Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
File: kp8HacY4g1c_JwPXZkYlcK9VkPM.mft (raw, json)
Hash identifier: nor7zSqdmmPaIT/T6QPQzjgpxTQ0Y5/yaEV+nkuy+3E=
Subject key identifier: 71:A1:51:46:8F:E1:C7:7D:E7:87:C0:04:AE:79:1C:58:76:90:A8:2A
Authority key identifier: 92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3
Certificate issuer: /CN=929f0769c63883573f2703d766462570af5590f3
Certificate serial: 019510C7DBCE23162713C53B672AE4883F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
Manifest number: 1334
Signing time: Sun 16 Feb 2025 22:01:28 +0000
Manifest this update: Sun 16 Feb 2025 22:01:28 +0000
Manifest next update: Mon 17 Feb 2025 22:01:28 +0000
Files and hashes: 1: 64T0ThntK_T_XpMgojpC9XD428A.roa (hash: IOm91WRA7m29s//pvbAOHwECZ0iF5k9Wr7VRSaUENC8=)
2: kp8HacY4g1c_JwPXZkYlcK9VkPM.crl (hash: DEVWD5euxXnCV4z8BK5HSIhY3BqxnQSPywiQq6kld2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:db:ce:23:16:27:13:c5:3b:67:2a:e4:88:3f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929f0769c63883573f2703d766462570af5590f3
Validity
Not Before: Feb 16 22:01:28 2025 GMT
Not After : Feb 17 22:01:28 2025 GMT
Subject: CN=71a151468fe1c77de787c004ae791c587690a82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f1:3b:44:c3:47:a5:3c:47:f2:10:0a:3c:61:
b0:c5:73:3f:0e:da:9e:ea:1d:2d:cd:77:b1:64:ff:
25:80:f1:b6:d9:52:d6:18:6c:41:b7:21:8c:14:16:
42:ec:61:79:91:85:33:c9:e0:18:7d:5f:8f:2c:7d:
1b:72:ca:22:78:e2:c8:3a:43:2c:83:e5:8e:24:92:
0e:a6:29:4c:b8:47:99:d8:24:7c:47:30:63:9c:88:
a2:21:c3:1f:50:dd:64:0e:28:b1:37:22:17:32:65:
d9:d3:ac:3d:df:14:f0:ff:fc:7b:97:38:c3:7f:75:
ee:44:70:1f:ed:f4:b3:b8:bc:d1:2c:bb:66:cf:70:
cd:7e:8e:0f:f3:da:cc:68:f9:25:28:97:e5:9b:38:
4a:f9:d9:4e:29:51:46:3d:84:3f:63:2e:ea:df:e5:
5e:37:81:73:3e:97:8f:8d:22:aa:51:48:26:dd:4f:
a6:89:31:92:3d:09:5f:0d:65:5f:a9:5e:f1:d8:38:
9c:e7:fb:83:10:74:28:b5:79:f3:6f:64:28:bf:13:
22:c5:90:e5:ee:15:5d:78:1d:87:37:e0:53:fa:1d:
8f:a3:dc:95:19:25:da:ae:8b:ad:fb:88:93:f5:bd:
4c:51:a9:26:0e:a4:f2:23:3e:1e:19:8d:84:b0:fe:
0f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A1:51:46:8F:E1:C7:7D:E7:87:C0:04:AE:79:1C:58:76:90:A8:2A
X509v3 Authority Key Identifier:
keyid:92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:33:21:5c:f4:30:36:fc:6c:14:e5:03:96:f4:1e:27:e0:5a:
4f:e9:e3:69:8a:9a:66:84:fa:31:9a:39:5e:5a:46:02:00:aa:
06:cf:92:87:21:0a:ad:af:f8:32:e1:49:b2:fc:cc:c3:54:4f:
f5:06:3b:47:a4:2f:3d:bc:96:c5:a9:c8:d8:33:3c:dd:45:31:
8c:6f:cd:a5:59:bf:1a:0c:fd:a8:b0:af:a9:89:39:c1:9d:81:
d6:d7:7a:12:d5:6b:e9:ca:43:12:3f:2e:3d:0e:6f:ac:57:81:
ab:a7:81:ed:da:00:07:51:82:94:b3:4a:b3:8a:ec:55:2e:d7:
ba:77:8a:30:c0:7a:a6:1c:c2:8c:f3:64:86:de:95:d7:83:c0:
64:84:0e:d1:ab:d0:7d:f1:4d:95:75:b5:ce:16:5f:ea:a6:a9:
09:ec:35:d8:f7:99:f5:da:68:da:6c:e9:74:65:7a:c9:dc:66:
65:34:b8:ab:dd:9d:12:25:0f:47:e6:96:6c:65:0a:46:b2:14:
fb:c2:3b:3b:f4:e2:e5:49:f9:a9:25:df:21:d2:64:e8:d5:54:
68:92:63:75:28:4a:98:58:ff:da:10:76:10:65:27:6c:06:e4:
6f:35:61:10:3b:2b:d7:4e:e3:55:29:40:68:a6:02:f4:56:4a:
7f:07:fd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:50 2025 by rpki-client