Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
File: kw4KO7COSsZzY-MLqDsHFjLQqkM.mft (raw, json)
Hash identifier: JWf07K+xnwN63wiwMU0bmDx/ASQey6/E8dHl9hWwRNI=
Subject key identifier: 01:97:96:92:61:BA:B3:6E:27:A8:3F:FB:17:EF:A9:2E:3E:58:34:35
Authority key identifier: 93:0E:0A:3B:B0:8E:4A:C6:73:63:E3:0B:A8:3B:07:16:32:D0:AA:43
Certificate issuer: /CN=930e0a3bb08e4ac67363e30ba83b071632d0aa43
Certificate serial: 019510FDCF84DABB05EA3B8EBC87B4F08640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
Manifest number: 015E
Signing time: Sun 16 Feb 2025 23:00:24 +0000
Manifest this update: Sun 16 Feb 2025 23:00:24 +0000
Manifest next update: Mon 17 Feb 2025 23:00:24 +0000
Files and hashes: 1: kw4KO7COSsZzY-MLqDsHFjLQqkM.crl (hash: RUYk3ylUa8MsdukAKm2PFGXKEpvF6rv/mtxbdvmjYcQ=)
2: xaq4DEF6a2KbAw0s5ehiRgdBeuQ.roa (hash: NrVb13nbYMUhAilB4rQP3yYP82eHLTMIedBxEXPs6iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:cf:84:da:bb:05:ea:3b:8e:bc:87:b4:f0:86:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930e0a3bb08e4ac67363e30ba83b071632d0aa43
Validity
Not Before: Feb 16 23:00:24 2025 GMT
Not After : Feb 17 23:00:24 2025 GMT
Subject: CN=0197969261bab36e27a83ffb17efa92e3e583435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:69:87:3e:e8:5e:7e:17:a2:9f:da:22:5f:07:
9a:77:09:70:27:21:02:1b:59:81:8d:df:2d:d8:0a:
21:2a:91:5a:35:70:ec:6b:de:7e:49:e1:8f:10:d0:
a0:71:f6:35:52:a1:64:ca:b1:69:85:f3:1f:62:54:
7a:57:a3:b2:90:47:7e:5b:83:5b:09:24:b2:77:56:
ce:ec:27:77:6f:de:d1:ab:96:81:16:9b:2d:a2:d5:
10:52:58:a9:11:fd:87:54:b3:8b:03:82:c6:f2:07:
08:05:fd:88:08:b9:d5:d2:73:c7:c3:f3:23:fe:98:
fb:bc:31:94:00:66:ea:33:d4:f1:e9:86:5e:e4:0a:
bc:78:e8:c1:e3:f5:4c:3c:7d:50:0f:71:b2:a2:16:
e0:e1:ca:72:d6:8f:3f:08:54:53:5c:c6:2e:4b:59:
ae:90:b4:32:17:c0:d9:64:7a:02:2c:33:45:c7:2e:
21:f0:0f:7e:2f:35:28:79:9a:76:e9:91:1b:de:90:
f0:2a:93:f7:2c:3a:f6:6c:41:8a:21:90:fd:98:1b:
51:6d:32:e5:bd:68:74:f7:4c:ec:5b:64:48:b8:9e:
d2:5d:e2:58:d7:f0:0b:ca:54:e3:09:63:43:38:c5:
48:76:cf:da:7a:92:cb:ac:95:fb:99:a9:4a:ee:da:
82:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:97:96:92:61:BA:B3:6E:27:A8:3F:FB:17:EF:A9:2E:3E:58:34:35
X509v3 Authority Key Identifier:
keyid:93:0E:0A:3B:B0:8E:4A:C6:73:63:E3:0B:A8:3B:07:16:32:D0:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5e:31:17:f5:ac:98:e6:6f:04:15:ae:af:1c:9c:dd:12:81:
fb:fd:ed:55:a4:99:16:c0:bc:b5:a3:5b:d2:25:86:cf:1e:f5:
61:c3:05:36:72:d7:f2:0e:28:48:ee:bc:ab:34:2a:5b:02:44:
c0:ba:e8:dc:2e:4c:a0:d9:88:95:43:83:1a:e9:74:98:af:48:
fb:ea:9a:d6:41:be:df:68:2b:d9:79:9a:44:02:59:da:df:d3:
2c:c0:17:d1:1a:b7:86:23:ee:82:a5:97:59:5f:aa:fe:25:56:
a0:55:a0:2d:4b:45:b5:6d:3f:d4:a6:ce:44:40:5c:a1:f1:17:
55:b0:96:fb:32:03:dc:e6:55:41:d2:1a:55:36:b9:67:22:d1:
4b:96:04:bd:fd:0b:2b:e3:40:d7:c2:33:01:84:f5:fc:bc:f3:
ac:6b:53:73:90:5b:a1:6e:54:86:4e:1e:49:84:2e:0b:6e:c7:
5c:39:ed:84:50:de:9b:3b:bb:71:4b:ad:af:cd:56:d7:5a:c1:
2f:b4:25:dc:0b:60:4e:d3:d7:36:28:c8:99:6b:37:db:c3:0b:
70:cf:7e:85:84:b1:fe:70:18:c4:5a:40:aa:75:09:5f:6b:c2:
68:5a:e2:9f:8f:42:cf:3f:05:34:78:84:66:a8:2b:c5:06:81:
1b:74:d5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:56 2025 by rpki-client