Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft
File: k_0m06C2k6ApvGLcud2pUZ5HdkA.mft (raw, json)
Hash identifier: NsCc2PvlQyUI50jTsYxKuT1YSYljqvvfhkPdivxW7Cc=
Subject key identifier: 49:BA:8E:01:B8:CF:CE:AC:B6:05:E0:AB:40:E6:51:0E:7E:F9:D8:60
Authority key identifier: 93:FD:26:D3:A0:B6:93:A0:29:BC:62:DC:B9:DD:A9:51:9E:47:76:40
Certificate issuer: /CN=93fd26d3a0b693a029bc62dcb9dda9519e477640
Certificate serial: 0194C42C486070F5B772F8C5D1DC19FCE96A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_0m06C2k6ApvGLcud2pUZ5HdkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft
Manifest number: 0667
Signing time: Sun 02 Feb 2025 01:00:23 +0000
Manifest this update: Sun 02 Feb 2025 01:00:23 +0000
Manifest next update: Mon 03 Feb 2025 01:00:23 +0000
Files and hashes: 1: ArhXiZl_rJ6jBgX2PzZ8anI0Wyw.roa (hash: 9a5DYYLxOiKU0/Lz5D5+BYks2R+Do2ZNkpv4HeNltqY=)
2: k_0m06C2k6ApvGLcud2pUZ5HdkA.crl (hash: C0jvoS2gqwe2/gNjSSgd88KOgtMBFO0vHLVcZaYzGZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_0m06C2k6ApvGLcud2pUZ5HdkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:48:60:70:f5:b7:72:f8:c5:d1:dc:19:fc:e9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fd26d3a0b693a029bc62dcb9dda9519e477640
Validity
Not Before: Feb 2 01:00:23 2025 GMT
Not After : Feb 3 01:00:23 2025 GMT
Subject: CN=49ba8e01b8cfceacb605e0ab40e6510e7ef9d860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:58:6c:84:0e:1e:fa:62:0d:3c:09:1e:95:af:
60:cc:58:1f:a4:8f:2d:a3:77:80:07:e4:e7:42:d4:
c3:1f:05:d5:5d:1f:2c:3a:6c:29:7a:46:af:65:50:
35:4d:79:85:33:81:cd:24:9f:dc:56:47:38:c2:ef:
74:ff:6d:07:d6:7a:e6:b2:9a:57:e2:b1:3a:0c:f1:
7a:c9:ee:09:80:b3:5a:31:a4:fd:1f:37:c8:71:28:
d9:b7:5e:6f:3b:fc:82:db:2e:a5:4d:b1:41:2a:de:
37:29:05:2f:f0:ef:fe:69:a6:f9:e5:92:31:43:4b:
05:f6:47:6e:5d:59:58:6e:f7:25:a2:9e:a4:3b:ba:
18:e5:a0:4d:23:44:d0:e6:8b:bb:af:a8:e7:ab:32:
e9:96:ee:79:72:65:61:c1:30:6c:f9:6f:e1:75:58:
24:e0:11:07:e7:47:da:24:4a:9f:b8:0a:2e:04:20:
d9:6c:15:70:ff:47:65:fa:7a:b8:0d:53:b0:da:d8:
44:68:83:d4:6d:96:53:06:d7:9f:9b:1b:42:f6:6a:
68:f7:77:e6:a7:3f:75:71:37:91:53:fe:10:fe:90:
ea:d6:68:9f:59:1c:7a:56:ac:8b:94:54:ef:72:f5:
3c:99:40:01:bb:9e:8e:4a:45:65:5d:49:63:85:ec:
1a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BA:8E:01:B8:CF:CE:AC:B6:05:E0:AB:40:E6:51:0E:7E:F9:D8:60
X509v3 Authority Key Identifier:
keyid:93:FD:26:D3:A0:B6:93:A0:29:BC:62:DC:B9:DD:A9:51:9E:47:76:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_0m06C2k6ApvGLcud2pUZ5HdkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:39:eb:cb:98:2f:da:fc:1e:3f:6a:47:52:f8:72:dc:f7:96:
00:ac:62:1b:65:41:75:fb:24:57:86:57:76:89:b8:6f:16:dc:
df:50:3b:14:6a:2c:8e:c9:b5:35:0c:80:3b:b0:65:8f:ca:a4:
a8:a4:bf:c3:e4:f0:bb:77:40:d2:ff:8d:74:e7:a4:e1:2d:0b:
26:18:e2:f8:72:f6:87:1d:9b:f6:be:84:00:12:d6:9a:c2:6c:
c4:0d:2e:69:a5:4f:c7:70:f0:db:02:21:94:24:e3:49:29:e9:
a4:0a:04:9f:7f:d0:28:6d:db:43:32:c3:f0:88:41:c2:cf:28:
de:16:59:b5:fa:61:76:36:2b:a2:e4:f3:5d:98:29:20:26:e6:
f7:db:b5:b1:29:12:c6:1d:c1:03:34:86:2d:08:8e:9e:df:b1:
9a:36:1b:2c:b9:c5:9e:2d:f0:c0:89:0d:12:cb:7f:ed:d9:94:
67:b8:04:e6:16:e3:7e:a5:43:6c:67:19:92:7b:e5:f1:1d:b8:
4a:ac:b1:cc:89:1c:c8:d5:f1:8a:44:75:78:99:5a:d5:ce:d5:
f2:db:04:25:56:d3:9d:dc:a8:20:d4:18:3e:4c:d6:4a:ed:70:
0d:bd:60:d0:14:5e:44:9f:9a:2f:ae:15:4d:17:d5:3f:1d:bd:
0a:92:df:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:54:19 2025 by rpki-client