Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
File: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft (raw, json)
Hash identifier: JjEhbSy0sSXWpgS1dhlYBCgPN2+d847XzOx7kUUW83Q=
Subject key identifier: D8:C7:7D:2E:2A:3B:08:B8:3E:3A:A4:5C:FD:65:45:C5:37:2C:BC:48
Authority key identifier: 29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
Certificate issuer: /CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Certificate serial: 01935688AF58AD2028A11E1B1889122E8AF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
Manifest number: 0F66
Signing time: Sat 23 Nov 2024 01:00:18 +0000
Manifest this update: Sat 23 Nov 2024 01:00:18 +0000
Manifest next update: Sun 24 Nov 2024 01:00:18 +0000
Files and hashes: 1: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl (hash: VWhs5m92Zcg/AC2mTb1M3TzibaW+Sz4w20JY6sX+H/s=)
2: kviXKUG_QY7yTcWitYU5f3vKZu8.roa (hash: BTlYl/PQjUqPHXwlLnBWNfGHJ9xk+eh/TXu32cRJ0a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:88:af:58:ad:20:28:a1:1e:1b:18:89:12:2e:8a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Validity
Not Before: Nov 23 01:00:18 2024 GMT
Not After : Nov 24 01:00:18 2024 GMT
Subject: CN=d8c77d2e2a3b08b83e3aa45cfd6545c5372cbc48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d5:48:93:e9:8a:3b:ae:d8:57:09:6d:aa:77:
9a:60:01:b0:7f:7c:73:1c:3a:c2:4d:9f:a0:d7:d5:
7d:81:a4:26:c8:a2:2f:77:da:30:28:9a:b5:9d:01:
8f:07:f7:c7:d0:4f:0c:98:cb:22:97:d7:17:06:37:
ec:d6:db:1d:25:c0:00:9d:8e:5b:ac:fd:6a:7b:d7:
88:07:f0:ad:9e:b8:f4:4c:a3:3e:1b:25:56:55:0f:
66:be:59:a3:af:f0:5d:eb:e3:73:c3:c3:b6:cf:2e:
1e:d8:74:6c:4c:dc:4a:7a:b2:24:79:80:1f:17:c3:
9f:e0:a5:6e:f1:e6:41:44:4a:21:9e:c9:39:79:aa:
32:5f:78:14:c9:af:0c:fa:f2:97:05:e7:82:d6:0c:
4a:05:6e:07:5d:b7:db:c5:be:37:e0:96:5f:4f:f2:
63:36:b3:52:12:43:a9:19:81:99:95:50:e1:72:7c:
88:f7:67:df:f5:03:0b:06:d0:5a:5b:6e:56:71:43:
fd:e3:36:95:17:e2:5b:ce:3b:33:78:a7:b3:c5:ef:
8e:91:87:6a:99:d2:b7:72:eb:0c:6c:61:a6:6f:7c:
99:5a:1e:cf:69:41:92:6b:bd:77:7d:d5:35:17:7d:
95:11:2e:fc:c9:95:c2:2d:81:73:db:32:ce:25:e3:
16:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C7:7D:2E:2A:3B:08:B8:3E:3A:A4:5C:FD:65:45:C5:37:2C:BC:48
X509v3 Authority Key Identifier:
keyid:29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ef:77:7a:2b:e7:cd:65:d3:25:d5:93:15:45:8d:22:9b:58:
1b:0f:19:24:18:a3:d8:67:7b:66:30:76:15:a5:31:8a:12:20:
29:1e:c1:19:38:84:36:18:49:ae:71:92:15:bb:a5:10:91:a6:
d8:5c:cd:38:5a:89:3c:93:c7:ec:b8:1a:24:3d:a7:b6:c6:39:
ee:eb:c0:7e:2d:b7:f4:fb:b5:61:38:82:a0:22:a9:ef:db:a8:
85:86:7e:e1:15:34:fb:77:08:2d:cd:7f:3f:72:66:cd:f4:15:
a9:16:41:93:8d:ac:6f:85:c7:c1:da:5f:24:c3:d7:ab:0c:0c:
b3:ba:27:d6:44:10:12:74:fb:a8:b4:60:b8:c8:1b:7f:54:7f:
ae:72:2b:51:5b:fe:c3:8b:6f:f3:97:54:57:41:cb:c9:47:39:
94:b0:1c:b8:74:5f:9e:51:8f:54:c9:bf:06:cd:af:d3:d0:ed:
56:dd:df:3f:cc:40:3c:d3:16:21:70:28:a7:23:0c:66:88:43:
44:56:ac:5e:67:c3:1b:7b:26:7d:cf:b9:a4:02:9f:af:5b:a2:
03:7b:9b:4a:50:78:45:2b:c6:f3:4a:c9:73:3e:7d:d7:b0:78:
ed:f3:14:18:e7:df:6e:94:73:94:71:a8:33:e6:0e:62:ab:3c:
61:ba:63:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:00:12 2024 by rpki-client on console-ams.rpki-client.org