Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
File: kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft (raw, json)
Hash identifier: y9xsYr4u1rFi7q/62qluQZsTLVA2tEqamNn2yNrs35A=
Subject key identifier: 76:DE:00:83:F1:F4:2F:33:84:91:8A:55:5B:0C:11:AB:D8:BE:B8:F2
Authority key identifier: 90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78
Certificate issuer: /CN=90afdcff7de3a65947631f92c67e272767194478
Certificate serial: 0194C3508B281595C762501F9B6A3441044C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
Manifest number: 142E
Signing time: Sat 01 Feb 2025 21:00:23 +0000
Manifest this update: Sat 01 Feb 2025 21:00:23 +0000
Manifest next update: Sun 02 Feb 2025 21:00:23 +0000
Files and hashes: 1: TtaEnd2x3ONkWdmzFo1Q2PBTLIk.roa (hash: RgO9/5xhOVSpsgM4/jEFkDHMzjZGXv/dAO6C3WOQueE=)
2: kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl (hash: yX7fFE5JpY9NcU3eyWuiphILdGLrY01IU1oVGtj8MmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:8b:28:15:95:c7:62:50:1f:9b:6a:34:41:04:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90afdcff7de3a65947631f92c67e272767194478
Validity
Not Before: Feb 1 21:00:23 2025 GMT
Not After : Feb 2 21:00:23 2025 GMT
Subject: CN=76de0083f1f42f3384918a555b0c11abd8beb8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:55:e4:94:52:07:e6:f6:12:80:f2:ed:b0:21:
ea:df:20:13:d1:e5:1f:3a:ff:c4:b5:bf:94:66:52:
8a:63:db:18:b4:19:ab:dc:15:c4:29:22:8b:bd:43:
8a:81:c5:2c:86:62:3d:95:78:aa:66:bd:13:63:25:
01:d2:54:8b:a7:39:3b:8b:b8:c0:1b:dc:ce:f6:09:
f5:6c:a8:72:8a:93:f0:1d:e5:a6:7d:36:ee:98:87:
76:36:da:90:eb:0e:a7:85:17:60:be:d4:44:68:2d:
e1:2a:f8:4e:3f:17:e5:ae:be:86:07:68:5c:6c:db:
5d:a3:e5:36:0a:a3:b0:3c:ab:60:a3:21:e5:c5:48:
69:14:32:2f:09:b5:59:83:62:7e:56:ab:02:3d:34:
8b:a2:66:60:32:6a:37:7d:7c:bd:3f:dc:fd:80:60:
fe:bb:bb:38:c5:38:96:d1:57:4d:27:37:9c:0f:10:
bb:36:5c:48:10:39:ae:06:9a:96:ac:05:a6:03:d2:
dc:89:df:fb:f8:b3:d4:b9:b1:7f:29:38:8e:87:7e:
39:5c:ec:4b:2c:6f:7a:19:1f:df:4e:a3:28:3a:a6:
58:ff:1a:a6:2b:ef:a6:56:83:ba:ff:de:a5:a7:cb:
bb:84:10:62:0c:71:bc:87:5f:4d:74:e1:3a:48:97:
9d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DE:00:83:F1:F4:2F:33:84:91:8A:55:5B:0C:11:AB:D8:BE:B8:F2
X509v3 Authority Key Identifier:
keyid:90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:aa:fc:06:61:ae:99:5d:20:92:47:7a:71:04:06:0c:a2:98:
3b:8b:a2:f1:e4:e8:c8:ce:68:73:fa:5a:2f:df:e4:f1:0f:7c:
c2:13:fd:f4:7b:ad:56:d7:7a:98:a0:28:e2:4f:fe:f5:9a:10:
76:ea:05:5b:33:d1:62:d7:e3:92:2a:9a:e7:06:bf:d5:5c:87:
a0:a6:9b:1a:96:ef:08:bc:1b:d9:3d:6f:2e:f1:55:53:d5:47:
48:c0:96:2c:5b:b8:3f:e5:7c:1b:7d:bb:02:d3:72:df:d8:ac:
e4:e8:95:46:89:2d:33:c6:e5:4e:40:e4:c2:90:6a:e7:0c:c8:
80:11:a2:cc:5d:81:b2:a2:cd:cd:a1:c9:c5:c1:df:4c:8c:e2:
da:b9:c7:db:f2:43:6d:6b:6b:ba:3d:19:5e:6a:13:db:69:a8:
ab:04:2b:39:97:1a:15:3f:6a:f4:c6:32:c8:95:d0:7a:e7:4d:
3b:68:16:68:e4:84:4d:0c:73:4b:db:31:0e:02:8b:69:75:f9:
d5:dd:21:52:b8:be:ae:18:4a:c6:f8:70:11:24:d6:c1:69:b5:
69:5b:dd:a6:25:41:f3:60:ee:65:ac:ec:06:ef:6d:fd:49:7c:
01:9e:57:92:24:3d:18:0d:81:c8:75:84:2e:99:dc:50:19:16:
de:1d:6b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:53:42 2025 by rpki-client