Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft
File: KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft (raw, json)
Hash identifier: 2TuxpHXmI2o4PXRE7ig4NVerNmz41t73rr0KntEPMrA=
Subject key identifier: 24:8B:5D:06:00:19:76:30:1D:B5:73:AB:52:57:5D:42:E0:D9:A4:E3
Authority key identifier: 29:71:94:F4:B5:2B:9F:F4:33:F2:BF:0D:16:B5:8C:11:C7:CF:11:31
Certificate issuer: /CN=297194f4b52b9ff433f2bf0d16b58c11c7cf1131
Certificate serial: 0194BB971F50DDE78DC80091E1D901B51863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXGU9LUrn_Qz8r8NFrWMEcfPETE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft
Manifest number: 0AC3
Signing time: Fri 31 Jan 2025 09:00:30 +0000
Manifest this update: Fri 31 Jan 2025 09:00:30 +0000
Manifest next update: Sat 01 Feb 2025 09:00:30 +0000
Files and hashes: 1: KXGU9LUrn_Qz8r8NFrWMEcfPETE.crl (hash: 2BFuQvYJjFCZWD5pX79DY74hWFr4O23neG13T+icNqs=)
2: MEaSq7qzsvPxYFefW_5rpR6YcOI.roa (hash: dE3454MgWcstxWm9JTV3P70lF/Suj78coMKIuR/Uln0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXGU9LUrn_Qz8r8NFrWMEcfPETE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:1f:50:dd:e7:8d:c8:00:91:e1:d9:01:b5:18:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297194f4b52b9ff433f2bf0d16b58c11c7cf1131
Validity
Not Before: Jan 31 09:00:30 2025 GMT
Not After : Feb 1 09:00:30 2025 GMT
Subject: CN=248b5d06001976301db573ab52575d42e0d9a4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:50:be:e7:14:37:60:79:af:41:3b:05:63:0c:
63:20:60:66:ef:ce:e1:1d:99:73:e8:e8:a3:11:1c:
f1:88:37:6e:8f:64:62:e3:0a:45:05:dc:96:ad:04:
48:79:17:09:33:f1:e1:88:09:cf:98:45:47:3a:62:
48:21:77:78:3a:cc:23:99:4d:c6:84:2e:d4:88:17:
6b:f3:f0:65:8d:c8:a0:e0:59:e0:f9:55:e9:3c:7d:
48:c8:0a:13:08:74:6a:37:27:9c:26:ff:4a:21:2f:
48:79:3b:f5:76:29:d6:9d:9a:c9:7a:e7:be:b9:c5:
8c:47:6a:2b:6f:3e:ff:54:c5:d0:9c:2b:81:af:86:
5a:4b:fd:14:c7:23:1e:6d:5d:2b:9a:0d:01:19:de:
29:4f:73:77:e7:9b:2d:56:ad:cf:d1:e5:c3:23:98:
c8:9d:9a:9a:6b:9b:57:39:79:64:b2:14:f7:bb:d4:
39:b0:4a:2f:d2:bd:6c:4e:c9:51:eb:bd:a4:40:de:
f7:a6:96:9a:a6:61:2c:37:71:cb:8f:ed:58:4b:2c:
50:4b:6f:bc:b1:3b:d3:76:73:14:51:29:f0:c2:66:
79:28:74:80:cd:17:ce:7d:aa:74:7a:0f:bc:26:30:
b2:ba:8a:bd:a1:7e:5a:c4:0e:31:0d:8b:04:f9:6a:
92:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8B:5D:06:00:19:76:30:1D:B5:73:AB:52:57:5D:42:E0:D9:A4:E3
X509v3 Authority Key Identifier:
keyid:29:71:94:F4:B5:2B:9F:F4:33:F2:BF:0D:16:B5:8C:11:C7:CF:11:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXGU9LUrn_Qz8r8NFrWMEcfPETE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:6f:a4:69:48:e2:53:1c:00:85:a7:4a:0b:9a:70:6e:a6:1c:
c5:65:15:b1:e2:9b:aa:b2:6e:e5:79:a7:86:93:8b:b7:ff:61:
67:f9:1a:fb:5d:98:6d:39:13:83:1e:8b:c3:40:7b:b6:7a:8f:
43:7d:c8:57:11:31:db:fd:b3:b2:9f:2e:84:f9:0c:6e:08:57:
13:c1:45:97:21:f7:0b:53:6f:99:60:d5:9b:b5:4f:1e:6a:7d:
5d:bd:32:f3:71:68:f5:2b:39:89:3e:a3:0c:cb:2c:f6:0e:24:
f2:31:03:88:a2:50:5d:00:e7:5e:89:c9:d9:2d:4d:be:b0:58:
38:a9:19:54:3e:f9:e3:fb:cd:f0:92:3f:93:24:cb:71:cf:d3:
6f:e5:5d:47:29:fd:ba:e7:a8:7e:d5:91:a6:3d:13:c8:24:e9:
db:e3:24:41:4b:1e:a7:a8:63:43:e5:af:d0:f9:1d:fb:70:84:
0e:43:95:d1:d2:8c:d0:3d:c6:c6:30:43:6e:f1:51:6b:d8:a2:
9f:9b:d4:83:fd:e4:c5:f6:48:c2:c9:f2:a4:ce:c6:c8:3b:26:
31:b9:f0:6e:12:31:a4:ef:8b:5e:63:42:68:da:33:90:a1:82:
f8:ba:a4:43:cc:9f:00:73:ba:d6:ff:82:db:a2:26:9a:c1:42:
81:12:69:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:12 2025 by rpki-client on console-fra.rpki-client.org