:ef:74:a1:72:53:5a:fb:3d:a3:80:
05:5f:53:19:e9:7b:dd:03:53:cd:9a:9f:05:3f:7a:bd:f8:6a:
cb:8f:bb:5c:f8:52:27:76:4c:5f:06:15:eb:0c:fb:4e:42:ba:
e1:93:68:15:0a:cc:ef:29:7d:ca:53:23:b6:47:be:04:08:60:
92:be:cb:d3:14:4c:dc:f8:af:b1:2f:9c:16:3e:8b:8b:b9:1d:
c6:77:98:ae:eb:39:13:0e:c5:9c:47:0a:e5:d4:dd:86:e2:56:
b6:80:dd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 11:30:19 2024 by rpki-client on console-fra.rpki-client.org