Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
File: KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft (raw, json)
Hash identifier: fBREsnFonrtVsEeghjeFK4V7s9eTBBMrYoK96gcYCBk=
Subject key identifier: 2F:B4:02:1B:BA:2A:41:C9:03:FB:12:F4:88:71:84:17:19:00:74:DA
Authority key identifier: 29:77:44:67:CC:9F:1E:D9:D9:57:B8:3A:A1:7A:09:0B:1D:F7:69:46
Certificate issuer: /CN=29774467cc9f1ed9d957b83aa17a090b1df76946
Certificate serial: 019331D943A535DA5AF666E04DD147CF01A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
Manifest number: 0BFA
Signing time: Fri 15 Nov 2024 22:02:22 +0000
Manifest this update: Fri 15 Nov 2024 22:02:22 +0000
Manifest next update: Sat 16 Nov 2024 22:02:22 +0000
Files and hashes: 1: KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl (hash: X2r/bKvPxXhqX/RqIhkJFmBeeJ5Tct3T7K2+7iZViX4=)
2: OkTUkUEFNiJ4xQbU56ZmChaaDa8.roa (hash: NzHbowZ86J8Z0PfFRnrKoSPa6IDjzcyB6zOv6Z0pNiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 Nov 2024 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:31:d9:43:a5:35:da:5a:f6:66:e0:4d:d1:47:cf:01:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29774467cc9f1ed9d957b83aa17a090b1df76946
Validity
Not Before: Nov 15 22:02:22 2024 GMT
Not After : Nov 16 22:02:22 2024 GMT
Subject: CN=2fb4021bba2a41c903fb12f488718417190074da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:83:e3:a1:46:03:e7:63:9e:61:6a:c0:59:18:
0b:71:61:c9:b7:07:71:22:6d:7e:eb:b6:43:fd:dc:
c6:1a:74:14:c3:64:73:62:ec:7b:36:b1:65:4e:be:
3e:64:5b:71:8d:2d:82:19:41:84:d9:be:bf:5b:e3:
4d:78:4d:14:38:18:b5:7d:2e:9e:b0:74:7a:d8:fd:
f4:dc:21:93:d1:f1:2e:f5:e8:cb:ea:7a:b0:6c:d4:
04:b4:15:4c:61:4c:06:28:db:20:1e:cd:8c:b1:f4:
3d:97:49:28:f0:65:42:fd:3e:fe:10:05:5b:4e:0e:
90:36:5b:cd:f2:2c:82:90:21:93:8c:29:82:a3:59:
37:c6:ed:40:fc:44:c4:2e:f2:7f:25:26:1f:bf:46:
ce:0f:37:5a:2c:44:73:3d:1e:ab:0d:77:d1:2f:88:
39:12:72:1c:9f:52:43:8b:88:28:2b:37:0f:71:a4:
f8:59:9d:ac:0f:c4:72:94:99:6d:af:c5:b2:00:b7:
45:a5:8f:ed:f2:e3:83:41:61:ae:ad:e8:65:88:c4:
be:55:fd:b7:4b:77:48:75:7f:a6:a7:8c:78:1e:15:
44:7b:ca:c7:0b:a3:62:ec:a2:1a:ee:11:aa:c5:d3:
41:a3:07:e1:7b:7f:8a:a3:7c:bc:08:81:7a:5e:ec:
a8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B4:02:1B:BA:2A:41:C9:03:FB:12:F4:88:71:84:17:19:00:74:DA
X509v3 Authority Key Identifier:
keyid:29:77:44:67:CC:9F:1E:D9:D9:57:B8:3A:A1:7A:09:0B:1D:F7:69:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c8:a7:9c:86:c5:a7:96:29:ff:eb:29:f7:69:62:d5:f7:5a:
12:93:94:86:ce:3b:e3:71:22:0f:3b:e4:6c:b5:9b:5a:50:c0:
25:30:56:ef:fc:90:77:11:52:d3:ac:67:47:f8:8c:d8:02:7d:
2b:9c:ee:68:6e:43:88:7f:61:24:13:63:d0:70:ff:b9:9c:19:
ed:ed:81:7d:e1:73:03:fc:80:61:d2:4c:2c:58:14:1c:a1:51:
24:d3:14:84:7c:0a:98:89:d1:bc:99:5f:d5:db:6f:c5:a1:d8:
8b:88:7d:9b:08:46:55:86:d4:38:58:b5:e0:bc:1a:cb:96:db:
47:8d:9b:77:5a:b4:90:78:0a:a7:3a:3d:b6:a7:a7:fe:f2:51:
0b:fa:5b:3f:9c:35:6f:25:27:cb:70:a1:80:11:8f:32:3c:e1:
47:f2:90:4f:39:fc:57:91:f9:79:fe:f0:ce:35:0b:28:bb:3e:
6a:48:9b:b4:0a:af:de:bb:37:ff:88:29:6c:3e:ab:45:27:87:
8a:aa:fe:43:4b:b9:aa:93:1b:a9:3f:cf:0e:28:b3:32:51:69:
78:22:ca:24:3d:79:72:5c:68:9f:42:e9:48:64:70:bc:b2:dd:
aa:53:9a:e0:fd:60:8f:92:99:9f:e2:6a:c5:3c:37:75:ba:27:
e0:86:4a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 23:33:02 2024 by rpki-client on console-fra.rpki-client.org