Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
File: KhLvrumX6adjtGCrWS3dpnoN63A.mft (raw, json)
Hash identifier: vw2QQg+QW3h9UKJ1hsCMlFm2pMiwBJZwl1N6Rh824KY=
Subject key identifier: 14:E6:6D:CF:E9:47:AC:2E:F5:95:EE:E5:55:42:60:67:CD:2B:1F:E0
Authority key identifier: 2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
Certificate issuer: /CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Certificate serial: 0194C3F62F0C476FF81543898491549F8B99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
Manifest number: 12
Signing time: Sun 02 Feb 2025 00:01:18 +0000
Manifest this update: Sun 02 Feb 2025 00:01:18 +0000
Manifest next update: Mon 03 Feb 2025 00:01:18 +0000
Files and hashes: 1: 8u9hb0S_4Uuo5fYUwLVSXZK5rxM.roa (hash: 6iQilpXzVprtaKFu2A9AhzRE5Pgx6o9DaMAB494sBrc=)
2: KhLvrumX6adjtGCrWS3dpnoN63A.crl (hash: OVTKGTIMc9CXsnKGy+SfdW9IzNEMDPuS6QmF9Zxorpc=)
3: SccPUBWuljMHYcMk3K5QOdOVb6g.roa (hash: uBtJ4Y5vGvXPCHheXT9gg13uzVBy/aYh9vF63HwlhDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:2f:0c:47:6f:f8:15:43:89:84:91:54:9f:8b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Validity
Not Before: Feb 2 00:01:18 2025 GMT
Not After : Feb 3 00:01:18 2025 GMT
Subject: CN=14e66dcfe947ac2ef595eee555426067cd2b1fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:70:bb:7c:d3:26:3d:61:53:85:ca:bc:69:
ab:2a:40:82:d0:92:0b:8c:93:8e:c2:23:52:a0:a9:
8b:62:40:fc:b5:a7:e2:14:d1:18:d9:c0:65:a6:17:
ff:2c:cf:2a:26:e7:52:67:34:d0:a2:c2:ef:53:12:
a4:19:2b:ab:37:06:e7:cd:06:88:bb:99:aa:cf:65:
9b:2d:6f:e8:cb:bc:59:fd:50:c1:e1:b5:ee:74:61:
be:15:88:b8:4f:a0:30:0c:b7:2e:7b:07:c2:9d:d1:
1e:68:fc:0f:fa:6f:20:8d:b9:b1:5f:b3:e8:2e:23:
de:6e:fe:fa:79:2a:00:a6:fe:ea:ad:fb:db:af:b5:
82:bb:27:51:7a:16:49:1f:45:b8:e6:ad:a8:57:55:
3f:49:aa:aa:81:81:66:60:3b:43:e9:4a:e2:d9:4e:
47:35:b2:90:14:74:2d:b2:81:c1:4f:80:c5:bb:b6:
a4:80:50:2e:39:4a:b0:c7:d5:3c:8e:f1:7d:92:0b:
36:5a:8e:59:08:ce:60:05:83:02:0a:58:39:d5:ec:
aa:f2:52:98:dd:f4:36:1d:45:ba:a9:0d:fa:3f:b9:
63:ef:d2:83:9e:9d:2a:02:1a:b3:d1:4c:d2:2f:1a:
b4:34:ff:6b:44:65:30:12:fc:fc:fc:c0:66:49:56:
99:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E6:6D:CF:E9:47:AC:2E:F5:95:EE:E5:55:42:60:67:CD:2B:1F:E0
X509v3 Authority Key Identifier:
keyid:2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:51:04:1d:0b:f6:de:b9:1d:93:44:cd:5b:e6:db:9d:a3:52:
f7:fa:5a:63:fa:8c:25:ea:b4:a4:b3:61:ba:73:f5:e6:46:9e:
75:3a:fd:90:0e:46:01:2c:22:e6:ba:54:fd:83:ee:f7:0c:14:
98:d3:a7:10:82:00:6e:4d:3b:9b:dd:74:e6:a8:c5:e1:71:65:
4e:80:8c:23:da:18:01:4e:35:51:85:2f:64:4f:98:8d:bb:a9:
2e:e9:9f:9b:60:21:c6:83:3b:34:34:7b:bd:e1:b2:41:88:e4:
d8:ef:68:2a:9f:b6:59:23:75:65:25:c2:49:51:47:4d:3f:d6:
81:60:a8:70:0b:01:78:7f:a5:2d:d4:49:c7:91:cb:2c:b0:11:
c4:6f:e6:63:74:b5:99:85:27:c7:de:bc:00:dc:66:72:e0:78:
4a:4e:58:96:0d:51:fc:d8:74:a3:31:18:49:7a:dc:f4:02:db:
9c:76:1e:02:cc:df:04:02:21:9a:6c:25:69:82:d6:fe:ac:ca:
32:00:6a:56:5a:25:ef:33:54:13:62:10:ff:26:7c:3b:bc:31:
d4:71:d0:90:b6:ab:a1:a6:e9:47:70:85:cf:e8:fa:a2:68:0f:
f3:f4:ea:62:45:dd:10:00:2e:8a:bb:c9:30:0b:a0:c4:64:ca:
58:5c:dd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:37 2025 by rpki-client