Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a3f06e-ac6c-4b66-a96c-29b97b990555/1/Ko09O9sG8A5rtEX02y2X-bfEvro.mft
File: Ko09O9sG8A5rtEX02y2X-bfEvro.mft (raw, json)
Hash identifier: j7vB8Bguj9g69707Uw0+1vtxx0DQAsVRvxJFrBnk070=
Subject key identifier: 78:76:78:B9:FC:85:80:7B:6F:A2:A5:36:CD:56:41:17:C2:F0:70:C1
Authority key identifier: 2A:8D:3D:3B:DB:06:F0:0E:6B:B4:45:F4:DB:2D:97:F9:B7:C4:BE:BA
Certificate issuer: /CN=2a8d3d3bdb06f00e6bb445f4db2d97f9b7c4beba
Certificate serial: 0194C49A7242D2C8DAE7166932FF20080A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ko09O9sG8A5rtEX02y2X-bfEvro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a3f06e-ac6c-4b66-a96c-29b97b990555/1/Ko09O9sG8A5rtEX02y2X-bfEvro.mft
Manifest number: 0289
Signing time: Sun 02 Feb 2025 03:00:43 +0000
Manifest this update: Sun 02 Feb 2025 03:00:43 +0000
Manifest next update: Mon 03 Feb 2025 03:00:43 +0000
Files and hashes: 1: Ko09O9sG8A5rtEX02y2X-bfEvro.crl (hash: T/mt/JZogXB9J+E9zuZJRh2ZEd1R467q6waBdR1czNc=)
2: _9hTLlJnLRA_A0tBJZrt39as7xg.roa (hash: wFxuZ4h9T3MV1XhuCw+0BSZnSlOb/FPW9LipazBslAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a3f06e-ac6c-4b66-a96c-29b97b990555/1/Ko09O9sG8A5rtEX02y2X-bfEvro.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a3f06e-ac6c-4b66-a96c-29b97b990555/1/Ko09O9sG8A5rtEX02y2X-bfEvro.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ko09O9sG8A5rtEX02y2X-bfEvro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:72:42:d2:c8:da:e7:16:69:32:ff:20:08:0a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a8d3d3bdb06f00e6bb445f4db2d97f9b7c4beba
Validity
Not Before: Feb 2 03:00:43 2025 GMT
Not After : Feb 3 03:00:43 2025 GMT
Subject: CN=787678b9fc85807b6fa2a536cd564117c2f070c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:62:29:18:0f:d5:d4:98:ea:40:a6:61:f1:bf:
d7:2e:8c:fa:44:f8:e3:3e:5c:d5:6f:d0:fe:c5:68:
86:29:bc:f7:a2:9b:5f:a3:81:be:3e:33:a1:99:57:
16:15:07:10:d7:15:84:37:6a:c8:75:13:33:6f:13:
b9:61:24:37:8b:d9:16:8a:55:54:49:51:9b:96:f6:
01:73:9e:17:23:4f:b2:d1:93:33:9b:6b:86:97:52:
fc:e8:01:da:d9:9a:73:31:73:e1:1f:68:2e:68:e5:
0e:66:55:d7:cf:ce:a9:fe:ad:a8:b8:3d:1c:50:cc:
2a:9d:99:d5:d2:c2:bf:f8:36:b2:e6:04:ff:b9:0c:
e8:31:6c:22:a0:19:66:29:07:a7:dc:2c:80:ed:8d:
1f:61:44:de:f1:f6:0e:7b:3b:21:39:fa:ab:0c:6f:
e3:0e:81:74:39:75:70:3d:af:3e:08:e1:83:bd:ad:
91:d4:9b:a6:78:19:55:0e:39:45:c6:03:4d:b5:4e:
44:98:c0:f8:b9:cb:79:1e:85:24:08:81:9d:95:be:
cc:28:d9:c6:94:b4:08:79:f5:e6:4a:b2:ac:48:4d:
d1:2e:6e:77:12:3e:b7:d6:2d:ed:3e:d5:23:df:56:
4c:75:bd:7d:24:88:1e:59:67:9c:d5:97:0c:11:f5:
e0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:76:78:B9:FC:85:80:7B:6F:A2:A5:36:CD:56:41:17:C2:F0:70:C1
X509v3 Authority Key Identifier:
keyid:2A:8D:3D:3B:DB:06:F0:0E:6B:B4:45:F4:DB:2D:97:F9:B7:C4:BE:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ko09O9sG8A5rtEX02y2X-bfEvro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a3f06e-ac6c-4b66-a96c-29b97b990555/1/Ko09O9sG8A5rtEX02y2X-bfEvro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a3f06e-ac6c-4b66-a96c-29b97b990555/1/Ko09O9sG8A5rtEX02y2X-bfEvro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e5:d7:f6:65:cb:ce:5d:a9:34:99:af:63:0e:5d:02:e8:89:
81:62:42:0b:b9:70:f1:94:fc:66:87:c7:c4:84:63:e4:e9:ea:
38:44:3a:e3:81:94:a6:71:f2:cf:dc:b5:2d:a3:5c:43:d9:6d:
eb:5d:aa:43:5b:a1:ea:20:13:27:46:15:5b:fd:c0:c4:19:c2:
49:fd:e5:76:71:2f:40:36:f2:a2:49:b9:b0:80:b9:59:67:c6:
60:16:22:ce:bc:64:a2:66:58:f1:42:95:6e:84:a8:a8:22:dc:
ea:4e:2c:f2:09:0e:cc:0e:cb:ad:29:33:18:15:e0:b5:48:54:
b0:c9:4d:06:76:0e:b7:67:3e:df:f2:f8:37:8a:24:ca:73:74:
ed:6c:ea:37:46:34:e8:a5:ca:7c:c6:0f:e0:89:e1:90:75:53:
dd:65:79:23:11:26:30:6c:80:ca:ee:e7:3a:49:b9:79:c1:06:
87:48:0b:51:8c:c0:0c:bd:3b:7b:a2:35:08:1d:c2:3e:24:aa:
cf:d4:64:28:5b:c9:c9:45:a6:fe:f6:3a:0c:98:12:44:bc:5f:
3a:d3:b1:b9:8a:d9:fb:03:c7:cc:94:72:b3:a0:0a:75:c8:1c:
54:d5:59:6c:61:2c:6e:34:aa:72:56:cf:d3:fb:cc:b5:3c:01:
30:d2:41:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:41:11 2025 by rpki-client