Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft
File: Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft (raw, json)
Hash identifier: PLbGezZlJyR4JuwpmJRH1lCGZu/oOd6V/Ml9t006Tms=
Subject key identifier: 71:E6:18:7D:5B:56:9A:0A:7B:F9:27:AF:E9:E9:22:49:EE:34:E0:EA
Authority key identifier: 2A:C8:9A:F0:5D:20:71:1E:0A:94:E8:4B:F4:B4:47:66:36:2C:50:83
Certificate issuer: /CN=2ac89af05d20711e0a94e84bf4b44766362c5083
Certificate serial: 0194C463154E2FF635723FAA23F24B88121E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ksia8F0gcR4KlOhL9LRHZjYsUIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft
Manifest number: 0D5C
Signing time: Sun 02 Feb 2025 02:00:15 +0000
Manifest this update: Sun 02 Feb 2025 02:00:15 +0000
Manifest next update: Mon 03 Feb 2025 02:00:15 +0000
Files and hashes: 1: Ksia8F0gcR4KlOhL9LRHZjYsUIM.crl (hash: WrfsIClo8eAAVzftFys74K3OT5stG0WYCEhLaNC/GPQ=)
2: so_dnSs4BnrVZYioQ2oy6VOroHk.roa (hash: EXJQLyqb51APlznWLoV0tXq0fpUDEu2dhVkLYk30HsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ksia8F0gcR4KlOhL9LRHZjYsUIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:15:4e:2f:f6:35:72:3f:aa:23:f2:4b:88:12:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac89af05d20711e0a94e84bf4b44766362c5083
Validity
Not Before: Feb 2 02:00:15 2025 GMT
Not After : Feb 3 02:00:15 2025 GMT
Subject: CN=71e6187d5b569a0a7bf927afe9e92249ee34e0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:47:6b:b3:88:01:5e:8d:92:be:b2:40:b8:0d:
88:50:8b:34:a5:45:50:ce:5d:78:53:92:fb:e2:ef:
d9:51:44:44:fa:80:89:33:90:04:0d:88:e5:fe:24:
21:77:7d:20:1a:28:54:9c:87:20:d5:a8:b6:6f:78:
02:89:a7:fe:e5:31:e8:ef:01:ef:c7:c3:78:a2:a8:
34:5b:54:58:85:4f:40:8e:9e:a3:d5:ac:53:ec:f3:
70:93:9f:85:a7:a4:eb:8c:64:30:5d:db:7f:8d:f9:
7c:3f:0e:b2:71:42:09:d1:22:a4:66:1c:88:da:34:
7a:91:1a:0a:46:77:07:37:97:49:20:13:79:68:f8:
a5:93:86:40:58:81:24:a5:37:b4:86:ca:39:69:ef:
f6:93:a2:cf:42:ce:75:18:fe:81:7c:6e:a6:dd:df:
b4:30:1a:4c:4d:ac:e6:d1:b5:b4:ec:b9:fc:02:0e:
d4:be:45:10:2c:bc:9b:9a:fc:b9:1f:e0:84:3b:4b:
18:e9:5d:ac:ab:6b:bc:d5:72:a9:93:42:15:b0:9e:
c2:12:ad:bf:c7:97:3b:82:e6:8d:1d:ff:70:a2:29:
af:92:7d:e7:85:0e:a5:4d:71:04:ec:b9:34:64:61:
73:57:f9:95:16:5c:67:ee:99:b9:d1:71:43:f5:00:
8e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E6:18:7D:5B:56:9A:0A:7B:F9:27:AF:E9:E9:22:49:EE:34:E0:EA
X509v3 Authority Key Identifier:
keyid:2A:C8:9A:F0:5D:20:71:1E:0A:94:E8:4B:F4:B4:47:66:36:2C:50:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ksia8F0gcR4KlOhL9LRHZjYsUIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:8e:f2:dc:e2:da:d8:21:f6:93:43:97:04:c6:57:71:45:5f:
98:1a:48:cc:93:fb:ba:15:ff:56:8c:c1:1a:e3:50:aa:72:2c:
49:89:67:dd:30:61:89:06:03:14:37:63:49:a9:82:ac:a2:53:
60:7d:70:68:9f:e4:2e:2c:30:f4:fe:94:2c:79:2b:01:36:84:
39:56:e4:21:eb:01:bc:28:8e:ce:3c:1b:1a:1c:b6:b0:2f:51:
8d:b2:83:bc:6b:65:b4:26:1e:d1:72:e6:05:02:18:da:7a:c2:
ea:ad:b4:1b:a8:e6:ba:87:98:66:c6:ef:45:7a:96:01:fa:4c:
c1:ab:31:bc:5c:ba:ab:b2:51:e6:ec:5a:91:41:d2:73:8a:bc:
b0:2a:90:a4:f8:40:ec:06:8c:4d:46:ed:dd:48:68:05:68:f6:
7e:6b:0e:b6:37:8c:e1:67:25:3f:e3:da:6c:1c:02:a6:f2:4f:
9e:b9:c2:63:95:54:e6:26:d3:93:2a:37:c7:0d:5e:9d:d7:c7:
da:20:a7:4d:31:55:e9:b2:cb:9e:7a:67:f0:ee:86:24:70:3d:
05:a5:70:dd:00:f6:c9:ec:47:5a:ba:79:67:1c:1f:13:01:57:
95:52:66:0f:85:a4:bf:2a:17:05:e9:b7:cb:89:4f:1d:bf:b5:
2d:ef:6b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:39 2025 by rpki-client