Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.mft
File: K7vWOe-xE9GWiKGszmlFu2xqmsU.mft (raw, json)
Hash identifier: bdIucd1g7vx070T/BqUMFAvUh9DXJvF/TCwaxGnp7Wo=
Subject key identifier: DB:2E:98:08:CD:DD:C2:39:0D:72:11:13:37:08:BF:44:E1:70:EF:93
Authority key identifier: 2B:BB:D6:39:EF:B1:13:D1:96:88:A1:AC:CE:69:45:BB:6C:6A:9A:C5
Certificate issuer: /CN=2bbbd639efb113d19688a1acce6945bb6c6a9ac5
Certificate serial: 0194BB972500CCF519D03FD0BF64FB7F71C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7vWOe-xE9GWiKGszmlFu2xqmsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 09:00:32 +0000
Manifest this update: Fri 31 Jan 2025 09:00:32 +0000
Manifest next update: Sat 01 Feb 2025 09:00:32 +0000
Files and hashes: 1: K7vWOe-xE9GWiKGszmlFu2xqmsU.crl (hash: fZE+C9Erv6zZX2+ZDiskvDUI0rYAOS/Q0QXVpLP+0/U=)
2: n0XS6IJCl3vm93lJQsjg2X6pLdw.roa (hash: k2WYtuBGETSvwmKGDnyWeLNoT+PiSlaaWRzhdHXtIhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7vWOe-xE9GWiKGszmlFu2xqmsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:25:00:cc:f5:19:d0:3f:d0:bf:64:fb:7f:71:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbbd639efb113d19688a1acce6945bb6c6a9ac5
Validity
Not Before: Jan 31 09:00:32 2025 GMT
Not After : Feb 1 09:00:32 2025 GMT
Subject: CN=db2e9808cdddc2390d7211133708bf44e170ef93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7b:31:3d:25:76:ec:80:9c:d3:d8:69:06:3a:
de:4f:87:c0:7b:bc:98:31:01:ba:9d:ec:c2:a2:fe:
83:db:d0:54:bf:0f:e6:7f:46:bd:0d:08:45:48:15:
8e:09:14:b0:9e:9a:81:eb:42:88:f6:4f:d2:69:2f:
6d:6b:8d:35:3c:de:94:e9:77:22:76:20:e6:2c:50:
f4:ae:24:55:6f:10:58:cc:3d:d7:13:c5:5b:dd:bb:
c0:58:6b:d6:b8:8e:06:94:50:26:94:62:8d:13:ef:
9f:1b:31:45:80:ee:d8:e6:59:14:22:05:7d:2f:27:
d7:9e:80:ef:05:52:2a:e5:cd:84:a5:18:5d:42:cd:
75:0d:d5:e1:68:61:a0:97:31:48:e5:1e:79:4f:eb:
6c:b7:8b:6f:98:4e:30:63:4f:3d:5b:c5:c2:c9:5a:
2b:4c:91:09:db:02:b1:7f:3a:16:91:7a:ce:f7:00:
43:ad:ef:da:84:35:5b:4e:e5:08:5b:75:e6:98:ce:
e6:c4:d2:eb:75:20:4d:3c:64:76:b8:6d:05:da:4b:
7c:98:b2:ee:8d:1a:58:9b:81:e9:f9:ea:97:44:48:
a8:6c:29:03:3d:0e:b6:08:bc:62:14:30:1c:0e:55:
24:29:ae:d3:ec:14:0c:c7:af:c1:00:c8:47:ab:31:
87:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2E:98:08:CD:DD:C2:39:0D:72:11:13:37:08:BF:44:E1:70:EF:93
X509v3 Authority Key Identifier:
keyid:2B:BB:D6:39:EF:B1:13:D1:96:88:A1:AC:CE:69:45:BB:6C:6A:9A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7vWOe-xE9GWiKGszmlFu2xqmsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c3:2c:12:e5:e2:7c:c7:6b:05:2d:b0:d7:60:91:70:4c:19:
37:32:6e:d0:22:94:96:90:09:b1:92:a5:8d:3e:89:10:9c:ad:
db:3d:1f:28:36:49:45:b7:25:7f:7e:58:05:e7:7f:49:6d:31:
a1:35:4e:ea:55:90:ba:08:55:16:28:58:2f:46:bf:d6:10:3f:
6e:6d:72:39:33:b8:65:df:a2:c7:dc:55:58:c0:89:8a:62:d2:
9e:fd:c8:97:34:5e:cf:30:e9:42:31:e4:4d:71:62:73:7b:3d:
94:a8:67:7f:a0:39:77:fd:84:b8:b1:3e:2f:be:a2:d4:22:5f:
98:19:66:60:b6:86:68:46:66:18:88:44:d4:e0:a9:f8:d4:b9:
3a:c7:0a:8a:40:62:85:39:f1:46:fa:86:f0:c9:3d:99:4e:36:
34:92:f5:53:97:04:9a:28:dd:ed:ec:85:1d:df:fb:c1:c9:c6:
28:fd:89:88:90:81:2b:fa:24:c4:73:39:32:aa:b7:55:ad:7b:
fd:2e:df:4e:a6:61:7b:4f:66:16:51:79:39:96:cc:24:d9:5a:
ea:67:2d:fc:d9:59:2e:ed:cb:7b:6f:dd:3c:fb:bc:5f:e5:67:
79:db:f7:97:7c:8a:f5:89:ce:ae:a3:e6:7f:95:b5:60:c1:e0:
66:90:c7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:59 2025 by rpki-client on console-fra.rpki-client.org