Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
File: KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft (raw, json)
Hash identifier: ZEnS7YrDZbTDoWRjztZGzkYBeEjeaSvvLkDRPV/rk7s=
Subject key identifier: FD:CA:D0:0F:25:CD:FF:61:90:44:AE:B7:3F:B8:6B:B8:EF:20:02:35
Authority key identifier: 29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
Certificate issuer: /CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Certificate serial: 019510C752FD34A0E8C1CEA681AC1F25524F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
Manifest number: 1455
Signing time: Sun 16 Feb 2025 22:00:53 +0000
Manifest this update: Sun 16 Feb 2025 22:00:53 +0000
Manifest next update: Mon 17 Feb 2025 22:00:53 +0000
Files and hashes: 1: 9H_Kait-j-Qscd6pOWC4j8dpNJg.roa (hash: X52do8h3PQmiEbN5LZNuqcyFDYy1wul4mKE1Lrt4Z+M=)
2: KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl (hash: xkYI6xIx1ZRXfyF7I28Hl9OeffIFOPtDagcO4Z8ke90=)
3: z3Ot5yZtdQ2I7c3yBTGW4OxIbZY.roa (hash: HMFp3zS5F5zXQPk83xR6QIUNoMCPUQejJzCTAnl5q10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:52:fd:34:a0:e8:c1:ce:a6:81:ac:1f:25:52:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Validity
Not Before: Feb 16 22:00:53 2025 GMT
Not After : Feb 17 22:00:53 2025 GMT
Subject: CN=fdcad00f25cdff619044aeb73fb86bb8ef200235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:db:ba:52:c9:0f:56:db:55:7e:08:fc:fb:8c:
7d:6d:13:19:64:b1:89:bc:3a:4b:02:2a:25:fa:40:
b9:95:96:3a:b2:63:4b:c3:2b:87:61:35:ea:b0:b4:
86:da:0a:72:48:74:85:50:8d:d3:26:8b:fd:b6:89:
e8:f1:c6:6e:ed:3a:50:97:6f:e3:01:f4:25:19:99:
7f:54:01:97:b7:73:29:31:b7:1b:d4:0d:19:19:a7:
19:f6:ce:09:1c:56:c3:29:f2:d4:9c:5c:e3:92:94:
2a:78:03:11:37:df:e0:25:57:bc:4e:c9:9f:45:cf:
32:74:32:b6:0d:fc:66:50:83:41:46:e1:11:eb:87:
22:e4:b8:20:1c:93:d6:f6:9b:e0:6a:e9:cf:22:35:
7f:2c:2d:84:33:a6:48:f2:db:f7:94:cc:a5:fc:e7:
da:04:ac:51:ba:4f:aa:19:47:af:9a:aa:a3:77:da:
9a:43:91:62:4f:89:68:98:bb:e3:82:2d:5f:15:b5:
10:f2:59:95:0e:4c:bc:97:7f:5d:b2:4b:ad:ac:83:
7d:6a:3d:36:ed:14:4e:dd:71:f4:ca:3d:17:3a:ef:
75:5d:89:33:9a:43:31:bd:00:0a:ff:20:af:15:e1:
69:fc:ad:ce:10:ef:f1:47:14:2f:77:e3:04:93:40:
c3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CA:D0:0F:25:CD:FF:61:90:44:AE:B7:3F:B8:6B:B8:EF:20:02:35
X509v3 Authority Key Identifier:
keyid:29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:dd:e9:54:04:6b:80:38:ca:b8:fd:48:59:0a:8f:a1:fb:7f:
95:12:ae:03:d3:8a:3b:12:a1:3d:08:f8:fc:5d:3f:74:2f:73:
3e:45:df:3d:bb:ee:65:fd:47:95:a5:3a:01:e3:a5:2e:f3:58:
9b:75:fe:f2:0b:2b:d4:2b:cc:c9:18:03:d1:f6:bb:b8:24:e7:
aa:c8:8b:b9:18:1c:c0:b5:e2:84:80:a2:f9:77:4a:fb:81:22:
53:fc:7b:35:df:5e:b3:ab:ec:44:0c:c1:db:b0:e2:82:a0:ed:
cb:6e:7b:d0:22:1b:03:57:9e:49:87:1b:e6:f1:bb:87:d9:16:
08:2d:30:05:3c:43:b4:9d:3f:1d:9e:13:3a:59:78:03:e1:12:
fd:03:7c:02:6b:4a:ff:de:02:de:c5:b2:6a:62:ee:9e:8d:f3:
4e:a8:f7:98:da:86:e8:56:a7:35:e7:67:c5:7f:8d:29:95:f9:
fd:6a:7e:cb:53:7f:0d:7e:85:d4:4c:4e:17:14:47:1d:e4:9a:
10:68:df:26:96:a8:e5:f5:08:47:4d:6b:2f:46:63:b8:21:8c:
57:fa:17:e1:b3:2e:e3:9c:36:42:1e:ba:ee:9e:8d:81:66:4d:
12:d4:7d:76:c2:99:b8:fc:a7:97:e7:33:40:5e:dd:87:95:92:
d0:fb:58:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:16 2025 by rpki-client