Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
File: kd0jFN2bfGHXHU2-2o-jllxCRXA.mft (raw, json)
Hash identifier: 9Lv2XcxcSgRCPMSLoBlcWSEYLxUGsGXJqcOsMbFrKBc=
Subject key identifier: E0:DF:A5:EC:50:A3:36:A9:CD:99:9A:C8:60:0C:CA:72:EA:ED:8B:EA
Authority key identifier: 91:DD:23:14:DD:9B:7C:61:D7:1D:4D:BE:DA:8F:A3:96:5C:42:45:70
Certificate issuer: /CN=91dd2314dd9b7c61d71d4dbeda8fa3965c424570
Certificate serial: 019510C7D05A2F976BBBA027C41DE9C310B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kd0jFN2bfGHXHU2-2o-jllxCRXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
Manifest number: 1113
Signing time: Sun 16 Feb 2025 22:01:24 +0000
Manifest this update: Sun 16 Feb 2025 22:01:24 +0000
Manifest next update: Mon 17 Feb 2025 22:01:24 +0000
Files and hashes: 1: 1QgdyuQWVblUntU5znb6VUOcImg.roa (hash: 8ewfHwhOXDGmHEAryCOm3WfF+5LJGrecBJVM/3LIdo0=)
2: kd0jFN2bfGHXHU2-2o-jllxCRXA.crl (hash: B27B3sG4zlrLlr/ajd/Ue4YRjGD6yZjGyP3/pdhqnAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kd0jFN2bfGHXHU2-2o-jllxCRXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:d0:5a:2f:97:6b:bb:a0:27:c4:1d:e9:c3:10:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91dd2314dd9b7c61d71d4dbeda8fa3965c424570
Validity
Not Before: Feb 16 22:01:24 2025 GMT
Not After : Feb 17 22:01:24 2025 GMT
Subject: CN=e0dfa5ec50a336a9cd999ac8600cca72eaed8bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:4b:dc:69:90:20:17:7b:97:b7:80:57:9c:
6d:f6:42:92:0c:8e:e5:b8:d1:86:45:77:0e:b5:04:
5a:42:c6:5b:c5:0d:7f:a5:bd:0d:a9:80:c5:06:c9:
0f:09:57:51:98:02:18:34:8e:65:57:29:bf:78:42:
7c:fa:81:00:50:7b:71:f8:e9:da:3b:40:90:14:af:
7d:25:9c:11:7c:4f:fa:02:f7:66:4e:7a:a1:7b:1c:
9a:21:40:f1:4b:2f:69:a7:91:48:ab:01:95:da:04:
45:8e:1b:bd:50:2b:7c:25:d6:9d:4b:b0:99:59:3f:
b9:5d:de:b9:ee:f2:a0:34:b4:28:c4:47:dc:1c:b3:
2a:ce:20:ce:62:1b:09:8a:25:9d:04:65:21:63:73:
26:5f:eb:78:2d:14:f2:a4:96:3d:38:b2:ff:7f:a9:
e7:03:c8:11:35:33:16:c9:8c:e2:33:36:cc:e7:c8:
55:eb:33:a6:e8:fc:22:52:1d:34:6b:99:54:d6:75:
04:fb:a2:9a:ef:4d:00:3c:88:6b:f3:62:d1:64:01:
8e:af:4a:73:fb:20:35:4e:f8:ed:eb:7c:d3:b8:4e:
e7:6b:d0:8a:a9:95:1b:e7:89:d1:7c:ab:fe:33:f2:
91:97:c3:32:dc:e5:44:ad:19:40:a5:c0:c0:7e:40:
6f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DF:A5:EC:50:A3:36:A9:CD:99:9A:C8:60:0C:CA:72:EA:ED:8B:EA
X509v3 Authority Key Identifier:
keyid:91:DD:23:14:DD:9B:7C:61:D7:1D:4D:BE:DA:8F:A3:96:5C:42:45:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kd0jFN2bfGHXHU2-2o-jllxCRXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:00:6f:a3:98:45:51:c9:10:a7:ac:17:35:7f:ba:79:56:d4:
c6:f3:1a:6e:fa:b2:b9:7f:57:d9:8a:f9:69:30:de:b4:9c:fd:
43:42:14:c8:b9:1a:82:a8:b4:f7:54:58:91:3c:7b:da:06:0c:
58:cb:44:5a:d1:97:a5:35:42:c7:c8:95:1e:6b:1e:71:54:8f:
51:8e:c1:72:d7:46:58:88:77:3a:f9:39:d4:de:3a:b7:7f:da:
ad:d6:52:ee:3a:ab:3a:6e:8d:14:6e:f6:c7:9c:8b:78:90:2d:
66:14:e2:d9:19:56:e0:46:21:7c:ae:bd:9c:d6:b0:4c:e9:d2:
e4:5e:3e:48:2c:67:24:48:25:c7:27:f8:4d:b6:a0:7a:07:95:
91:6f:e7:92:7e:64:08:ce:72:c3:82:41:6f:86:99:eb:f4:ef:
89:30:31:0e:5a:2d:f0:de:e0:7f:ab:46:fd:c0:2a:82:6c:ee:
f0:68:57:31:42:b2:1d:72:a0:91:0c:8e:e7:f6:0a:a2:ea:0c:
e1:4f:39:dc:09:84:16:2a:cc:b6:55:4e:74:88:98:9e:ac:ab:
9c:ac:32:58:0c:5b:79:e0:34:05:29:03:8c:db:7e:de:92:29:
a2:46:68:b5:c9:c3:70:b7:fa:8f:9c:82:15:12:e7:84:25:91:
08:7c:5c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:22 2025 by rpki-client