Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
File: KC5DLtiL7BrRRURJYygU1DmWseA.mft (raw, json)
Hash identifier: CaRjVd3gXAkjnZlBwrRd1eD1BZiGWoQf0V52Gzq2Qfo=
Subject key identifier: 58:7F:D7:D7:A7:6D:AD:BD:CF:FB:ED:8D:7A:4A:74:AE:66:B7:A7:26
Authority key identifier: 28:2E:43:2E:D8:8B:EC:1A:D1:45:44:49:63:28:14:D4:39:96:B1:E0
Certificate issuer: /CN=282e432ed88bec1ad1454449632814d43996b1e0
Certificate serial: 0193568AB2F76F69B2D67735DDE3E111B2C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
Manifest number: 09C8
Signing time: Sat 23 Nov 2024 01:02:30 +0000
Manifest this update: Sat 23 Nov 2024 01:02:30 +0000
Manifest next update: Sun 24 Nov 2024 01:02:30 +0000
Files and hashes: 1: KC5DLtiL7BrRRURJYygU1DmWseA.crl (hash: +ECVuSxtqkbkTehcdtsQaXVcBYECrfTc4ufU80p7stU=)
2: sBeShjxnDhxRTvOlViISQA5DsZI.roa (hash: olk0oEcAlfP8ST3qtd1klAfm0k6qHj0lRrQ7jnxe2n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:b2:f7:6f:69:b2:d6:77:35:dd:e3:e1:11:b2:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282e432ed88bec1ad1454449632814d43996b1e0
Validity
Not Before: Nov 23 01:02:30 2024 GMT
Not After : Nov 24 01:02:30 2024 GMT
Subject: CN=587fd7d7a76dadbdcffbed8d7a4a74ae66b7a726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:18:db:f4:ea:1c:39:c7:da:53:59:70:bb:
ee:ec:44:e1:f6:05:8d:84:6d:28:0e:50:eb:c8:ff:
7a:91:df:12:d5:8b:f5:3b:67:12:f5:33:d4:f8:5d:
14:ba:10:f1:12:8f:13:20:c6:8e:3e:4f:14:d8:63:
f0:a1:b9:91:fa:5a:20:e9:42:b2:35:68:e9:a0:60:
44:28:20:24:c3:50:b6:14:ad:e1:7c:31:2b:29:78:
2d:bf:9a:cf:59:ad:0e:06:ec:c8:06:fe:05:02:d9:
eb:90:ff:12:92:2f:16:17:35:7f:ba:91:61:db:72:
55:c2:d6:b5:3b:29:47:9f:d4:21:66:53:ff:a9:85:
a0:26:2d:d9:48:7f:0c:3a:08:31:db:ce:c0:eb:2e:
e7:0c:15:19:22:8d:3c:2c:7f:50:b3:c7:eb:6a:46:
50:c0:11:22:a1:b8:82:5a:a2:ac:c9:ac:fa:4f:b6:
83:50:d3:e7:ca:d1:8c:c2:c8:15:43:9e:21:24:be:
aa:c7:41:e7:b2:24:7d:0a:3d:68:02:f1:e1:1e:5f:
ed:8e:2f:c8:2e:aa:14:eb:1e:c6:ba:8b:c5:48:a3:
98:e9:49:de:eb:43:c8:1f:3a:1d:e0:b5:59:4b:98:
2c:f6:18:2b:e1:6b:8d:e7:dc:b1:fd:ce:97:20:91:
95:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7F:D7:D7:A7:6D:AD:BD:CF:FB:ED:8D:7A:4A:74:AE:66:B7:A7:26
X509v3 Authority Key Identifier:
keyid:28:2E:43:2E:D8:8B:EC:1A:D1:45:44:49:63:28:14:D4:39:96:B1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:9d:6d:d6:9d:ac:f2:37:72:d6:66:e1:ab:52:a2:83:1c:d4:
ff:9a:58:be:17:22:1e:10:10:f3:bd:c0:de:ee:b5:57:70:53:
0c:b1:e6:ec:0c:38:0e:ed:f5:74:e2:1a:0f:07:b5:65:0b:bd:
ac:53:58:d1:88:aa:01:77:47:d7:96:48:26:79:c1:45:83:e5:
53:e4:f6:14:36:d4:71:9a:6e:05:e2:77:99:6b:e6:3e:79:50:
54:84:bd:41:2c:41:da:ed:71:46:bc:39:90:74:af:87:58:18:
b4:7b:ae:dd:e3:52:38:ad:27:ad:ef:fa:8f:13:48:2c:28:1e:
f2:19:8a:93:24:32:67:e7:73:8a:be:ad:3f:96:a3:22:cb:ab:
ab:6f:e8:fa:c5:29:22:55:6a:0b:d2:7c:40:83:0a:95:4b:62:
92:e3:a8:99:ab:1c:1f:06:c5:33:18:8c:42:7c:e3:3f:e9:7d:
eb:95:3f:14:13:95:14:1b:d8:d6:08:97:7e:02:7b:fa:a6:c8:
bb:64:87:2d:59:25:40:de:41:5b:91:b6:b3:84:84:6a:95:a1:
31:58:e2:8f:93:ae:d3:80:63:a4:5e:be:a5:d2:25:9c:01:bb:
c1:04:1f:80:06:ab:06:17:69:1e:b5:de:9f:37:89:88:29:f3:
61:2d:77:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:15 2024 by rpki-client on console-fra.rpki-client.org