Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
File: k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft (raw, json)
Hash identifier: 7gUnZvLjC9VVSXzlGtMNx07YidehYdJoBv/5zw4Wjvo=
Subject key identifier: 72:D3:B8:1D:E5:CC:3D:C4:0B:3F:42:04:24:4B:51:AA:D6:63:2C:B1
Authority key identifier: 93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF
Certificate issuer: /CN=93608a0cda0133f876ab9ad83fa37bcef62df2df
Certificate serial: 0194BAF26977123CC1592AC39DC3B30C13CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
Manifest number: 0BC6
Signing time: Fri 31 Jan 2025 06:00:36 +0000
Manifest this update: Fri 31 Jan 2025 06:00:36 +0000
Manifest next update: Sat 01 Feb 2025 06:00:36 +0000
Files and hashes: 1: 2yeHS0iIkuHn83Pc5-EplLHcCYQ.roa (hash: kf8JlgWiWlnh6iS3QRDgrcCIPaCediQ682Z+VnmyMJ0=)
2: k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl (hash: LWBR3AzTmAE2uE3e0fmnPC5uxBquf10ugaaSl3AJids=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:69:77:12:3c:c1:59:2a:c3:9d:c3:b3:0c:13:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93608a0cda0133f876ab9ad83fa37bcef62df2df
Validity
Not Before: Jan 31 06:00:36 2025 GMT
Not After : Feb 1 06:00:36 2025 GMT
Subject: CN=72d3b81de5cc3dc40b3f4204244b51aad6632cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ae:7c:db:33:ee:b0:a5:4b:4e:a2:f2:d5:0a:
c2:b5:cb:88:32:71:eb:a5:45:ee:29:7f:96:71:f3:
e0:fb:b0:e3:12:62:1b:14:61:08:f6:0a:02:7e:07:
c0:04:e6:5a:35:38:ce:0d:1c:31:05:a5:fd:9c:84:
69:98:73:d5:78:0a:a4:15:33:16:68:13:f6:c3:1f:
b6:9c:09:4a:0e:32:2d:58:6c:c9:d9:6e:12:27:60:
96:06:1e:97:8c:a6:ad:8a:e1:ea:40:35:f3:e8:86:
ec:db:23:e3:23:78:b2:5e:dc:cc:a5:49:ec:5e:bf:
f3:9c:9e:26:60:7a:99:d3:51:91:a9:b6:80:0e:ae:
e3:55:37:98:ac:0e:f0:8a:7c:85:2f:5a:5e:12:db:
55:bc:42:d0:36:ee:cc:80:4d:eb:cb:9b:ea:07:63:
8e:6d:73:43:29:7a:6d:6b:e7:1e:d3:59:15:d2:bf:
7c:1c:26:6f:ce:b4:4a:42:55:71:02:26:d2:35:6b:
fe:5d:4d:54:a9:75:2d:25:0d:b7:f5:54:de:bc:ed:
13:8d:72:9d:a6:36:21:d7:91:97:71:76:0a:93:53:
92:3b:3e:8f:b7:ad:6f:77:1e:77:5d:e7:1e:9f:ee:
bf:fc:88:4e:85:7c:5f:b8:2a:25:14:41:0a:cc:d7:
ce:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D3:B8:1D:E5:CC:3D:C4:0B:3F:42:04:24:4B:51:AA:D6:63:2C:B1
X509v3 Authority Key Identifier:
keyid:93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:2b:77:53:d3:bf:27:73:a4:bf:cc:d8:d7:1a:c8:b5:e0:5e:
c0:50:69:10:50:b8:64:2a:17:cf:80:f9:2d:58:a8:49:ac:c1:
