Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
File: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft (raw, json)
Hash identifier: WLg6rYR87Zzj0ckzVBUezlEAoqufNqoaWb4Clo0TMB4=
Subject key identifier: 7A:19:3A:CE:58:7B:A1:56:90:B2:AE:E4:5B:38:DF:A4:EE:27:C5:7E
Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Certificate serial: 0193568AE1BEB0468012F4F70ADF71D18834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 01:02:42 +0000
Manifest this update: Sat 23 Nov 2024 01:02:42 +0000
Manifest next update: Sun 24 Nov 2024 01:02:42 +0000
Files and hashes: 1: 1-ssy0-yoqd5R-Q7CxwU08yYNoEU.roa (hash: xxorrPgGhibm1LVNslz/eu4sB/DUVv+d6JOXL87mZsA=)
2: B6aiypPBJwF9WF96eM1aliv6Ytc.roa (hash: SUocFgW7haypZNKnRVVtFvn7JGuwypnhcmngeyRkyUE=)
3: Hpk97f0PJjVPLe2BoUnjl9stAhM.roa (hash: XKHHQ2pQX8XRqZOI7sVWAz52AZz/3OOq5R5Hv0JOa64=)
4: KGBLnva5ARvlTLBSnmRFC4IAyUI.roa (hash: Rwy27//niGDT/nhip0lFyFMBKJj6gkq1XpSIJf0SfFE=)
5: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl (hash: MWCX85oFnftkf7FNmPECqWLnJW47Q7e5tzV/hf1N6gE=)
6: OoMhY-on5mZKRPIaHPT8RmDWs0M.roa (hash: T/XTDbcwpykhFeZz4gN+AdXGxEPEbkg67zNU6Y5jt5w=)
7: Q02dItLZ2OxDEDvkvNzhdt_h-M8.roa (hash: EYK7sWbRsbVpho6DMTrL6SCJ2Jaf9EXREE8OiWtY6Q4=)
8: TeaokV9XloCZ3x4uSvXZp2hsVFY.roa (hash: nfx8X04SWlEJgUH4rNHEk/aE6HfuXUwzR5Egmy/xUUk=)
9: ten4fFcmXZM6KPrU99BCgE2Lg-k.roa (hash: 1pFF1Qje8HR1vWxIX2kYSOCjzZ0UUviOFA5tsSARfmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:e1:be:b0:46:80:12:f4:f7:0a:df:71:d1:88:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Validity
Not Before: Nov 23 01:02:42 2024 GMT
Not After : Nov 24 01:02:42 2024 GMT
Subject: CN=7a193ace587ba15690b2aee45b38dfa4ee27c57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:80:c4:a1:37:a4:64:a0:3a:62:c6:ae:ad:57:
9a:b6:51:98:2f:46:b6:3f:6f:ec:8a:0e:bc:43:d5:
f4:4b:85:a0:c9:bd:86:a2:e7:7d:05:b1:c8:5a:13:
ec:27:bb:bc:91:a0:7e:e5:bf:49:e3:82:63:31:45:
2a:a2:2b:ef:c1:f3:95:64:e7:8e:70:8a:d6:6d:27:
41:bf:1f:54:1f:cc:c4:09:b1:45:0a:95:aa:53:7a:
95:cf:95:b3:4c:ad:52:67:9b:d6:2d:09:e7:91:32:
20:da:49:94:b2:94:3f:6d:cc:54:02:96:83:27:6a:
74:30:49:26:3a:0c:fb:ae:7b:9f:63:7b:30:0a:39:
d5:2e:cf:a3:54:e2:75:ce:73:36:b9:eb:2c:bf:91:
90:26:bc:65:b2:af:b2:c8:56:fa:95:4e:77:54:a4:
0b:fb:d9:42:a6:63:93:39:a4:97:7e:83:58:b6:f6:
08:32:63:fd:4c:be:e7:8a:8b:15:f8:dd:7b:aa:32:
f3:b8:ad:f9:5c:4d:74:82:43:94:7b:e7:37:02:12:
31:a9:79:fb:15:0d:c2:93:11:5e:da:c6:28:2a:91:
98:95:73:ee:94:77:a5:3f:63:a5:66:c5:07:95:7f:
e9:45:2f:21:73:0b:a5:aa:11:fc:b0:41:c0:68:c5:
72:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:19:3A:CE:58:7B:A1:56:90:B2:AE:E4:5B:38:DF:A4:EE:27:C5:7E
X509v3 Authority Key Identifier:
keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:71:45:4f:98:fe:5e:32:82:0a:8b:57:c9:65:d0:6a:ec:ec:
04:d2:30:78:fb:89:23:68:85:64:4b:44:8a:5b:ef:34:c6:29:
5d:72:a2:8f:38:ae:c3:70:10:a3:bf:34:42:fa:9c:bd:74:50:
18:4c:9c:82:ce:ef:ce:3c:f8:ed:96:e2:6e:33:f4:77:9b:72:
58:d8:20:77:7f:b3:55:2d:f3:e5:6f:ef:16:02:99:90:c9:34:
2c:26:77:38:e0:f2:0a:ca:23:99:3e:47:20:0d:81:e9:6b:61:
8c:22:aa:c4:87:64:b7:57:b1:33:f7:ff:0b:06:4f:2a:d2:e2:
9f:25:c5:0b:a0:88:26:64:97:ab:e7:68:0b:57:8c:d6:c6:be:
4a:d0:fb:b6:4a:45:c1:a5:ac:40:98:1d:42:1a:84:e7:2c:fe:
d4:ab:40:31:2a:51:2e:7d:69:1a:6a:fc:a0:a4:d3:d9:be:33:
2f:72:36:c5:6d:02:37:63:c2:19:8f:c2:cc:1d:ad:e5:4f:37:
65:d1:95:6d:ce:41:fe:11:71:14:0c:dc:21:4b:db:4c:87:a1:
66:6f:60:03:53:6a:ad:6c:be:34:a9:30:a1:2d:8d:8d:2b:d2:
97:e2:21:f6:eb:27:c8:27:f8:37:2a:2c:2e:bd:c9:c3:48:18:
3b:b4:74:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:48:14 2024 by rpki-client on console-ams.rpki-client.org