Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft
File: KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft (raw, json)
Hash identifier: gCg/S5o+zDFdpJf+1nGKVFZ63Mfw7jeOxSjDlWX+w7k=
Subject key identifier: A9:16:BC:91:C8:4C:E8:2A:51:E7:83:8F:AB:AA:AD:5C:66:D7:D0:15
Authority key identifier: 2A:52:75:AD:89:C9:97:6B:51:03:0C:5B:D2:56:79:9B:79:26:56:0C
Certificate issuer: /CN=2a5275ad89c9976b51030c5bd256799b7926560c
Certificate serial: 018F874A8317FE456717D2ECC8EC32FDCA71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft
Manifest number: 0528
Signing time: Fri 17 May 2024 16:02:38 +0000
Manifest this update: Fri 17 May 2024 16:02:38 +0000
Manifest next update: Sat 18 May 2024 16:02:38 +0000
Files and hashes: 1: KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.crl (hash: dzmQddb3eUwqZiUaBfur9WeATP8GwhSJi2r9nmbRAuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:83:17:fe:45:67:17:d2:ec:c8:ec:32:fd:ca:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a5275ad89c9976b51030c5bd256799b7926560c
Validity
Not Before: May 17 16:02:38 2024 GMT
Not After : May 18 16:02:38 2024 GMT
Subject: CN=a916bc91c84ce82a51e7838fabaaad5c66d7d015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:54:bb:e3:f4:8c:9a:74:d3:51:3c:9d:97:5f:
5b:b9:91:11:19:c6:91:ba:24:5d:a7:d7:80:4b:ff:
00:c2:32:fa:50:9e:2f:9c:96:0c:7b:53:e5:0d:65:
b0:f4:78:d5:f0:19:42:86:ae:75:ef:06:cd:67:a5:
cd:ad:87:9d:70:28:f2:f9:5f:d5:74:c5:d3:b9:cf:
0e:24:2a:f3:83:47:25:4c:76:57:fb:bd:13:01:68:
64:03:cc:1e:7e:10:05:ee:d3:bf:cc:b6:38:21:5b:
de:56:d1:a7:99:5b:c7:bb:e4:35:fb:d8:50:2e:9c:
04:fa:e3:91:ca:a8:e2:3c:35:00:2b:20:20:04:38:
0f:6f:30:f6:bb:51:a9:d8:d3:f7:b9:32:b7:61:7a:
79:06:3b:10:a3:b9:9f:d1:6e:aa:5e:72:8a:bc:ae:
88:81:f7:b5:b1:65:04:18:7d:7f:19:ee:26:15:c2:
7c:75:dd:57:66:70:72:e2:7d:b8:37:6a:76:20:1e:
28:d7:b6:7d:43:75:a5:fe:dc:89:21:a9:a8:0a:1a:
60:bf:19:82:34:59:52:c4:4d:e9:78:4f:bb:9a:cd:
46:ef:3a:11:56:52:c8:48:b5:cd:0a:bd:89:21:12:
07:70:be:bf:80:c0:b2:59:8d:0c:f6:7c:e6:32:57:
54:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:16:BC:91:C8:4C:E8:2A:51:E7:83:8F:AB:AA:AD:5C:66:D7:D0:15
X509v3 Authority Key Identifier:
keyid:2A:52:75:AD:89:C9:97:6B:51:03:0C:5B:D2:56:79:9B:79:26:56:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:2b:21:b3:c8:2b:89:37:ca:37:cf:8e:e4:06:10:ae:8d:6a:
b3:db:42:e8:d8:b0:ee:9a:1c:95:5a:91:f6:b6:d0:0e:c1:00:
89:8a:38:cc:63:5e:e1:1f:ca:6a:c9:c1:48:e2:77:39:4c:e5:
39:7d:3d:de:e6:af:86:44:ed:3f:73:f5:93:ad:93:7a:f4:ed:
a0:19:6c:2e:64:34:7b:a4:2f:39:e7:64:80:15:ff:02:6d:a0:
26:e5:5c:46:9f:a1:8a:cd:0d:e8:da:04:05:62:c8:c1:c4:11:
16:f6:b2:83:7f:72:85:62:93:83:db:7f:c0:7a:b1:03:8c:a4:
b8:3f:01:52:a2:4e:06:98:38:33:eb:ce:6c:d6:09:d8:7d:59:
86:92:cb:31:5a:d4:48:a7:65:6a:48:d6:7d:f8:41:b2:ca:a6:
5f:e2:bf:7b:71:72:bd:db:10:96:83:cf:f4:8d:cb:9a:b7:e4:
25:53:44:b9:32:cb:6d:06:87:2b:9e:fa:d4:34:14:d8:ab:8d:
08:21:80:48:02:41:d5:d1:aa:8d:dd:07:a2:7a:39:5d:fe:a5:
e6:cf:6a:84:56:61:61:9b:4b:5e:ce:ef:ff:c4:37:e8:ba:d6:
22:3b:fb:6f:7d:4d:e4:36:34:ad:de:56:aa:b8:9f:22:5d:10:
02:32:0f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:18:23 2024 by rpki-client on console-fra.rpki-client.org