Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
File: 1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft (raw, json)
Hash identifier: a3lPRXBDEJk4ND+PCDtlhzaqZxAQwfgV1tFLdlwM0uQ=
Subject key identifier: E2:62:EF:1C:14:BC:0C:65:A4:80:52:C7:DD:B0:37:BD:70:3C:3E:C8
Authority key identifier: F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2
Certificate issuer: /CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2
Certificate serial: 019512106E32AF2EF1E47DCBA4E540B34E93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
Manifest number: 118C
Signing time: Mon 17 Feb 2025 04:00:21 +0000
Manifest this update: Mon 17 Feb 2025 04:00:21 +0000
Manifest next update: Tue 18 Feb 2025 04:00:21 +0000
Files and hashes: 1: 1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl (hash: PZmSQBti1z7PTeBlbTWks2d4NYjLgVJcrFnaEIiAV9U=)
2: 2Z4uWBrUsnH37u-4XuHfV5Ci7Ek.roa (hash: AkCUWRms5SxBxIsWLsuMaXD0PJyWJJHr8rOMRKJRlkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:6e:32:af:2e:f1:e4:7d:cb:a4:e5:40:b3:4e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2
Validity
Not Before: Feb 17 04:00:21 2025 GMT
Not After : Feb 18 04:00:21 2025 GMT
Subject: CN=e262ef1c14bc0c65a48052c7ddb037bd703c3ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b7:72:2d:5e:80:8b:65:16:d1:8a:2a:ce:c4:
4a:8a:14:4a:e8:1b:ad:8c:b0:eb:0b:c8:30:45:6c:
8f:6c:08:5b:3e:b7:ef:fb:8f:91:63:cd:3b:06:25:
ce:d5:d4:12:e7:a3:c7:59:b4:94:85:d1:73:a3:eb:
d5:15:a0:11:53:c8:42:c0:e2:6b:11:34:67:1b:9c:
52:f1:9a:e1:9a:58:1b:b6:1f:d7:5e:12:2f:ea:43:
bf:73:0e:b6:ce:18:14:12:68:bf:9b:c3:4c:c7:02:
0d:81:08:af:43:0c:66:76:a6:fd:9f:19:02:c7:8f:
59:34:20:d8:d0:aa:c7:48:1a:2a:71:e1:dd:45:84:
4d:ad:0b:9d:7e:d8:0e:7c:84:9c:2f:3e:ad:55:9d:
86:56:60:e0:60:09:f1:a5:67:30:c3:e6:c9:26:28:
40:23:68:dd:4a:4c:c3:d1:17:61:22:6d:e3:98:8e:
d4:20:53:d8:b7:6c:e7:31:11:7a:12:32:a8:99:d5:
a5:b1:55:ff:e6:6f:c5:2b:f3:cb:18:11:c9:c0:cd:
c1:29:4c:bc:0d:5f:5b:9c:ba:a5:1f:c5:46:63:bb:
5c:83:53:d6:6f:90:7c:4e:33:75:3e:c7:60:86:a2:
11:8c:e0:4d:60:79:91:29:2f:09:55:a1:6f:6d:23:
ba:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:62:EF:1C:14:BC:0C:65:A4:80:52:C7:DD:B0:37:BD:70:3C:3E:C8
X509v3 Authority Key Identifier:
keyid:F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:1b:d8:0a:80:9a:83:93:a2:dd:13:d9:63:31:ea:0d:f2:69:
f6:8a:b1:a5:9c:98:32:b2:68:d5:91:95:93:8f:3d:0d:6d:13:
4a:a7:48:5b:e9:12:b5:97:ae:3e:41:a3:b5:01:fb:e7:56:de:
97:79:ed:f6:b9:f7:02:3f:68:a0:64:99:c6:ab:46:f7:15:80:
0d:c4:22:8f:78:e0:b9:59:a8:db:98:c7:ff:f5:28:fb:cd:e0:
c5:31:b3:df:6e:77:3a:b7:58:75:7b:60:48:27:d4:4b:d3:0f:
28:66:ae:51:a8:9f:65:c1:49:50:a9:7a:79:e5:76:b3:f3:41:
7b:08:8e:de:0d:de:7c:34:b0:c3:82:e4:31:bf:18:b3:fb:12:
3b:a4:8b:4a:0e:58:0e:73:5e:e2:0e:1a:50:37:a3:aa:73:a0:
c2:be:6f:cb:e4:27:ef:fc:b4:53:77:e4:5e:bf:9e:61:c1:b8:
52:d5:bf:b1:eb:e5:5e:85:d3:ee:f8:dc:a8:94:53:39:cb:04:
48:95:10:62:d4:6e:e7:4a:2c:75:b3:8c:41:b7:6e:fd:f0:62:
df:e2:12:6e:27:b2:da:b8:5a:8a:e6:94:5f:80:ee:e2:2a:c4:
d0:29:f3:95:0a:73:ef:45:c6:f0:ff:6a:6b:b6:b3:f1:ee:f7:
0d:ef:94:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:24 2025 by rpki-client