Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
File: KPVnVJmD9DrdmYw26PeL0V9Fosw.mft (raw, json)
Hash identifier: wp1c+1FAlcDNCT/MQxO4iGyz/WrczWvdSVtJctsVdq8=
Subject key identifier: 7D:BC:08:5E:51:13:C1:7E:58:66:4F:42:39:0E:D5:14:28:D3:1F:E6
Authority key identifier: 28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
Certificate issuer: /CN=28f567549983f43add998c36e8f78bd15f45a2cc
Certificate serial: 019510FE2DEBB09B63442F2A3B0CF6BD126F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
Manifest number: 0A5B
Signing time: Sun 16 Feb 2025 23:00:48 +0000
Manifest this update: Sun 16 Feb 2025 23:00:48 +0000
Manifest next update: Mon 17 Feb 2025 23:00:48 +0000
Files and hashes: 1: JQ4W3G2wBUo6PRPPv0dVzYu4y4w.roa (hash: JHM9O5mRc/9ugG6o1WcR1yYfnaT1Q2KD2tNJG5Hqsco=)
2: KPVnVJmD9DrdmYw26PeL0V9Fosw.crl (hash: ZGfpppRqEXfZrtpeC0JrrEe76ZPt93W4dviFpGdoxvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:2d:eb:b0:9b:63:44:2f:2a:3b:0c:f6:bd:12:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f567549983f43add998c36e8f78bd15f45a2cc
Validity
Not Before: Feb 16 23:00:48 2025 GMT
Not After : Feb 17 23:00:48 2025 GMT
Subject: CN=7dbc085e5113c17e58664f42390ed51428d31fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ef:b9:02:3a:63:d1:36:37:5a:7b:2e:31:6d:
70:ac:56:9b:43:a6:97:6f:5a:e5:28:90:a7:23:a2:
0c:06:8d:52:98:8a:26:39:21:e9:5a:10:19:94:be:
ab:fb:5f:6b:49:04:02:a1:d2:36:78:6d:e9:b3:8d:
2a:e8:a7:b7:38:0d:90:c0:d7:95:3d:5f:8d:d6:b9:
2a:90:5c:05:fe:5e:17:fb:fa:53:7a:34:90:9b:b6:
c6:ef:92:f9:ad:62:a4:cf:0e:db:4b:1f:f9:8f:3a:
e2:34:38:f8:ef:52:57:9a:1e:4e:c7:4a:0e:8c:d5:
ac:3b:ce:e1:b5:4c:db:bc:cd:4b:74:b0:4d:0e:dc:
99:88:a5:52:6f:22:b0:ae:27:cb:23:07:f1:09:e4:
c0:09:16:8d:fb:84:a3:67:23:48:81:d9:58:fe:16:
83:77:cd:ae:b7:89:a7:a6:5e:a1:e9:5c:60:f9:38:
a5:10:a0:25:90:ef:9d:75:04:41:38:0f:40:bf:2c:
b1:30:24:45:4c:bb:a2:a3:bf:e2:71:c2:34:49:39:
a1:60:04:c7:f0:20:05:51:ae:42:a5:0d:28:16:f6:
fd:fa:7d:3e:78:be:98:ed:e2:82:30:3e:c9:91:e7:
cd:bd:d9:77:d8:d7:9a:1e:de:a4:1a:4e:c6:b4:1f:
1d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BC:08:5E:51:13:C1:7E:58:66:4F:42:39:0E:D5:14:28:D3:1F:E6
X509v3 Authority Key Identifier:
keyid:28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:dd:88:9f:97:f5:66:bd:ac:ef:83:f7:52:81:4b:9f:eb:7e:
77:3b:fa:7e:a8:07:6c:e8:ee:cc:af:6d:79:82:97:48:86:4d:
86:d5:35:df:39:19:86:c3:03:10:a9:b9:46:78:2f:85:24:2d:
be:21:bd:24:97:1c:13:60:35:2c:62:d7:7f:2f:6f:05:0b:df:
ff:74:f2:20:87:7f:51:79:07:ef:64:3a:c1:e7:94:36:71:9e:
4d:4f:d5:7c:7f:8d:8b:89:99:54:a9:68:d1:47:91:0c:5a:aa:
db:e7:f7:82:e8:99:94:a0:62:34:58:c1:47:0b:50:7c:12:86:
68:2f:10:19:c1:43:c2:be:95:84:69:1f:03:79:95:ff:f0:66:
ae:a7:b2:99:b4:f6:19:48:1e:09:4a:f1:5c:d0:25:44:a5:d4:
28:c6:fc:d9:c1:f0:78:14:cf:fa:96:45:aa:2e:53:2e:f2:7f:
9e:4b:b6:b3:bd:5e:39:23:86:ae:f1:c2:4f:c6:d8:84:57:e3:
04:52:a2:bd:f1:c8:c3:c8:77:1f:70:04:42:cb:18:9b:56:5f:
21:e4:a7:81:80:3b:e6:db:7b:d1:f3:3a:64:5d:8f:59:55:12:
89:85:a1:e8:90:7b:7e:f7:e1:1c:24:d6:c6:76:b8:2c:b3:76:
a9:75:3c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:32:16 2025 by rpki-client