Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
File: KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft (raw, json)
Hash identifier: lV+m3qMVwYtrvarnD05P3HF+kJrpD1k9tXIrrxGX534=
Subject key identifier: 2B:FE:39:5F:9E:27:A5:50:0F:DE:47:1E:A6:E7:AB:34:DC:63:EF:AA
Authority key identifier: 28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04
Certificate issuer: /CN=280c3860fb96a823971e2ee62f8abff093861604
Certificate serial: 0194C3F61FA4BF568E7FF876E075DD07A535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
Manifest number: 9B
Signing time: Sun 02 Feb 2025 00:01:14 +0000
Manifest this update: Sun 02 Feb 2025 00:01:14 +0000
Manifest next update: Mon 03 Feb 2025 00:01:14 +0000
Files and hashes: 1: KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl (hash: x5ZNXsZhGGTV0ATkvP9uUrwB3JabC4zMCY6mPN4exkw=)
2: vSQNJQ-TqAY10tditE63QDgLi4U.roa (hash: OmFUSF7SfEkV+4PCWG7ne1LHCjmLdydl9a/jqJ2m+sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:1f:a4:bf:56:8e:7f:f8:76:e0:75:dd:07:a5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=280c3860fb96a823971e2ee62f8abff093861604
Validity
Not Before: Feb 2 00:01:14 2025 GMT
Not After : Feb 3 00:01:14 2025 GMT
Subject: CN=2bfe395f9e27a5500fde471ea6e7ab34dc63efaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6a:2a:f0:0b:dd:ea:d9:4f:c6:60:14:6f:b2:
64:42:b8:bf:4f:68:ab:3e:e5:41:1e:58:93:ef:8b:
07:85:0b:de:9d:29:18:2a:29:36:f1:fc:2e:c8:9a:
a3:8d:2f:ec:3d:0a:b4:b4:bf:e9:56:2d:9d:1d:c0:
62:01:8d:24:cd:36:75:aa:52:e6:cc:3b:5a:66:dd:
2b:d8:1a:c9:ef:7e:e9:8d:2b:ea:79:6f:c9:68:d9:
14:23:06:e7:8b:82:50:90:59:ee:c9:ae:05:03:de:
60:de:27:8f:3e:06:14:71:8e:4d:30:fd:ab:6d:34:
69:4e:9b:ff:80:91:9e:c6:b9:50:7e:f0:0e:ac:a7:
eb:73:85:11:50:c0:ba:76:63:1e:1b:0a:ee:9f:34:
89:b9:4d:7d:0c:83:80:5d:da:b9:24:8b:37:6a:9f:
81:47:10:18:fb:ee:09:d6:54:93:ae:92:07:a7:f5:
7c:6b:84:84:74:fb:2e:19:f7:e0:3e:35:a2:7a:a9:
17:5b:37:1e:05:ab:56:f3:fd:81:d9:d8:10:82:a6:
8b:f3:16:15:d7:82:81:09:89:e8:59:1d:b1:24:9c:
10:4f:65:d6:37:3a:32:fe:d7:f7:71:f6:00:00:4f:
d6:99:bb:32:46:9a:ec:e4:2f:40:06:80:31:c6:c5:
66:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FE:39:5F:9E:27:A5:50:0F:DE:47:1E:A6:E7:AB:34:DC:63:EF:AA
X509v3 Authority Key Identifier:
keyid:28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:8c:35:90:d4:49:7b:53:ae:b5:0d:e3:11:b6:da:4c:18:db:
e8:7f:8a:fa:ab:bf:6b:ed:64:a7:27:2b:54:64:53:14:3d:d0:
3b:9d:65:d8:4e:58:c2:32:b8:9c:34:5a:cc:20:f8:4e:ce:b0:
eb:12:05:6b:43:46:f6:f2:06:ec:e4:4f:db:54:ad:2d:e1:e7:
17:93:7e:25:d1:a3:77:71:1d:51:c7:6b:47:c0:fc:b6:dd:45:
ed:fb:f0:d7:76:a9:65:0b:5e:58:f9:32:26:aa:20:83:3f:80:
66:28:0e:74:62:39:6b:29:0d:91:8e:33:f5:eb:9f:b5:13:c8:
b0:e6:a2:24:5e:77:3b:a2:26:7e:78:8f:e8:bb:1a:af:f7:95:
06:21:f9:89:f1:a4:09:e0:10:a6:6b:f8:d8:6c:55:a8:f4:e2:
48:4d:9d:01:83:76:8c:60:0b:91:5b:6d:68:8e:71:9e:a3:50:
fe:9f:72:65:36:34:82:05:44:54:d7:42:36:c5:57:02:95:b2:
f1:cd:5d:f3:72:81:d0:46:e9:92:af:6a:65:37:65:39:56:72:
a9:f2:34:87:66:b7:ae:30:d9:e3:ec:7b:4e:da:21:7f:0d:bf:
1e:7c:82:5b:96:d5:61:ed:7f:fa:7b:b0:98:c2:b6:1a:fa:f7:
65:3f:08:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:24 2025 by rpki-client