Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
File: kr0ltrnzz-B4X_1OXlQCgztKT40.mft (raw, json)
Hash identifier: 7A9hgRw0PiIxBHuE/fdwAlX7t6w0fha8CDebsVYkoFo=
Subject key identifier: 7C:EA:28:26:EA:6B:F0:6F:F6:FC:08:AF:54:68:A1:E9:3F:D5:67:F6
Authority key identifier: 92:BD:25:B6:B9:F3:CF:E0:78:5F:FD:4E:5E:54:02:83:3B:4A:4F:8D
Certificate issuer: /CN=92bd25b6b9f3cfe0785ffd4e5e5402833b4a4f8d
Certificate serial: 019512107D5614EE21722BF283BC1B64B212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 04:00:25 +0000
Manifest this update: Mon 17 Feb 2025 04:00:25 +0000
Manifest next update: Tue 18 Feb 2025 04:00:25 +0000
Files and hashes: 1: bOAoo9Xlbcl-PK-rbfwF58rAKlc.roa (hash: Vn8yXcKwSTNwIZccCZWqjun9GvkjZC8dYUcNBhWRmco=)
2: kr0ltrnzz-B4X_1OXlQCgztKT40.crl (hash: mYwXwN3oln3zl/F42cbZ/Opl+jnQWG/OoVXv8boepzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:7d:56:14:ee:21:72:2b:f2:83:bc:1b:64:b2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bd25b6b9f3cfe0785ffd4e5e5402833b4a4f8d
Validity
Not Before: Feb 17 04:00:25 2025 GMT
Not After : Feb 18 04:00:25 2025 GMT
Subject: CN=7cea2826ea6bf06ff6fc08af5468a1e93fd567f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:92:c5:91:26:68:74:47:e2:50:83:02:75:bd:
60:73:a7:29:70:13:58:ec:14:d9:89:95:cc:e1:a5:
b7:b3:7f:8b:cf:74:f4:cf:8b:b6:6e:0b:b0:04:e2:
58:5c:0e:d0:ee:68:61:3c:a6:58:c1:27:62:e9:69:
8e:46:b8:0f:7a:02:68:82:33:11:67:ce:28:a6:06:
f7:24:7a:4e:4e:bc:68:be:2e:70:9c:ca:37:99:2c:
96:09:b0:f7:f7:cb:cf:7f:73:6c:57:aa:37:5a:cb:
68:0c:13:4f:9f:1f:ed:36:7a:43:54:52:77:72:57:
01:b2:df:17:b2:73:6f:c3:45:90:ca:4f:5f:76:32:
fe:d1:dd:cc:a2:a6:91:3f:1b:5d:05:5c:a6:2d:9f:
42:a0:ef:21:eb:49:d3:c0:6e:49:91:9d:df:7b:23:
15:d1:99:33:96:bb:b1:e6:a9:25:79:6f:53:09:35:
85:7c:72:80:11:0d:b4:74:fc:f6:d4:27:84:3d:4f:
84:62:6e:3a:77:18:6a:ef:2f:a2:5d:5b:ae:be:88:
63:5e:1b:d3:86:24:3d:4c:47:91:3e:cc:95:0f:56:
31:92:07:0e:96:0b:d4:e0:a0:2c:49:d1:ef:32:be:
9d:ad:81:96:77:2f:1d:5c:c5:2a:ed:33:7d:2b:d4:
24:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:EA:28:26:EA:6B:F0:6F:F6:FC:08:AF:54:68:A1:E9:3F:D5:67:F6
X509v3 Authority Key Identifier:
keyid:92:BD:25:B6:B9:F3:CF:E0:78:5F:FD:4E:5E:54:02:83:3B:4A:4F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b5:d8:25:a0:13:78:cf:0b:39:4f:bd:c8:93:b7:fb:1f:bb:
2e:1c:26:97:4b:b4:5c:58:39:fb:06:b4:ef:aa:5c:0a:ee:13:
a2:f8:5a:59:08:0a:56:b9:6d:26:ab:5f:00:3f:22:a0:3c:57:
58:2c:10:09:9e:ad:e5:f9:8e:9c:34:b0:69:5e:c3:9d:e7:3e:
5e:fd:fd:8e:40:a5:14:b6:49:ac:01:69:ba:3a:61:df:4f:8f:
88:8b:11:1b:0b:6b:89:6d:38:6d:ea:a7:17:75:5b:cf:f1:48:
ee:60:17:0f:36:5c:22:e3:02:0c:4f:20:60:7f:b9:36:53:3d:
d6:cf:28:96:e5:93:f1:da:b3:84:cc:d2:fc:5f:eb:d6:ca:02:
d6:e5:a7:e8:ca:4c:85:ee:2d:3d:d6:bf:26:58:1e:01:68:46:
27:74:6b:11:81:6a:d8:c5:73:b3:72:99:a5:93:68:33:12:b6:
5d:71:a0:5a:e8:3c:e3:cb:04:06:7e:26:5c:0b:a9:91:86:fa:
9c:af:80:75:d8:49:ce:0b:66:cf:29:ad:b8:9d:12:02:e9:05:
91:ce:48:ae:a9:01:dd:24:c3:dc:fe:54:01:0b:5a:ae:4e:2d:
f5:2d:ea:b9:7f:96:98:82:6b:a1:1d:34:63:2b:dd:3a:4e:58:
75:3c:fd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:40 2025 by rpki-client