Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
File: K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft (raw, json)
Hash identifier: A2hD2vtiWTG8XCnFz0pT4X/BlOIPUjEdoWpkRrntxJg=
Subject key identifier: BA:EA:5A:5C:C6:79:D8:65:93:22:DD:6A:A1:45:60:2C:4C:5C:F1:4E
Authority key identifier: 2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
Certificate issuer: /CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Certificate serial: 0194C3BE7943A73A247955F2C89D6D242EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
Manifest number: 9F
Signing time: Sat 01 Feb 2025 23:00:27 +0000
Manifest this update: Sat 01 Feb 2025 23:00:27 +0000
Manifest next update: Sun 02 Feb 2025 23:00:27 +0000
Files and hashes: 1: K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl (hash: FSiPocnPDPdYUiZCKz8jN5MW2ocn4IROn10PrtJdfE8=)
2: cRNU9mqjTuLyrs64AbQG-Q8lS_M.roa (hash: gATqx8bTowXwaPkDc2Os+EOXUJAixbB51eSVdjtnNog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:79:43:a7:3a:24:79:55:f2:c8:9d:6d:24:2e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Validity
Not Before: Feb 1 23:00:27 2025 GMT
Not After : Feb 2 23:00:27 2025 GMT
Subject: CN=baea5a5cc679d8659322dd6aa145602c4c5cf14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4e:5d:80:4d:89:dd:ca:92:db:b0:e0:dc:ba:
a3:2f:d0:1e:b6:63:fa:68:3f:c9:f4:9f:37:51:f1:
03:5f:e5:b0:8c:39:47:5e:cd:2e:5a:55:2e:18:e4:
4a:65:95:a8:53:f4:bd:4f:a1:ae:99:88:3c:1f:7f:
f7:5d:a6:68:ec:9a:63:04:ff:e9:b9:3c:62:5b:fc:
ff:bd:51:d1:44:40:16:e6:79:fc:97:ce:56:b6:e0:
8d:bb:9c:bc:4d:76:b2:71:b9:71:be:37:2b:f5:a8:
2f:4f:f2:fc:c4:29:b9:67:2b:d7:3d:98:ce:83:ee:
33:a4:0f:d9:f0:ee:03:2d:1c:7b:b1:52:2b:1b:d2:
a1:e8:e2:cd:cd:67:71:00:ff:16:2b:e2:e0:79:25:
60:e1:3d:93:6c:e3:4a:89:1b:ce:cc:76:70:4d:27:
04:fc:db:5a:6e:5d:8d:2d:e5:2c:cc:d5:68:0b:2a:
78:e0:40:de:d4:a7:10:2b:48:fc:8f:16:98:89:3b:
b3:b3:79:31:b4:15:f2:9f:16:83:fd:81:8b:d0:24:
ed:0f:25:22:b0:1d:62:af:ba:58:72:5f:95:9e:d6:
dd:aa:71:33:eb:07:ab:2b:9b:3f:66:09:9d:0c:94:
b6:3c:92:2b:c3:56:62:18:77:2b:dd:e6:29:b5:dd:
46:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EA:5A:5C:C6:79:D8:65:93:22:DD:6A:A1:45:60:2C:4C:5C:F1:4E
X509v3 Authority Key Identifier:
keyid:2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:17:01:0a:8f:ab:bb:1a:34:46:1f:51:f9:f4:cc:6e:5e:6f:
87:05:ea:c4:2a:9f:b1:d9:8c:2f:81:4d:31:55:ba:94:8d:4e:
42:11:72:2f:82:bb:19:4f:d1:07:9d:1b:e5:b2:67:6b:c7:4c:
69:15:a6:84:1d:a9:4f:63:f5:2b:b6:c1:83:1c:ca:24:22:a1:
29:b5:6f:f8:14:8b:b9:f2:22:cc:57:fa:2e:c3:d5:25:12:ae:
44:fa:38:17:ee:a1:69:f8:31:73:95:b4:82:60:ea:9f:17:81:
51:b9:df:5a:70:64:64:a1:c3:ed:d3:26:6b:58:72:11:be:84:
41:0c:72:6b:c5:f2:7d:19:15:41:77:7d:46:48:d9:08:fa:18:
ff:45:bc:8a:7d:30:7f:d3:4a:0d:b5:27:17:23:af:d5:ac:5b:
04:ae:51:d1:3b:51:ad:d5:6e:c4:37:91:5b:3b:04:83:99:6a:
51:1e:cb:ff:78:f2:70:5c:77:c8:1a:5c:90:91:81:49:a4:2f:
72:83:53:13:37:90:28:f7:90:70:26:d9:51:1b:52:f2:75:48:
35:c4:8b:e0:46:23:6a:b2:a6:5c:49:1d:4a:0d:22:c9:db:1b:
fe:a7:48:84:80:ec:68:c4:91:2a:5f:da:c9:40:fb:46:66:2a:
7a:23:98:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:05:19 2025 by rpki-client