Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
File: Ka2L_getXSzLQ7DR26axkstR2-o.mft (raw, json)
Hash identifier: xjeXIil8v6MQ5LbGLAU5+PPtEUu42w/yrp4GI9gkqPk=
Subject key identifier: 8A:63:9C:39:C8:0B:54:61:11:6C:B8:DE:DA:08:22:F4:7B:48:1A:A3
Authority key identifier: 29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
Certificate issuer: /CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Certificate serial: 0194BAF2466E1BE16479666BAB3F22A3EFCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 06:00:27 +0000
Manifest this update: Fri 31 Jan 2025 06:00:27 +0000
Manifest next update: Sat 01 Feb 2025 06:00:27 +0000
Files and hashes: 1: Ka2L_getXSzLQ7DR26axkstR2-o.crl (hash: NFFvkbgUfYak/KbCcIQKVXa6cUvsk9ze5v+OHyQPxrI=)
2: h-R5SrdfAe7rN8zMOqkX0BtsnJ4.roa (hash: 3D3z76pesB4+PkPGfBCrb/veNRexeyxDAf3xN4YJwnQ=)
3: tOD9yELwWOB6I1JsshHxqOqJaWE.roa (hash: E867kd+hZLMJTwwIfg4wQE1B1KmxpcWNXSjEvrvHFrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:46:6e:1b:e1:64:79:66:6b:ab:3f:22:a3:ef:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Validity
Not Before: Jan 31 06:00:27 2025 GMT
Not After : Feb 1 06:00:27 2025 GMT
Subject: CN=8a639c39c80b5461116cb8deda0822f47b481aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:44:5f:0b:19:e8:02:cc:2d:ef:68:c4:0a:3f:
4c:d5:13:dd:7d:4e:26:f0:7d:c7:ca:8f:51:1a:7b:
60:4f:f1:99:29:09:6b:b9:37:fb:95:42:46:03:89:
74:aa:6f:e6:63:a5:95:d4:a5:3a:c1:48:00:cc:cc:
4f:2e:4d:92:06:f0:4e:4b:ca:63:92:83:31:c7:19:
10:50:58:c6:92:fc:7c:c1:77:68:1a:d6:14:b3:35:
61:c1:98:db:2a:27:78:9a:34:c3:aa:f5:d9:e0:09:
13:66:13:03:64:99:c0:76:7b:2e:12:66:64:b0:4f:
79:98:31:11:f8:8b:6b:9c:76:3b:fe:67:f3:0e:0d:
ee:7a:12:00:c0:fe:de:c5:09:e2:43:7a:b7:38:9b:
b2:d1:2d:22:f5:c8:01:9e:a5:73:37:0a:3b:a7:55:
ea:88:8d:a8:eb:bd:01:e3:f6:c2:92:39:28:a8:e5:
a8:7d:09:76:9c:f0:78:df:0f:ea:8f:8f:39:ed:ee:
cc:59:a0:a7:de:92:2a:c7:49:4f:ae:71:24:bb:34:
50:52:57:c6:ff:fc:15:93:6b:6f:57:a8:6d:17:50:
74:e0:1c:f4:9c:ad:6d:2d:b3:66:0d:77:a7:ea:f2:
b6:8b:cd:70:15:12:4a:9c:bc:a0:7e:f2:82:6f:f5:
cb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:63:9C:39:C8:0B:54:61:11:6C:B8:DE:DA:08:22:F4:7B:48:1A:A3
X509v3 Authority Key Identifier:
keyid:29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:3d:0c:5d:e6:58:6c:ca:58:d1:ae:96:ce:68:51:cd:c0:37:
de:8d:fe:51:90:db:44:42:bd:45:d0:e6:ae:aa:cf:72:a8:db:
