Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
File: KwviJiMNQJnO6gpKbPTti5AgE1A.mft (raw, json)
Hash identifier: l0s1mMSRG5uTjHcvPvlrBnf3MhtbzSGcXQ7gl4dc6fc=
Subject key identifier: 26:7C:43:87:E3:08:5E:99:C3:64:FA:E1:63:37:1E:CD:38:E4:B3:B6
Authority key identifier: 2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
Certificate issuer: /CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Certificate serial: 0195121073B7ACE1A7C23B73C109EB224463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
Manifest number: 0861
Signing time: Mon 17 Feb 2025 04:00:22 +0000
Manifest this update: Mon 17 Feb 2025 04:00:22 +0000
Manifest next update: Tue 18 Feb 2025 04:00:22 +0000
Files and hashes: 1: AIuxDan3cmgh1sSTa1msoGsI4OU.roa (hash: wfljXRT2O4eVL/YpdauQcVAws8xYzb3xMFQl+DLnKBY=)
2: KwviJiMNQJnO6gpKbPTti5AgE1A.crl (hash: j3vJ7dtv6s3bobbM0Rd9L3g9m3e+V/+yZ/+t+5Nn5B0=)
3: qi0ZqRW6bWCGCBOudyRc_ZU33PM.roa (hash: Y/jI82xosnyON1Rhfs7vCWE2E/8RN3XifMYZrXwc2DQ=)
4: st8xnj4jJi6Xuwa7MiNbU3-F0wo.roa (hash: H2Z+tAqzPpLr9TIzWhq27NXaGhJV330iUQnoQkRKlKo=)
5: ymk3s2uYAjIifXFebx0Gs2GCpZg.roa (hash: 1iZB8mSVVI0xWBNNoWKTn+58QXVIuSn2YESYam7CY+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:73:b7:ac:e1:a7:c2:3b:73:c1:09:eb:22:44:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Validity
Not Before: Feb 17 04:00:22 2025 GMT
Not After : Feb 18 04:00:22 2025 GMT
Subject: CN=267c4387e3085e99c364fae163371ecd38e4b3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:17:1d:8b:24:bd:75:69:a7:13:d3:89:52:35:
98:62:a9:da:49:cf:c4:e2:ac:fe:9b:55:e8:44:35:
0b:14:8d:4b:da:06:1c:84:50:13:33:55:63:05:16:
1c:29:31:c7:1c:df:6c:57:4f:84:f8:41:70:bb:d5:
37:c1:e0:8c:63:27:af:28:07:fc:5b:fe:eb:3d:dc:
b2:f6:46:ab:cc:b8:dd:99:5d:d2:91:d1:bf:26:ba:
06:c7:0a:28:02:1a:fa:e4:b2:23:4e:ba:70:c3:2d:
95:6d:8b:5c:9a:ad:8f:70:57:db:5f:86:28:e4:97:
aa:b2:c5:4a:82:7c:19:18:ba:e5:b8:61:a6:9d:f1:
4b:41:9a:5e:bf:24:13:fd:22:d5:7f:a3:b6:88:50:
da:de:22:3a:a3:61:74:5f:f4:64:bf:2b:de:ec:c9:
c7:58:69:68:79:37:39:43:7a:20:24:d7:62:1d:f7:
c3:6e:4d:95:7e:3b:86:82:e3:70:d1:99:58:6c:8e:
b0:7e:c1:8f:4b:3d:11:5c:b6:30:1c:e2:87:d5:bf:
13:3c:83:e0:72:42:79:86:09:72:8c:74:dd:a9:53:
c3:00:18:72:bd:85:9e:15:20:d2:dd:2f:b5:1c:1c:
43:1b:ec:21:2a:51:75:59:1c:27:dd:95:fc:15:1f:
a1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7C:43:87:E3:08:5E:99:C3:64:FA:E1:63:37:1E:CD:38:E4:B3:B6
X509v3 Authority Key Identifier:
keyid:2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:29:b5:da:4a:6f:94:9a:ea:3d:7c:47:a3:13:3e:f1:0c:3b:
4a:2f:8a:b4:79:f3:1f:51:1f:59:6c:32:d7:a2:ff:0d:bb:96:
c0:10:d9:2d:9b:70:72:4d:71:95:38:71:cc:85:66:c3:a1:97:
02:22:b9:20:d6:1a:53:ca:55:7c:9f:4f:31:95:45:b1:76:80:
cf:9c:eb:44:35:c6:df:34:56:87:ba:ae:3a:ce:0f:62:5e:b8:
dd:50:fd:20:8e:7c:d5:9b:9a:cf:75:6c:2a:48:61:5a:fe:36:
b9:da:37:d0:ec:c3:ae:a5:e3:40:10:5d:5e:d2:ad:18:a4:e5:
c9:f3:03:03:8d:15:67:9e:e8:d7:d2:8b:94:bb:84:cf:be:76:
cf:12:d1:da:39:94:10:d6:e7:4b:1d:4d:b4:1b:5d:e2:1d:83:
df:93:50:d3:b9:bf:f9:41:ea:78:7a:12:32:ee:8a:bd:dd:a1:
45:f2:ca:0c:69:3c:72:9a:2c:de:18:09:29:1e:d8:88:38:66:
5d:c1:c0:10:6c:e8:b9:bd:73:ab:aa:6b:94:14:af:e1:13:ba:
9f:bf:ea:e8:26:38:77:c7:96:7b:ea:49:d3:6e:c4:58:ce:64:
69:c2:08:ae:ea:58:ae:9e:2a:08:1d:6c:01:7f:4e:b0:c1:c2:
93:79:22:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:07 2025 by rpki-client