Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
File: kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft (raw, json)
Hash identifier: kYPMDCcc1yQv0YM/sauz5C0VxE8Mu76HOi1kzvDyS4o=
Subject key identifier: 4C:CE:28:07:64:58:CD:21:DA:07:17:C3:65:59:17:0E:0E:A3:0E:2D
Authority key identifier: 92:4A:97:D9:12:D7:1F:80:FD:36:B7:3E:FC:0F:C7:96:97:62:F3:37
Certificate issuer: /CN=924a97d912d71f80fd36b73efc0fc7969762f337
Certificate serial: 0194BB5FFEEF2CDC45B33F089D26E75F5B89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 08:00:18 +0000
Manifest this update: Fri 31 Jan 2025 08:00:18 +0000
Manifest next update: Sat 01 Feb 2025 08:00:18 +0000
Files and hashes: 1: 1-JNlJinjq7kuel35O_T8kUcWQBw.roa (hash: 1A2mPTXvGu8ShjNKjNG8ljmXuNzR5l5s2QNyKormBf0=)
2: kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl (hash: nzP+X+dGJ4CFvHHy273nqPvWv+H9KA5AefAAMzInVIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:fe:ef:2c:dc:45:b3:3f:08:9d:26:e7:5f:5b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=924a97d912d71f80fd36b73efc0fc7969762f337
Validity
Not Before: Jan 31 08:00:18 2025 GMT
Not After : Feb 1 08:00:18 2025 GMT
Subject: CN=4cce28076458cd21da0717c36559170e0ea30e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0b:5f:84:e0:d8:e6:81:b2:63:b9:c7:58:08:
33:a2:9f:ed:8a:d3:6a:76:c8:0b:46:b7:d3:a3:76:
e4:07:a1:02:6b:b5:a9:5a:3b:7f:70:4c:23:6e:78:
18:95:2b:c5:54:68:8a:04:c9:22:be:95:e0:45:57:
db:29:84:72:cd:9a:93:3b:45:9b:7e:ed:c3:96:11:
14:f3:12:d0:81:7c:6c:19:b5:c0:06:bf:8a:eb:e0:
40:03:77:2e:0f:d0:e1:c6:a0:e1:b7:fe:b4:0e:58:
9d:cd:42:44:3a:28:96:e6:2c:1a:b7:4d:51:68:6c:
82:ca:ce:73:6d:e5:56:f4:81:16:21:b0:70:9a:89:
16:1b:23:bd:c2:6f:9a:06:6f:0b:b1:06:02:37:df:
8b:01:cf:c6:6e:3c:54:c2:c4:2c:cd:93:a8:eb:bf:
ae:76:f5:d4:d6:05:20:0f:fd:ac:0d:27:c2:5c:4a:
48:30:88:49:18:1f:16:68:b1:2e:51:88:68:b5:7f:
87:60:ce:dd:e6:b3:17:ef:58:55:03:1d:4c:90:42:
be:ac:9b:9a:c4:e7:90:56:10:c9:1d:03:31:8e:f7:
ed:f2:71:2f:2e:be:36:7e:53:bd:5f:8f:98:ee:cb:
65:e7:66:79:bc:79:ba:b8:93:6d:bb:60:12:b0:e3:
da:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CE:28:07:64:58:CD:21:DA:07:17:C3:65:59:17:0E:0E:A3:0E:2D
X509v3 Authority Key Identifier:
keyid:92:4A:97:D9:12:D7:1F:80:FD:36:B7:3E:FC:0F:C7:96:97:62:F3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:0a:9c:13:cf:2f:a8:94:a1:50:1e:4d:12:1e:36:18:bf:f8:
db:8e:7d:fc:4d:f5:56:86:8f:ab:6c:d2:a2:b9:be:2f:b3:51:
f3:dc:b3:a7:8d:6e:47:25:56:9e:9d:a1:8a:04:c8:1b:10:f4:
7d:92:de:d0:4c:0e:92:a4:57:99:a6:7e:03:d9:e5:63:71:20:
7c:2d:61:4f:eb:02:ae:a6:0e:4c:db:f5:4b:fd:00:19:3e:57:
7d:bd:13:5e:42:28:3b:67:52:5e:87:05:90:01:5c:50:47:79:
d1:e1:b5:1f:83:27:cd:0a:9c:23:2e:07:3e:1f:1e:86:98:d6:
58:ba:55:9b:4b:9b:e5:f8:47:1a:3c:65:f2:64:0c:47:07:69:
32:a6:ff:9b:ea:02:92:ac:87:6e:74:9f:c9:f4:99:78:6f:69:
1e:cb:6b:bd:9e:28:45:ad:04:e2:c4:a2:04:16:f1:f4:6b:b0:
d5:14:1a:26:f5:95:4c:de:49:0d:81:51:25:03:cc:23:f3:bc:
16:57:fa:87:cb:41:e0:db:c4:76:ed:02:cf:74:a8:25:db:9b:
37:fd:54:69:f9:bf:54:16:56:4f:61:eb:82:33:dd:2e:38:98:
0a:f8:e0:1e:de:43:b6:63:a0:8c:17:f5:c5:c6:36:30:9b:6e:
53:c9:07:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:39 2025 by rpki-client on console-fra.rpki-client.org