Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
File: KCnrZkUGuGv6H3Avax_7SEzCyxI.mft (raw, json)
Hash identifier: 24Qhy828hZBeHipZOWEGIux83F1skSe1rugX/j3f6d0=
Subject key identifier: A8:D1:CE:E9:A4:44:62:C9:EA:14:BE:D2:54:0D:11:22:CB:B6:E3:AC
Authority key identifier: 28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12
Certificate issuer: /CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12
Certificate serial: 0194BB2932EB22E166AFEF4147DE96357D5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
Manifest number: 0D25
Signing time: Fri 31 Jan 2025 07:00:26 +0000
Manifest this update: Fri 31 Jan 2025 07:00:26 +0000
Manifest next update: Sat 01 Feb 2025 07:00:26 +0000
Files and hashes: 1: 3YY6GiMAHoxwyM3tSzQ_rLqI6Qk.roa (hash: LKb1pDdE0gPQ1/qoBSBh29z3OF0TSjmwJB0/pkVjbww=)
2: KCnrZkUGuGv6H3Avax_7SEzCyxI.crl (hash: IOYTIFC3LMKw/i2mSft1mWDaKnwQKvubwim6HI+5KFc=)
3: qVZvmvoLKS31NPSfpMQJyaGRrqk.roa (hash: SULs7/ySz/dcjuHf4saElB1X8gAKzCb6LN3XcIMxsQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:32:eb:22:e1:66:af:ef:41:47:de:96:35:7d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12
Validity
Not Before: Jan 31 07:00:26 2025 GMT
Not After : Feb 1 07:00:26 2025 GMT
Subject: CN=a8d1cee9a44462c9ea14bed2540d1122cbb6e3ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:da:a5:56:d5:6c:a2:4f:8e:1e:11:f6:ff:8f:
25:39:b8:62:55:52:25:53:35:02:8b:d2:8e:48:fa:
c7:3b:4b:f5:bd:f7:6b:7b:03:e5:68:b3:21:83:4d:
17:35:89:e2:6c:98:53:d1:74:cd:48:10:21:55:22:
73:13:fc:b8:54:5b:30:a7:6c:8c:c9:f1:fb:8b:28:
79:93:5a:c1:9c:4c:8d:76:ce:9e:98:d5:86:f7:85:
33:98:a5:85:30:c2:9b:07:ad:35:2a:5f:cc:2f:c0:
2d:44:90:52:28:29:f7:58:69:1b:8a:4b:d5:21:b0:
85:44:8d:6f:49:d4:07:0d:a8:44:09:14:b1:3b:b1:
1e:4c:d6:ee:57:e1:fc:38:db:fb:c0:02:a1:0f:41:
b3:dd:e0:b1:54:6f:3a:0c:d2:51:c0:c6:57:12:08:
9f:c7:51:0f:49:7b:8b:12:83:7e:67:0d:5e:fd:23:
0f:6b:97:2e:3a:b7:bd:77:4a:27:ba:c5:67:2b:0a:
d9:55:c5:42:79:8f:14:f4:dd:43:3e:6b:2a:b7:8e:
45:3f:6d:7f:0b:3d:e4:9c:95:2d:34:89:14:a3:9a:
55:30:80:2e:b0:d7:65:ba:75:dc:d8:91:12:77:a1:
cb:0e:b2:94:71:91:14:2f:78:f2:ec:84:fc:97:de:
3a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D1:CE:E9:A4:44:62:C9:EA:14:BE:D2:54:0D:11:22:CB:B6:E3:AC
X509v3 Authority Key Identifier:
keyid:28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:5a:cb:e9:08:b2:6e:5e:32:35:f9:1a:37:1d:a3:82:98:66:
bf:18:b3:0f:c1:e2:48:f7:93:87:6c:79:54:8e:9e:48:30:17:
2b:96:f7:aa:2a:9a:b7:0d:92:16:3b:e0:60:6c:60:0e:48:82:
55:2d:82:e5:da:ed:f2:87:0b:c5:72:e8:04:a2:d8:73:0e:44:
e5:55:2f:c8:ed:47:41:39:81:ab:44:f2:e1:63:0f:38:2b:f1:
be:3d:42:d5:06:19:c2:e9:5e:71:2c:24:9d:43:98:b1:53:6a:
ef:31:86:b4:a9:05:0e:fa:93:18:e2:f8:cd:49:ab:a2:32:a3:
16:f8:df:20:a3:f9:aa:03:cd:8e:3b:51:47:42:19:a7:67:62:
36:96:5e:5b:aa:52:be:f9:26:7e:a5:a0:6a:bb:75:bd:40:8f:
9d:62:0c:1e:23:a9:65:cd:02:2d:f0:fa:56:1a:b6:ee:ca:70:
a3:c5:e2:36:01:bc:22:b5:64:7e:ee:b6:d0:1e:73:7b:0d:41:
6a:1c:97:c2:9f:c7:a7:9c:f9:85:f7:72:2d:e1:84:f7:02:ad:
4a:6d:e0:c0:45:fc:bd:90:69:86:3d:1a:51:22:18:2f:1d:22:
2d:66:06:59:b5:91:65:9e:57:44:05:58:08:d7:1a:57:f2:2d:
47:2f:e6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:09 2025 by rpki-client on console-fra.rpki-client.org