Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
File: kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft (raw, json)
Hash identifier: IpjW4fCRKAcWw0w7+hOJ5FJ8TxneM2NoJGzGHy49g1s=
Subject key identifier: 62:C5:6A:24:C7:4D:55:6F:0E:AD:BD:5F:35:87:14:97:65:4C:FF:B5
Authority key identifier: 90:1F:64:8D:CE:92:7F:E4:18:33:F8:6D:57:51:60:B0:BC:51:30:A2
Certificate issuer: /CN=901f648dce927fe41833f86d575160b0bc5130a2
Certificate serial: 0194C507D7939251D5BDEE8E0BC7AA9F0F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
Manifest number: C2
Signing time: Sun 02 Feb 2025 05:00:12 +0000
Manifest this update: Sun 02 Feb 2025 05:00:12 +0000
Manifest next update: Mon 03 Feb 2025 05:00:12 +0000
Files and hashes: 1: biaSUM0tsIeDyFwfaqfKhU0MJuI.roa (hash: 96WHWMwEvzPM4YoHMljlSa6xAvYqeckDM2XFH/UNGMM=)
2: kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl (hash: hVENspwgoHKXROp2ScNGgXe5AU05oTcwXtlP5G4ugnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:d7:93:92:51:d5:bd:ee:8e:0b:c7:aa:9f:0f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=901f648dce927fe41833f86d575160b0bc5130a2
Validity
Not Before: Feb 2 05:00:12 2025 GMT
Not After : Feb 3 05:00:12 2025 GMT
Subject: CN=62c56a24c74d556f0eadbd5f35871497654cffb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ca:b5:5a:82:25:9c:10:9b:b5:1e:74:53:69:
d1:e5:61:54:15:0e:6c:e7:6d:f5:47:6e:e0:2a:6b:
03:76:0d:2a:1e:19:09:4c:6a:ea:ce:2d:00:07:db:
13:ff:18:89:92:c0:c4:bc:14:a2:84:a5:0c:cb:21:
10:0a:22:00:06:42:42:1e:24:af:fc:42:bc:80:5b:
f0:a9:58:a0:e3:71:13:d5:f5:ca:3f:48:e7:8a:5b:
93:c6:30:80:6f:4b:ba:6d:58:6d:1a:f3:8c:85:6d:
bd:e4:dc:e1:cb:42:d0:d9:e4:ec:01:f9:90:c4:c1:
98:d5:98:f8:05:2d:44:f0:76:96:6a:bf:e4:c9:15:
5d:91:22:76:eb:4f:14:38:59:93:0a:99:85:48:ec:
8d:67:63:a4:23:ce:01:08:bc:1e:4f:78:69:7b:35:
14:d6:5e:a5:65:43:cf:bf:06:8b:5a:e0:f5:9d:4a:
45:5f:71:1a:09:a7:ac:2e:c6:cc:d4:76:93:c6:ac:
cf:b7:6c:00:df:40:0a:34:c9:a8:86:d1:aa:ea:1a:
d7:70:dc:55:c2:6f:10:1a:28:08:60:a6:3f:72:8b:
26:6a:ac:cc:8a:41:e1:bf:4f:c3:89:0d:3d:1c:cb:
e9:6a:39:8c:62:e3:7f:70:95:d2:e3:01:21:12:32:
8b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C5:6A:24:C7:4D:55:6F:0E:AD:BD:5F:35:87:14:97:65:4C:FF:B5
X509v3 Authority Key Identifier:
keyid:90:1F:64:8D:CE:92:7F:E4:18:33:F8:6D:57:51:60:B0:BC:51:30:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:90:08:52:a3:34:34:1f:ef:77:ed:f6:65:56:cd:ea:31:f2:
37:66:89:be:3f:76:fd:0f:98:8b:74:6a:44:b5:1f:f3:42:6f:
d6:cd:15:2c:45:ba:c4:dd:8a:31:33:40:81:d0:7c:ad:20:3c:
34:05:a0:58:18:05:84:c2:1d:68:59:5c:50:2f:61:72:58:1b:
48:26:2c:dd:9d:89:85:0a:5b:98:9b:f5:03:38:bb:38:60:e7:
66:0e:05:69:eb:f9:3a:4a:87:59:e9:76:db:4f:15:2f:a8:d9:
e9:95:af:64:31:fa:dc:90:35:62:5e:1b:65:2b:00:ea:b4:07:
33:ed:a1:42:83:01:76:a9:90:9b:c1:52:9e:f7:58:92:7d:92:
c8:0a:59:43:eb:52:2e:5f:3f:1c:9b:31:ea:80:b0:3f:dd:84:
be:f2:81:64:d0:91:bc:f1:73:3e:1d:09:78:51:43:89:b0:27:
bd:f0:2f:10:7c:d0:2e:c8:b8:8b:76:f4:eb:68:fd:f5:8c:45:
70:bf:66:e1:86:ef:d0:eb:1b:8a:94:18:da:0f:52:d9:80:bb:
2d:90:b3:39:ec:ee:c7:8f:61:aa:68:92:30:98:bb:56:f9:7d:
66:b3:4a:61:7c:8e:f9:fa:c8:8e:5a:84:6c:0f:b5:b6:37:ed:
38:fe:90:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:00:11 2025 by rpki-client