Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
File: kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft (raw, json)
Hash identifier: x0yDVK/fHx+HuNcvPBOUWiRnH3cDB2PjxzYteeMDXKE=
Subject key identifier: B1:7F:0D:45:4B:AE:90:25:CC:FB:FC:C7:55:F9:FD:60:C8:D4:E1:58
Authority key identifier: 90:1F:64:8D:CE:92:7F:E4:18:33:F8:6D:57:51:60:B0:BC:51:30:A2
Certificate issuer: /CN=901f648dce927fe41833f86d575160b0bc5130a2
Certificate serial: 0194BB5FE8BF1653AD5FD5ACB487BD561775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
Manifest number: BD
Signing time: Fri 31 Jan 2025 08:00:12 +0000
Manifest this update: Fri 31 Jan 2025 08:00:12 +0000
Manifest next update: Sat 01 Feb 2025 08:00:12 +0000
Files and hashes: 1: biaSUM0tsIeDyFwfaqfKhU0MJuI.roa (hash: 96WHWMwEvzPM4YoHMljlSa6xAvYqeckDM2XFH/UNGMM=)
2: kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl (hash: irloB6hXBQaCEguo/Bwx7Mkk4Mu82/e4yYLxAd/Acu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:e8:bf:16:53:ad:5f:d5:ac:b4:87:bd:56:17:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=901f648dce927fe41833f86d575160b0bc5130a2
Validity
Not Before: Jan 31 08:00:12 2025 GMT
Not After : Feb 1 08:00:12 2025 GMT
Subject: CN=b17f0d454bae9025ccfbfcc755f9fd60c8d4e158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:79:1e:67:e7:08:bb:14:93:78:e4:a7:0d:38:
62:63:3d:e4:56:4d:8a:e1:24:c3:2c:78:a1:a3:26:
3b:ed:0f:ed:20:1b:87:18:20:0b:cd:c9:7b:aa:db:
06:9d:fd:a4:45:09:12:06:2c:1f:00:4e:44:85:e4:
23:ea:b3:55:bd:60:67:bb:c2:b1:21:93:fb:22:3d:
f3:10:82:07:bd:1f:0f:2c:80:e8:84:c1:14:95:6e:
7f:26:9d:7a:2d:52:34:02:c3:c4:89:86:18:48:bc:
43:e9:47:bd:cb:e9:56:13:85:0b:3e:ee:cf:db:3f:
20:d8:9f:a3:49:1d:94:5f:e8:16:64:78:e1:d0:4a:
86:1d:61:31:af:7f:1a:ac:b3:ea:28:9c:bc:a5:e2:
da:de:77:d6:a7:8d:0c:99:61:83:09:65:71:63:71:
63:42:79:a9:1c:d5:51:86:d2:4d:4b:3d:24:18:9c:
bd:81:26:d8:aa:a3:08:80:79:21:39:12:0b:8c:76:
d2:ae:41:4e:4e:96:70:0e:f3:af:40:be:f6:61:94:
28:7c:0e:42:16:3e:55:c1:26:ec:1d:04:79:f4:91:
ac:b2:2e:c5:65:17:59:7c:31:8c:18:fe:6f:14:9f:
1a:a7:ee:55:ce:21:18:10:81:11:07:02:9f:97:2f:
9c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7F:0D:45:4B:AE:90:25:CC:FB:FC:C7:55:F9:FD:60:C8:D4:E1:58
X509v3 Authority Key Identifier:
keyid:90:1F:64:8D:CE:92:7F:E4:18:33:F8:6D:57:51:60:B0:BC:51:30:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:fd:4b:0f:42:59:44:82:b8:ea:12:2d:9f:89:5c:0e:f6:b7:
99:21:58:dc:64:8e:d7:8b:d0:d7:60:7d:f0:dc:73:6b:be:20:
b8:5d:1a:ad:2d:78:43:6d:68:d5:d4:6b:44:66:b4:18:e1:e7:
61:48:b7:76:71:8d:a5:80:d5:3d:a0:82:9c:2d:d4:4d:c7:73:
24:e3:bb:9d:35:c5:35:ef:e7:c6:36:d1:64:dd:3e:64:e0:cf:
c7:79:87:82:ba:59:9b:63:ca:9e:86:71:3c:89:3c:f3:67:c5:
80:57:e0:f0:5c:8a:27:40:a4:f1:f1:dd:27:b7:eb:d1:f8:b1:
f4:0f:88:cb:20:ee:d9:9d:44:48:66:38:5a:84:a8:e0:8f:7e:
20:4a:31:2c:f9:4d:e9:8d:6b:be:be:b3:29:46:73:78:a7:ba:
4b:28:0b:55:06:4e:0f:07:0a:44:fb:b1:31:6e:10:69:0f:1e:
b9:5b:50:c1:22:3d:05:02:df:4a:0a:f8:52:06:45:1f:03:ab:
c5:66:ec:d7:c6:bd:77:a7:d6:cb:50:72:9a:c2:2e:83:a6:ef:
77:3d:4e:c2:ac:9f:16:46:95:4f:53:cd:a3:07:2f:a7:e4:7e:
26:d3:74:e7:9c:e7:70:9d:48:ce:c1:22:5c:01:ff:f6:97:54:
68:26:bb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:07 2025 by rpki-client on console-fra.rpki-client.org