Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
File: KfajAL99QLf41hgcW4p9vHG30SM.mft (raw, json)
Hash identifier: HSYk88COgqqtiy7KQcoH8iGS7tNmnhEVHWzXwruh584=
Subject key identifier: 67:14:B3:3E:D3:6C:4A:83:7E:1A:75:49:BF:A3:86:D2:26:A0:B7:6D
Authority key identifier: 29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
Certificate issuer: /CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Certificate serial: 0193568B0E59DBFD300B3C048610BD0488F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
Manifest number: 0748
Signing time: Sat 23 Nov 2024 01:02:53 +0000
Manifest this update: Sat 23 Nov 2024 01:02:53 +0000
Manifest next update: Sun 24 Nov 2024 01:02:53 +0000
Files and hashes: 1: GsmXCNsbmv7pFV4tegohlrC1FhA.roa (hash: D0oq93A9HDB7U3Se1yjEbCBKUTUJUUqY7JFxo8QOvGU=)
2: KfajAL99QLf41hgcW4p9vHG30SM.crl (hash: /FI2dDqA5FoOGltuht4Lzt8fe9LEr7moce8AexZh41s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8b:0e:59:db:fd:30:0b:3c:04:86:10:bd:04:88:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Validity
Not Before: Nov 23 01:02:53 2024 GMT
Not After : Nov 24 01:02:53 2024 GMT
Subject: CN=6714b33ed36c4a837e1a7549bfa386d226a0b76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:2b:12:0f:04:67:6a:aa:02:ba:c4:a4:68:ae:
80:12:6b:ca:6e:a9:5c:bf:42:a7:7f:98:0d:48:df:
6a:b9:ec:7b:09:49:d4:6b:c8:3e:7c:a5:c5:90:99:
bd:f3:93:d1:0c:8e:44:6c:56:be:21:f5:44:e5:3a:
4a:bf:22:c3:6c:a2:07:31:12:0a:7d:ed:77:2a:4d:
5d:1e:3f:dd:e8:8e:da:c2:65:af:18:71:ea:fe:ed:
80:81:1f:f2:e4:55:fd:46:ce:6c:87:73:8e:03:41:
b0:ae:8a:d9:fa:c7:a6:04:9e:24:98:a3:9a:05:bf:
61:67:16:04:df:91:cd:50:de:15:4b:b9:fd:2a:46:
d6:ef:a6:63:de:0c:78:a4:26:6b:1d:32:0a:29:6e:
da:d4:f7:f8:19:e0:99:40:7c:72:11:08:04:73:c5:
81:b5:91:d1:4a:47:2b:1d:7d:ef:76:c8:54:9d:0d:
2c:e5:d1:63:ef:40:af:ef:91:64:df:7d:cf:2a:4e:
2b:0d:46:fb:ae:dc:f7:d7:c8:25:19:ea:ef:54:e5:
97:4d:68:01:2e:7c:2e:4d:5e:01:76:42:9b:f7:25:
7b:41:a3:c1:e2:48:49:85:f6:59:3a:1c:ac:9a:98:
55:82:13:96:02:08:64:4c:44:5f:ec:ce:43:02:2b:
91:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:14:B3:3E:D3:6C:4A:83:7E:1A:75:49:BF:A3:86:D2:26:A0:B7:6D
X509v3 Authority Key Identifier:
keyid:29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fd:07:d1:d1:5e:1c:99:81:89:53:46:e9:4f:56:35:af:01:
39:ad:46:8f:81:f6:2a:e3:d8:2a:e9:8c:67:bd:23:ac:64:03:
60:36:77:2e:c8:24:4e:dd:94:cc:ba:cc:d2:dd:e7:2e:b0:cc:
44:ab:d7:29:1b:41:f9:4e:9b:24:4b:3d:ae:9a:8e:2e:14:ec:
4f:55:31:19:53:dd:7b:9e:6d:ea:35:30:b9:e5:a1:5b:6c:5b:
6c:96:f3:a0:6c:14:eb:62:8e:51:1a:77:25:1b:3c:7e:79:54:
3d:f2:70:a3:99:e8:ed:c3:21:a2:af:97:fc:67:a3:8a:9e:50:
1f:80:c7:fa:3c:a6:6c:39:0e:ea:09:81:a1:82:dd:20:fc:4f:
f4:28:2a:bd:ac:bc:a3:de:9f:6e:75:65:a5:94:fd:5c:59:be:
29:3b:14:fe:39:2f:4c:4f:05:07:1a:f4:a1:78:24:ca:24:8a:
e1:f5:12:c2:ba:65:96:2f:2f:5b:68:5c:ed:6d:94:78:13:34:
3a:18:d5:76:3a:ef:14:88:2a:7a:58:ac:99:0e:fb:ad:0e:b9:
3e:c3:d6:e8:65:7d:9b:54:69:43:4c:01:9c:3f:4b:97:2a:6b:
61:9b:ef:fe:a1:e8:28:a6:a0:df:3d:1d:06:49:06:60:2f:61:
20:23:f8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:43:10 2024 by rpki-client on console-fra.rpki-client.org