Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
File: kkQvHPx17REAE4d5MKKdhvieu7Y.mft (raw, json)
Hash identifier: IMCWQl8iLHBFgi+NRGFwM1QVkAAXcQtYssjxccAwpv4=
Subject key identifier: DE:EE:CF:37:88:6E:16:E7:A4:42:94:DD:FA:C4:55:6B:91:C6:E3:BB
Authority key identifier: 92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6
Certificate issuer: /CN=92442f1cfc75ed110013877930a29d86f89ebbb6
Certificate serial: 019510C6B42BBD6A1A3AF9B4F26EF3FED368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
Manifest number: 0B22
Signing time: Sun 16 Feb 2025 22:00:12 +0000
Manifest this update: Sun 16 Feb 2025 22:00:12 +0000
Manifest next update: Mon 17 Feb 2025 22:00:12 +0000
Files and hashes: 1: kkQvHPx17REAE4d5MKKdhvieu7Y.crl (hash: iOvdINoCDyWg+GgCvox4/Epw5PyVL6JD7ZLAXHM36Go=)
2: qZc8LbpaDAe8YC_wNESeZVdptts.roa (hash: rHoCkpXeQIISTyOKdyHTZYhLfz5LjhLjx8VWRXWEabQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:b4:2b:bd:6a:1a:3a:f9:b4:f2:6e:f3:fe:d3:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92442f1cfc75ed110013877930a29d86f89ebbb6
Validity
Not Before: Feb 16 22:00:12 2025 GMT
Not After : Feb 17 22:00:12 2025 GMT
Subject: CN=deeecf37886e16e7a44294ddfac4556b91c6e3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b9:f1:e8:a8:22:1a:40:d2:2b:eb:8b:5a:28:
0c:60:8e:43:88:67:08:37:c8:90:ee:ab:cc:d1:36:
19:0e:9e:eb:d5:cc:13:7a:54:8e:06:f8:19:af:b3:
b6:b2:e3:dc:ae:d2:f6:13:0a:f8:a1:8e:20:d5:fb:
4d:02:4b:c1:af:9e:db:f3:4c:2c:17:9a:bf:c5:7d:
25:80:62:28:97:de:ea:79:60:18:c6:1d:9f:9e:e4:
a4:7a:1c:7d:fb:f8:92:56:46:ed:90:27:87:96:ba:
35:d6:3b:b9:7c:26:41:28:de:68:b7:e9:ea:85:61:
30:23:71:a8:5b:ec:0a:4d:66:6b:ee:4f:07:31:bc:
9b:17:07:08:ce:03:50:f0:6a:15:d9:90:ff:96:b6:
a4:17:4a:48:40:42:76:eb:cb:d5:8c:8b:f2:52:b5:
16:23:c8:0c:c3:19:6a:95:c5:aa:9a:f7:ba:98:49:
2f:12:5b:e7:92:18:bf:e3:7f:6a:90:84:b2:cd:65:
8c:ff:28:ea:b0:d0:3c:79:a3:96:3e:d5:83:51:cb:
bb:0f:ae:fc:05:aa:85:d0:61:f4:24:18:82:1a:bf:
60:62:3e:3e:d2:43:82:89:db:5c:2f:fb:e0:bc:02:
9a:43:81:22:31:a6:44:99:8e:6f:46:aa:d9:1c:c5:
8e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:EE:CF:37:88:6E:16:E7:A4:42:94:DD:FA:C4:55:6B:91:C6:E3:BB
X509v3 Authority Key Identifier:
keyid:92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ec:ea:72:b3:f5:74:38:79:d3:74:e5:7c:5a:67:c9:43:23:
fc:5a:96:5c:a7:59:11:6b:f2:c3:02:83:3a:92:8c:bc:b5:6b:
c2:c9:74:5a:bd:99:a4:31:08:25:3d:11:80:eb:55:5c:13:08:
83:8b:c2:52:b7:aa:06:f3:83:bd:0c:41:2c:68:2b:83:9b:da:
44:7d:9d:cb:da:cb:97:b4:8b:ff:68:7e:70:6d:2f:7b:82:ba:
97:f9:f2:a6:19:bd:35:6a:66:08:e3:5a:4c:ea:d9:ee:15:eb:
ef:45:aa:5e:d8:79:35:67:6e:67:bc:c4:84:f3:bc:c8:ea:bc:
2c:e5:3c:20:aa:18:6b:78:a6:3b:f6:29:87:a1:5e:c9:64:a3:
ff:e7:8c:fa:79:9a:16:ad:fb:0c:62:4b:e9:63:b4:89:51:d9:
45:94:66:9a:a6:d7:5a:29:19:b5:c9:f4:0c:7e:e6:50:95:6e:
07:f9:1c:4d:a1:61:56:77:10:2a:de:a0:0b:82:c4:78:33:dd:
49:fe:3a:79:db:9b:ee:f6:e5:2d:7b:9c:bb:d2:49:44:7c:35:
08:16:55:79:36:c4:13:9d:99:e1:2a:b3:6f:6c:42:dd:25:e3:
1c:69:d3:f2:0f:ac:3b:7c:a7:d5:39:77:e2:2b:2d:25:e9:59:
73:43:7f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:24 2025 by rpki-client