Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
File: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft (raw, json)
Hash identifier: kGNNDFTUYwvncw9JACSvgL81tQK7b4NZxVGeFxZ0Zg4=
Subject key identifier: AD:57:3B:8F:13:70:D2:72:ED:80:94:7D:DE:01:16:69:17:E3:64:AB
Authority key identifier: 28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
Certificate issuer: /CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Certificate serial: 0195116C0A73E5CDFE4AEA0C79F05D6B0F0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 01:00:48 +0000
Manifest this update: Mon 17 Feb 2025 01:00:48 +0000
Manifest next update: Tue 18 Feb 2025 01:00:48 +0000
Files and hashes: 1: 5HJN2TYq8z8eJjL58_c0u5IQ5Q8.roa (hash: yhJDGnf72pl9WyOFKwP7I927446gAZjcSsCI8qXComM=)
2: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl (hash: Or0Qf0sglEtHGZ3tcU+F4OGVkWRS+QsMufj7rIGOyUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:0a:73:e5:cd:fe:4a:ea:0c:79:f0:5d:6b:0f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Validity
Not Before: Feb 17 01:00:48 2025 GMT
Not After : Feb 18 01:00:48 2025 GMT
Subject: CN=ad573b8f1370d272ed80947dde01166917e364ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f7:34:9d:43:34:94:0a:92:fe:d8:da:d6:7e:
84:bc:74:59:e8:47:b4:3d:39:f1:40:66:dd:92:8c:
ab:cd:72:90:7c:3e:c4:4c:69:10:64:69:60:c2:9d:
9d:5c:b5:0c:84:d9:5a:47:dd:48:d0:db:55:07:ba:
ff:13:67:e6:24:c1:2f:1f:c1:e9:f5:63:f8:53:09:
b3:a0:83:88:58:4f:23:74:dc:62:90:09:68:17:1b:
14:d5:19:51:e3:f9:b6:85:81:bd:8d:5e:e6:9e:1b:
fc:2b:d6:1c:d8:30:7c:14:1b:a7:61:cb:a8:af:2c:
f6:90:5d:5d:5a:97:c3:4c:8c:1e:4f:4e:48:3c:8c:
d8:bf:63:4e:7a:b6:58:a9:ab:4f:23:a2:96:ea:73:
87:90:7a:39:33:17:42:9b:de:0b:05:f9:69:7c:9c:
34:6f:2e:27:a1:84:f8:e3:4f:bf:ef:53:0a:f0:b9:
19:8b:e3:7f:61:21:d6:77:18:19:74:10:58:ac:9b:
b3:2b:05:70:5f:41:42:21:97:cd:d8:5e:c4:15:7a:
17:32:ac:30:97:dd:91:99:1a:93:41:a7:d7:f8:2f:
73:a8:bc:32:e9:21:ec:2f:3e:f4:90:3b:d2:46:d5:
26:a8:93:5a:27:bd:2a:a3:45:53:d1:82:4f:f5:4b:
c6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:57:3B:8F:13:70:D2:72:ED:80:94:7D:DE:01:16:69:17:E3:64:AB
X509v3 Authority Key Identifier:
keyid:28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:bf:7d:b0:c0:6f:9a:4a:2b:fd:ca:7e:07:0d:c7:18:95:40:
3c:6a:ce:ff:4b:cc:9d:7f:70:dd:3f:ab:b5:19:8b:e1:88:24:
a3:1c:e2:47:c2:b7:2a:da:47:6f:3e:34:49:ba:75:a4:98:9b:
42:2d:49:ec:24:f5:6e:46:83:5c:0e:9f:82:ed:1b:ee:66:47:
b2:41:d0:a9:bd:ee:b4:a0:ba:83:68:08:27:c8:12:46:4b:5b:
79:cc:d3:bd:0d:4e:10:d3:5a:3e:e3:19:2d:3e:c5:70:b4:31:
a4:76:e9:b7:5f:7b:b0:88:c7:a7:41:16:e0:fc:a9:e9:b7:d3:
f4:bb:be:0d:e0:4f:3b:77:21:ab:1a:45:78:92:4b:43:c0:a7:
da:5b:a8:5a:43:15:02:a5:0a:0d:c4:ac:34:1d:6b:69:4c:c5:
ed:4b:76:63:2a:a4:e9:00:d0:26:47:55:11:04:d4:ff:87:25:
fd:b1:7c:09:31:4c:db:45:7e:56:cd:64:dd:e3:91:0e:5b:c9:
11:3d:6f:8f:03:11:9f:f6:25:04:8a:e4:46:36:60:0b:76:72:
18:a7:cf:a8:49:e6:88:2f:7f:54:49:f5:19:61:38:3f:13:ab:
c0:c4:7b:55:86:69:5b:ec:61:25:d0:59:73:f1:59:44:62:b6:
03:15:fb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:09 2025 by rpki-client