Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
File: KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft (raw, json)
Hash identifier: 0XuSVnWE0leJc18AtBKjxOfGTOAKQ6Ab9uP4jUsdllo=
Subject key identifier: 0F:3C:90:10:85:69:70:FF:15:BA:DD:77:D6:06:29:AD:68:6C:A7:90
Authority key identifier: 29:5B:6A:34:A2:10:9B:A7:C4:D9:7F:76:C7:44:66:F1:4C:33:33:E0
Certificate issuer: /CN=295b6a34a2109ba7c4d97f76c74466f14c3333e0
Certificate serial: 0194BABB82B1D2C5AF3500D0ED44125416D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 05:00:38 +0000
Manifest this update: Fri 31 Jan 2025 05:00:38 +0000
Manifest next update: Sat 01 Feb 2025 05:00:38 +0000
Files and hashes: 1: KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl (hash: RZzbD9L6WFqvKr7N35nacArZhsu/cYBTZHdV6SrZIBI=)
2: aI7Jkk0hKBc5FvPXNc087oh3O6I.roa (hash: NGQRZS/iBgx2LNEuUjWmKtWDne6hFeLh8g8pm9sOGIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:82:b1:d2:c5:af:35:00:d0:ed:44:12:54:16:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295b6a34a2109ba7c4d97f76c74466f14c3333e0
Validity
Not Before: Jan 31 05:00:38 2025 GMT
Not After : Feb 1 05:00:38 2025 GMT
Subject: CN=0f3c9010856970ff15badd77d60629ad686ca790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9d:4d:d2:83:8a:82:fd:b1:4c:a6:24:22:9f:
5d:ae:f7:be:86:a4:16:2f:19:be:0a:d4:8e:6e:3a:
4f:fd:cb:ca:6c:f3:3b:ef:98:1f:9e:5d:11:3b:e4:
9f:ba:86:02:3a:c0:f2:3c:9a:9e:19:a5:28:b5:a6:
aa:67:36:24:f5:f8:34:9f:ca:c4:fa:9c:48:6c:70:
27:1d:a9:ed:d3:3d:ca:2e:52:3d:cf:96:3d:40:62:
a7:37:23:c1:59:47:4b:93:e4:da:97:de:27:7f:ce:
ab:61:a5:1d:d5:ad:f4:58:d0:d9:26:2b:6e:98:aa:
67:53:9e:23:a8:26:87:b2:58:8e:43:63:0b:2f:c9:
ca:9c:0c:64:60:d6:b9:21:e8:5f:bc:60:a3:10:3f:
ae:66:1c:42:aa:08:c7:9f:ab:61:fe:c4:be:48:fd:
4f:62:57:67:e3:70:40:d8:98:0b:59:9f:8f:7d:d0:
d5:5c:39:db:b8:d0:ee:fc:b1:a0:d6:8d:f0:38:51:
c5:65:fa:a7:88:d9:f8:f4:61:db:3b:f7:0b:ea:6c:
9d:05:29:15:b2:7a:73:5c:45:87:f3:f2:e9:8e:14:
f5:8d:02:1e:6e:bf:2a:ed:da:fd:ec:1f:ac:f4:ef:
ef:09:91:4e:1f:a4:af:6b:1a:ba:1a:df:5c:41:e7:
39:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3C:90:10:85:69:70:FF:15:BA:DD:77:D6:06:29:AD:68:6C:A7:90
X509v3 Authority Key Identifier:
keyid:29:5B:6A:34:A2:10:9B:A7:C4:D9:7F:76:C7:44:66:F1:4C:33:33:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:76:97:cc:37:14:d0:29:bd:ac:f8:3f:39:89:f9:28:7a:a8:
ed:5f:c6:46:01:84:f5:5e:fa:b0:c1:91:5d:87:d4:eb:57:e4:
34:86:c3:3f:00:25:83:23:30:60:fe:f9:ed:63:d6:30:88:57:
cf:82:f3:b7:3d:7f:d9:19:cc:1c:34:75:f8:c8:e5:20:9e:1d:
44:da:fb:c1:b2:65:36:93:9a:1a:ee:f7:dd:70:75:99:22:7e:
e2:6b:6a:17:1e:b4:c4:72:bb:75:3d:80:03:69:f8:62:c0:72:
ec:ed:71:7b:0e:05:c4:f5:84:b2:c8:1d:6a:68:00:ec:44:d6:
c6:a2:24:2c:bf:44:f2:92:b6:89:f1:92:d1:46:ca:be:d0:a0:
e3:6b:e3:0a:6c:05:26:5c:51:43:b8:cb:89:ad:8e:90:8e:91:
6a:48:8f:e2:4b:26:a2:89:41:c1:41:b9:3f:2f:c9:a5:71:06:
af:92:e7:a7:39:9a:29:f8:c2:da:75:09:fa:47:9b:d6:f8:d7:
cd:25:0a:2e:37:db:fa:ee:49:0f:fb:78:7f:03:64:f5:07:ba:
cf:92:91:46:70:af:de:33:d3:99:6c:c3:61:72:a1:a0:a1:b9:
16:fa:2e:1e:35:bb:e5:a2:1d:a1:14:d8:e2:a8:00:a0:cd:ff:
8a:af:a8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:50 2025 by rpki-client on console-fra.rpki-client.org