b4:c1:4a:89:bf:f6:ec:59:37:7a:53:34:cb:39:41:f3:49:5b:
5b:ec:c7:0b:8d:6c:ae:72:92:60:93:5d:cb:0c:bd:07:ab:4e:
ee:a2:72:20:dd:b0:5e:5f:49:6d:ca:47:c9:41:8a:11:f9:21:
f8:a1:a5:37:2b:5f:6e:3e:d8:38:39:55:e3:6b:04:14:69:25:
cb:22:9f:7d:f3:08:20:4d:ea:5b:81:eb:c1:fc:6e:fc:8f:6f:
6e:49:de:c3:39:66:74:f6:aa:61:af:c7:b6:1e:71:29:52:4c:
8d:5c:ec:fd:1a:88:9d:0f:f2:80:f7:76:8c:cf:49:f5:5b:94:
38:0a:7f:7a:5d:cb:89:4d:32:86:f5:52:4b:71:5b:6f:52:aa:
9c:2f:6c:fa:e6:cd:a1:45:1c:58:dd:5f:59:6c:72:c9:49:31:
ab:f1:6a:25:03:f7:06:86:7e:46:6a:01:e2:f1:83:69:b7:18:
9f:38:de:0b:b2:ce:9f:5d:cb:3b:42:ce:d3:49:0f:5e:42:04:
3d:fb:58:17:c9:96:c8:81:5b:07:d8:88:89:c0:0c:20:0f:38:
47:ca:a4:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68kZuG+FkeWZrqz8io+/NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YWQ4YmZlMDdhZDVkMmNjYjQzYjBkMWRiYTZiMTkyY2I1
MWRiZWEwHhcNMjUwMTMxMDYwMDI3WhcNMjUwMjAxMDYwMDI3WjAzMTEwLwYDVQQD
Eyg4YTYzOWMzOWM4MGI1NDYxMTE2Y2I4ZGVkYTA4MjJmNDdiNDgxYWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0RfCxnoAswt72jECj9M1RPdfU4m
8H3Hyo9RGntgT/GZKQlruTf7lUJGA4l0qm/mY6WV1KU6wUgAzMxPLk2SBvBOS8pj
koMxxxkQUFjGkvx8wXdoGtYUszVhwZjbKid4mjTDqvXZ4AkTZhMDZJnAdnsuEmZk
sE95mDER+ItrnHY7/mfzDg3uehIAwP7exQniQ3q3OJuy0S0i9cgBnqVzNwo7p1Xq
iI2o670B4/bCkjkoqOWofQl2nPB43w/qj4857e7MWaCn3pIqx0lPrnEkuzRQUlfG
//wVk2tvV6htF1B04Bz0nK1tLbNmDXen6vK2i81wFRJKnLygfvKCb/XLZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpjnDnIC1RhEWy43toIIvR7SBqjMB8GA1UdIwQY
MBaAFCmti/4HrV0sy0Ow0dumsZLLUdvqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2EyTF9nZXRYU3pMUTdEUjI2YXhrc3RSMi1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8yMzVkMjYtNzA5NC00ZmViLTljYTkt
Mzc4NDk5Mzk4ZjE4LzEvS2EyTF9nZXRYU3pMUTdEUjI2YXhrc3RSMi1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8yMzVkMjYtNzA5NC00ZmViLTljYTktMzc4NDk5Mzk4ZjE4
LzEvS2EyTF9nZXRYU3pMUTdEUjI2YXhrc3RSMi1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARD0MXeZY
bMpY0a6WzmhRzcA33o3+UZDbREK9RdDmrqrPcqjbtMFKib/27Fk3elM0yzlB80lb
W+zHC41srnKSYJNdywy9B6tO7qJyIN2wXl9JbcpHyUGKEfkh+KGlNytfbj7YODlV
42sEFGklyyKfffMIIE3qW4Hrwfxu/I9vbknewzlmdPaqYa/Hth5xKVJMjVzs/RqI
nQ/ygPd2jM9J9VuUOAp/el3LiU0yhvVSS3Fbb1KqnC9s+ubNoUUcWN1fWWxyyUkx
q/FqJQP3BoZ+RmoB4vGDabcYnzjeC7LOn13LO0LO00kPXkIEPftYF8mWyIFbB9iI
icAMIA84R8qkFQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:31 2025 by rpki-client on console-fra.rpki-client.org