Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
File: kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft (raw, json)
Hash identifier: TKw2f/C6UsPoR0mAtKI5j9cJSn+ol5eBKisj8ISqLZI=
Subject key identifier: AE:05:43:E5:7A:1C:88:08:FA:ED:29:51:65:B4:49:97:0C:ED:CA:1F
Authority key identifier: 91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
Certificate issuer: /CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
Certificate serial: 0194BABB9271129BBB23B771676952557FC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
Manifest number: 0446
Signing time: Fri 31 Jan 2025 05:00:42 +0000
Manifest this update: Fri 31 Jan 2025 05:00:42 +0000
Manifest next update: Sat 01 Feb 2025 05:00:42 +0000
Files and hashes: 1: 1-PjUZT902dDkd6VPDrdDPHXwUZw.roa (hash: MHJPB3k7tQCL3suOF/2f4yZcUJ+jnvq9tJxwFWeEEbc=)
2: kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl (hash: g4PTGzm97dYSVsThVBMmWTEBbwS2cGo/mtlghllMWyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:92:71:12:9b:bb:23:b7:71:67:69:52:55:7f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
Validity
Not Before: Jan 31 05:00:42 2025 GMT
Not After : Feb 1 05:00:42 2025 GMT
Subject: CN=ae0543e57a1c8808faed295165b449970cedca1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fe:7a:7f:e4:63:a6:06:a7:82:fb:94:ce:87:
ff:54:51:72:06:c3:8d:dc:96:c4:ac:a5:cb:b2:a1:
90:2c:d9:c4:f5:13:1a:3f:f4:1e:a8:e5:c1:17:3d:
5c:8d:ac:47:0f:91:e8:bf:88:06:ad:f6:6a:8c:f7:
bd:c5:99:6f:54:27:d0:7f:bf:dd:2c:51:89:eb:1a:
86:4a:ee:ed:78:67:97:99:69:d1:52:6a:d8:44:08:
d8:37:0f:7c:18:d9:03:9f:4e:d0:45:f5:b1:3c:21:
8e:39:83:7f:c4:ea:e6:18:e8:46:a0:d5:e9:b1:0c:
72:bd:2c:11:a3:54:cf:7c:17:03:c2:0a:fc:00:74:
e9:b3:38:ea:01:30:fd:d1:74:e1:1d:d9:02:fd:59:
9b:1c:b4:c2:f4:95:c1:e2:99:1b:a1:ab:fe:dc:4f:
d8:d6:54:86:8a:94:e6:4e:13:a9:18:9e:45:be:fd:
b5:fb:f3:ac:1f:72:5c:60:0e:a7:77:50:13:61:f8:
12:06:16:b9:c0:81:2d:5f:7d:8a:ab:de:70:a3:37:
e3:d1:1b:4f:54:58:73:2f:2e:5e:5e:d1:22:a8:ca:
f7:2f:04:0e:e7:d4:e9:bf:20:e3:eb:4b:62:53:10:
59:00:06:a5:6d:e0:6b:db:41:0c:d9:7e:8d:fa:41:
a7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:05:43:E5:7A:1C:88:08:FA:ED:29:51:65:B4:49:97:0C:ED:CA:1F
X509v3 Authority Key Identifier:
keyid:91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ab:5f:07:a9:1d:45:af:4a:b0:72:ff:79:94:bb:a0:15:4b:
b9:85:8e:9f:fb:3c:00:c8:bf:38:68:5e:28:aa:61:e8:94:79:
fb:a8:31:9e:0a:b8:52:a0:17:32:f1:da:78:b1:33:db:fa:90:
57:72:f3:9c:f9:99:bc:a5:14:4e:9d:af:b2:65:9e:7c:91:06:
20:83:2f:43:4d:f9:9b:86:ee:31:aa:30:cb:6e:c8:c7:5a:1f:
c3:12:5e:a5:0e:1d:b4:dd:6a:56:59:82:fe:ab:cc:e4:72:94:
69:1c:36:d0:37:9f:55:97:cc:40:aa:99:41:97:40:08:ae:ac:
0f:c3:4b:b0:e1:b1:90:58:1a:a3:b5:2b:a8:95:5a:36:1a:ba:
64:8e:95:66:11:3a:49:f0:92:f3:ad:d4:f2:6a:f5:10:87:11:
b6:f5:77:80:77:35:6b:90:67:d5:2a:2e:66:ec:a6:bd:c8:58:
95:df:d8:14:20:cc:16:6c:80:1d:8c:c7:00:d5:d2:b7:da:b7:
4e:0b:e7:e6:00:a7:f5:c3:09:a9:ab:45:df:97:73:d7:16:85:
5a:b2:31:16:c3:1c:ec:8c:ca:df:11:40:eb:24:0a:3d:38:89:
de:b1:b5:e1:d7:27:cf:9d:17:72:fa:e8:6d:fa:2a:a9:88:0d:
d1:20:c2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:25 2025 by rpki-client on console-fra.rpki-client.org