Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
File: KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft (raw, json)
Hash identifier: U5/9IIYuGHEF1a2ltCE1ZM43R5RAYZTQv+RRkHn9bN8=
Subject key identifier: AA:29:98:83:53:70:F5:D4:C3:79:34:20:F8:96:21:43:E2:91:7D:5D
Authority key identifier: 28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
Certificate issuer: /CN=2841262acd62c90e68081a6f777375df2c3713c2
Certificate serial: 019512474653638B6B120713632719031DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 05:00:15 +0000
Manifest this update: Mon 17 Feb 2025 05:00:15 +0000
Manifest next update: Tue 18 Feb 2025 05:00:15 +0000
Files and hashes: 1: KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl (hash: uRemPGUciYj9rqbNAuIJ/V4RJM/tr4zTLDMEevzZoiU=)
2: m0XExKmyfiqbc39X_t0r3f-rPnw.roa (hash: FEVTKa9GfQK+wd1z7OERkMrYF0fGkCabFyfJNv3Ffiw=)
3: rqU6u3hoknN-3UdF3hZxUQWu0pY.roa (hash: NDMORKcf0xpEpr+RJnB8nufh5JN+9UGeMs7mpyek8O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:46:53:63:8b:6b:12:07:13:63:27:19:03:1d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2841262acd62c90e68081a6f777375df2c3713c2
Validity
Not Before: Feb 17 05:00:15 2025 GMT
Not After : Feb 18 05:00:15 2025 GMT
Subject: CN=aa2998835370f5d4c3793420f8962143e2917d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:31:be:7e:d0:8e:ee:03:3b:04:90:6e:f5:4d:
c8:38:98:fd:61:45:20:8b:4c:71:6d:37:dc:29:22:
ab:f4:aa:fd:6d:4c:88:b8:89:ca:34:ee:47:a5:71:
3c:c3:81:e9:5b:9f:8b:5b:12:7b:22:52:ca:0f:70:
1c:3a:61:03:7c:5e:e5:15:0a:e9:db:aa:e9:94:82:
ac:97:d7:16:2f:e0:c5:17:21:ef:eb:b8:9c:74:7b:
5d:34:c7:f9:32:72:f0:ca:64:7a:20:a4:42:61:a2:
2a:75:f1:59:4d:3a:5d:64:10:66:81:33:4a:02:bc:
77:6b:9f:6b:75:37:cb:e4:49:8a:77:b3:17:c6:58:
a5:42:f2:87:92:ba:48:9e:76:87:93:c5:34:2b:2c:
83:aa:12:9c:e9:85:f2:72:2d:6d:0d:25:b6:37:e7:
b4:15:e3:56:5b:01:f0:94:09:fe:9d:36:ff:10:8d:
a5:f3:54:bb:fc:e7:8c:70:8a:c9:32:d5:95:0a:4b:
82:1f:c3:ce:05:ad:a9:4a:30:4f:9e:ac:cb:8b:fa:
1a:5e:4b:26:ff:c2:f9:45:96:1f:31:db:ff:13:64:
33:50:a5:9c:a3:63:29:d7:0b:6e:30:31:09:6e:8f:
eb:04:00:03:4a:3b:5c:b3:33:c2:61:08:2d:8c:bc:
83:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:29:98:83:53:70:F5:D4:C3:79:34:20:F8:96:21:43:E2:91:7D:5D
X509v3 Authority Key Identifier:
keyid:28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:00:09:e3:eb:63:18:46:fa:bf:94:aa:d2:45:e0:43:fe:2d:
6d:78:fd:1c:15:e6:8a:18:f6:e9:b6:d6:fe:47:78:fe:bd:59:
45:43:7b:6c:90:62:07:b1:54:e7:2c:f4:74:46:c9:8f:ce:14:
f9:b8:6d:4f:1a:92:d5:15:32:4f:93:5d:41:54:17:bb:5f:9c:
88:a4:1e:ce:aa:7a:27:d1:67:61:e0:b9:9b:38:73:0d:3b:d8:
26:90:23:1c:49:25:f8:ce:27:63:54:4e:7f:20:9b:0f:c1:48:
12:85:69:67:15:c5:76:cd:d3:74:27:b9:a3:84:e1:dc:3d:b3:
2d:08:f5:86:15:d9:fd:83:90:43:d6:a5:21:b6:e1:f1:fc:6c:
2b:4d:ca:38:b2:b4:e9:98:02:53:9d:5d:25:0a:b0:79:5e:ff:
5b:28:00:fd:50:f8:55:bc:dc:3f:e3:07:79:ba:d3:e6:91:9c:
40:0b:f4:91:e4:a8:47:95:5c:76:97:70:f4:b8:2d:e3:89:35:
04:76:0c:cc:4c:12:93:95:62:05:34:51:c5:97:18:96:67:53:
50:f2:20:35:66:02:60:66:11:5c:d9:09:de:29:46:ae:f9:21:
ae:70:8e:f9:bd:e5:1e:d7:a4:61:19:97:d6:aa:b4:fd:39:64:
30:38:99:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:04 2025 by rpki-client