Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
File: KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft (raw, json)
Hash identifier: oSWhVG7ddwgIgwtnIcJADkSda4FgLsH1L31kmIkctm0=
Subject key identifier: 9A:AF:FE:F4:4A:72:4F:AC:DC:C1:B1:F0:23:C6:E4:2E:41:4B:71:4F
Authority key identifier: 28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04
Certificate issuer: /CN=280c3860fb96a823971e2ee62f8abff093861604
Certificate serial: 0194BC3C4C126041B13D539D1D34CD76BDC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
Manifest number: 97
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl (hash: YfhcmtXuJGrUQAygQuaKgkjFbROv7hTLAgJ25aJclrI=)
2: vSQNJQ-TqAY10tditE63QDgLi4U.roa (hash: OmFUSF7SfEkV+4PCWG7ne1LHCjmLdydl9a/jqJ2m+sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 11:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4c:12:60:41:b1:3d:53:9d:1d:34:cd:76:bd:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=280c3860fb96a823971e2ee62f8abff093861604
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=9aaffef44a724facdcc1b1f023c6e42e414b714f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6b:d7:fb:12:1b:21:88:4f:c1:53:90:4a:c0:
a2:9a:ea:70:e9:33:6e:1a:39:04:40:40:f4:43:f9:
55:99:3c:34:86:7e:e1:4e:8c:ee:a1:6f:1e:5f:8f:
5f:93:c1:0f:93:1d:78:17:7b:3b:a6:03:c1:c0:88:
22:8a:ce:70:37:87:fa:80:e2:f4:ca:f1:9d:c4:43:
d5:a0:db:99:d1:f2:e6:34:c7:54:c4:6a:6f:2a:94:
4f:25:50:cc:c1:3e:d2:7a:ce:e9:62:e2:ea:f6:d9:
75:a3:a2:b3:93:65:53:6b:40:13:8a:d6:8f:eb:90:
28:8a:7d:1f:d4:7a:31:82:1a:b9:90:32:87:f3:a5:
91:fe:12:19:fd:16:7c:8a:d0:89:02:36:5b:e3:64:
81:b8:db:7a:15:75:87:e3:28:3f:47:92:27:46:28:
66:14:75:18:08:0b:4d:1a:74:14:18:35:4e:f2:c5:
1a:d8:32:63:ab:47:f3:11:51:68:34:4b:3a:bb:cb:
04:81:61:08:7e:f3:ff:e3:6c:9f:a8:db:ae:b9:c4:
46:12:67:48:7a:56:c9:d7:5d:df:74:6e:cc:13:0b:
94:e9:a9:98:f3:65:57:c2:e5:7e:19:34:f7:c8:7f:
80:be:3d:98:10:b9:52:f5:3a:9f:7b:77:d0:66:f6:
ba:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AF:FE:F4:4A:72:4F:AC:DC:C1:B1:F0:23:C6:E4:2E:41:4B:71:4F
X509v3 Authority Key Identifier:
keyid:28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d9:7f:f6:ac:b3:68:a7:a9:db:4c:73:2a:7e:c0:36:c6:1f:
55:04:d3:4d:0a:53:c5:34:a4:36:d0:45:a6:aa:2e:08:e6:51:
7e:2e:0c:90:6f:a7:72:3b:7b:11:6d:1f:ff:73:c3:b6:bc:9b:
e5:57:62:13:7e:18:94:23:bb:da:60:c9:4a:70:d7:d8:d9:e7:
19:3e:15:f7:e8:7b:1c:85:f7:a0:c5:3c:c4:6e:05:f2:c8:b4:
10:57:a7:ab:b2:f5:eb:6e:66:6a:a0:d0:69:75:4e:3a:21:ca:
d7:a2:94:77:d6:d5:58:18:01:09:d2:0a:c1:43:27:21:b8:bf:
d4:dd:98:4e:c5:10:c6:f3:0a:02:08:ba:4e:12:c0:4c:14:48:
e2:da:0b:a4:c3:e7:d7:4b:85:be:7c:b0:c9:11:98:0d:f9:59:
ad:18:01:bd:fd:04:13:3d:d4:ee:6c:79:e4:1c:5e:34:98:2d:
80:4c:1b:00:f2:d2:0a:61:1c:6c:40:4c:48:a3:96:18:03:68:
d3:e1:b4:49:46:7f:6a:73:49:66:57:0f:c5:41:42:d8:f2:b5:
65:52:4a:7c:ae:56:4a:81:b7:b9:da:ca:91:4f:86:4e:b6:45:
4b:7d:9f:a3:7e:62:00:58:6a:92:49:52:f2:ab:9c:0d:ce:19:
08:86:eb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:56 2025 by rpki-client on console-fra.rpki-client.org