08:b5:42:1a:10:34:3e:88:ca:3c:e7:f6:dd:d6:ac:ff:11:5a:
66:95:0e:25:0c:e2:09:cf:35:91:ef:40:25:5c:7e:57:96:e7:
b3:a3:36:91:d1:41:68:59:0c:27:fc:e2:d1:e1:1f:4e:4f:57:
46:ea:0d:93:41:64:b7:12:08:ff:3d:f6:24:d9:7b:55:7a:87:
a1:a7:de:60:b1:94:b5:e7:d6:16:6d:43:38:ff:0d:21:fe:07:
a6:18:91:e0:4c:c3:2a:8a:15:1d:bc:4b:f4:6b:86:f9:d2:c9:
0b:3b:b3:d2:d7:1b:98:bc:b3:e9:8e:66:de:d6:47:28:f9:06:
af:34:1e:80:5d:9e:39:69:c0:56:73:e1:3e:7c:de:9e:37:d1:
ad:8f:2f:0b:bf:45:0c:99:ea:80:c0:24:3f:14:51:de:4a:0d:
53:f4:3a:d4:ef:fd:55:90:bb:67:e2:f0:bb:df:7d:a6:43:d3:
98:75:4a:fe:d7:c2:a5:05:99:9e:b4:6b:09:fb:fc:f5:d9:dc:
37:21:17:53:b4:55:f7:c7:06:e7:76:42:fb:69:bf:04:00:c3:
76:ad:f2:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68ml3EjzBWSrDncOzDBPMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjA4YTBjZGEwMTMzZjg3NmFiOWFkODNmYTM3YmNlZjYy
ZGYyZGYwHhcNMjUwMTMxMDYwMDM2WhcNMjUwMjAxMDYwMDM2WjAzMTEwLwYDVQQD
Eyg3MmQzYjgxZGU1Y2MzZGM0MGIzZjQyMDQyNDRiNTFhYWQ2NjMyY2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16582zPusKVLTqLy1QrCtcuIMnHr
pUXuKX+WcfPg+7DjEmIbFGEI9goCfgfABOZaNTjODRwxBaX9nIRpmHPVeAqkFTMW
aBP2wx+2nAlKDjItWGzJ2W4SJ2CWBh6XjKatiuHqQDXz6Ibs2yPjI3iyXtzMpUns
Xr/znJ4mYHqZ01GRqbaADq7jVTeYrA7winyFL1peEttVvELQNu7MgE3ry5vqB2OO
bXNDKXpta+ce01kV0r98HCZvzrRKQlVxAibSNWv+XU1UqXUtJQ239VTevO0TjXKd
pjYh15GXcXYKk1OSOz6Pt61vdx53Xecen+6//IhOhXxfuColFEEKzNfOmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLTuB3lzD3ECz9CBCRLUarWYyyxMB8GA1UdIwQY
MBaAFJNgigzaATP4dqua2D+je872LfLfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJDS0ROb0JNX2gycTVyWVA2Tjd6dll0OHQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8wOGNiMmEtMDM0Yi00N2I2LWIxMzIt
N2Y4YmE5NmY1ZTQ5LzEvazJDS0ROb0JNX2gycTVyWVA2Tjd6dll0OHQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8wOGNiMmEtMDM0Yi00N2I2LWIxMzItN2Y4YmE5NmY1ZTQ5
LzEvazJDS0ROb0JNX2gycTVyWVA2Tjd6dll0OHQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICt3U9O/
J3Okv8zY1xrIteBewFBpEFC4ZCoXz4D5LVioSazBCLVCGhA0PojKPOf23das/xFa
ZpUOJQziCc81ke9AJVx+V5bns6M2kdFBaFkMJ/zi0eEfTk9XRuoNk0FktxII/z32
JNl7VXqHoafeYLGUtefWFm1DOP8NIf4HphiR4EzDKooVHbxL9GuG+dLJCzuz0tcb
mLyz6Y5m3tZHKPkGrzQegF2eOWnAVnPhPnzenjfRrY8vC79FDJnqgMAkPxRR3koN
U/Q61O/9VZC7Z+Lwu999pkPTmHVK/tfCpQWZnrRrCfv89dncNyEXU7RV98cG53ZC
+2m/BADDdq3yHw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:12 2025 by rpki-client on console-fra.rpki-client.org