Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
File: KqrPxdXjsmjyxrpDNrzJQfXI168.mft (raw, json)
Hash identifier: mv5WX9ACw2i1A7UrO8zz19H0ecOq8jw1jOZWNiUxIUs=
Subject key identifier: FD:38:E8:96:5A:60:D2:BA:81:6B:6E:34:BA:33:84:77:13:31:C6:EB
Authority key identifier: 2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
Certificate issuer: /CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Certificate serial: 019511D9C0F6BED32E838DA62726368C22A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
Manifest number: 0E3D
Signing time: Mon 17 Feb 2025 03:00:38 +0000
Manifest this update: Mon 17 Feb 2025 03:00:38 +0000
Manifest next update: Tue 18 Feb 2025 03:00:38 +0000
Files and hashes: 1: KqrPxdXjsmjyxrpDNrzJQfXI168.crl (hash: Y017dGgrDAj88pUEUh8i+SUzZnbKgGt9v7PgLG9b75k=)
2: YHCQmZQSLzGov9OQrOkdfN0GjNg.roa (hash: LJHw2nmrIzxX+QIoapfr72Feky+nKytQhXLYrU9sSE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:c0:f6:be:d3:2e:83:8d:a6:27:26:36:8c:22:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Validity
Not Before: Feb 17 03:00:38 2025 GMT
Not After : Feb 18 03:00:38 2025 GMT
Subject: CN=fd38e8965a60d2ba816b6e34ba3384771331c6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:59:1d:b6:bb:e5:2f:d8:f6:6e:f2:0d:cf:a4:
b4:dd:e5:94:ad:e5:bf:cb:8a:8f:2d:39:e3:fa:03:
bc:c1:9e:a3:34:51:a4:b9:b5:ea:f2:64:af:0a:34:
cd:8a:90:37:50:45:19:9a:e3:62:88:51:a5:2e:7b:
d3:ed:7e:79:5b:43:c8:ba:9d:7a:83:43:d9:f5:88:
35:9f:d8:88:d7:c5:d0:dd:b3:a2:af:a1:f0:3a:1f:
ca:3e:77:cd:d5:06:62:5a:17:1d:b3:12:a2:6a:05:
fd:ea:f1:7f:7f:04:ad:8a:6b:c7:c6:c4:fd:1b:aa:
5e:4c:f2:7f:79:d6:bc:43:df:d8:26:29:65:4f:6e:
f0:27:9a:da:bc:bc:39:9d:16:0c:28:87:aa:1e:7d:
07:5d:f8:2d:7c:d0:f7:33:75:70:0b:53:0a:91:a5:
ee:8c:22:59:f7:c4:fc:47:01:34:63:ca:63:01:27:
8f:78:87:44:b3:a4:83:ba:0e:0b:d7:61:ea:db:38:
20:49:d0:ce:d0:cc:ed:60:7d:98:2b:79:6d:67:34:
a1:32:d8:96:cf:3c:41:6f:1d:b9:f1:d4:90:3c:ca:
20:ca:ae:20:a2:4f:0d:b5:49:70:b8:e5:f3:b7:b8:
fc:6b:7c:c0:af:93:32:5e:c6:fc:82:e5:30:6c:d1:
d4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:38:E8:96:5A:60:D2:BA:81:6B:6E:34:BA:33:84:77:13:31:C6:EB
X509v3 Authority Key Identifier:
keyid:2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:82:a5:00:5c:61:b5:07:35:f3:b0:2b:54:81:41:c2:d5:03:
58:08:83:2d:b7:25:fd:d4:9e:e8:b1:7d:3e:42:49:c0:02:1a:
9b:48:8d:03:6e:e3:a6:69:09:58:0b:0d:39:ae:84:c1:ed:42:
ca:b0:0e:02:03:e5:b4:f4:2d:ff:39:cd:32:c8:aa:7d:da:b7:
d2:6f:82:18:a2:72:ac:84:6f:af:6a:d8:4b:50:5d:e0:b8:3f:
5c:48:c7:b4:0e:03:b1:58:99:59:76:cf:8f:1c:83:b0:48:e6:
fd:17:6d:ae:aa:12:97:6a:1c:65:d5:96:c8:f3:f4:a1:1a:c8:
9a:13:20:f4:46:4a:67:48:ad:7f:91:3d:4d:78:ac:4d:0c:1f:
9d:7f:7a:68:d0:75:0b:fe:b6:b8:ce:b2:56:04:2b:ae:e9:9d:
72:c3:ab:e3:13:56:14:4a:0b:e4:cf:36:3c:05:c4:b3:b7:3a:
82:65:d1:bb:35:a0:c3:6e:74:25:4b:8a:12:c9:a7:a8:92:08:
cc:f9:50:19:2a:77:d5:6d:b3:80:6f:57:b6:2e:f8:57:77:fe:
81:5b:db:cc:cb:45:85:0c:1d:c2:9b:89:ab:7a:cf:14:4e:5b:
65:e0:7b:4d:f5:25:26:2b:ae:05:04:e3:b8:30:a5:bc:9c:5f:
22:3d:ce:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:01 2025 by rpki-client