Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
File: kqH7oqss0QEUipWef4wI96Qbw8U.mft (raw, json)
Hash identifier: FIrzS0EtIj3ozWHCWR52+7J6kArjFrkrgz5Epxkoqvo=
Subject key identifier: 29:AD:4E:A5:BF:12:F5:CB:A0:60:E6:01:24:90:99:F8:7C:75:84:CF
Authority key identifier: 92:A1:FB:A2:AB:2C:D1:01:14:8A:95:9E:7F:8C:08:F7:A4:1B:C3:C5
Certificate issuer: /CN=92a1fba2ab2cd101148a959e7f8c08f7a41bc3c5
Certificate serial: 01958C60AFE3D8CC53BE1EECD97F6CF3A7FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
Manifest number: 1041
Signing time: Wed 12 Mar 2025 22:01:41 +0000
Manifest this update: Wed 12 Mar 2025 22:01:41 +0000
Manifest next update: Thu 13 Mar 2025 22:01:41 +0000
Files and hashes: 1: kqH7oqss0QEUipWef4wI96Qbw8U.crl (hash: ip8jN6V9UQACQlZNKj0aNPimbVJFl61gukomzliHkpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:af:e3:d8:cc:53:be:1e:ec:d9:7f:6c:f3:a7:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92a1fba2ab2cd101148a959e7f8c08f7a41bc3c5
Validity
Not Before: Mar 12 22:01:41 2025 GMT
Not After : Mar 13 22:01:41 2025 GMT
Subject: CN=29ad4ea5bf12f5cba060e601249099f87c7584cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:96:e6:86:d0:8d:90:28:ab:56:c1:4d:96:b4:
96:c5:aa:47:5c:0a:73:7c:88:9d:6d:b9:5d:6a:cb:
49:c5:e7:ae:d8:ef:7c:18:e1:80:75:9d:15:86:d3:
a7:51:1c:6c:b6:e0:b3:66:45:07:fa:2c:ff:10:2e:
05:ac:7c:ea:86:c1:87:d9:e4:c6:5f:d4:a6:34:0c:
af:db:95:e8:22:25:82:8c:d9:72:e4:3e:94:cc:21:
a0:6b:72:96:7d:e3:70:54:98:d5:11:90:f4:80:e9:
c0:6a:18:e2:e4:62:71:13:28:b9:e4:08:05:19:6a:
b3:17:36:06:be:86:81:97:70:ec:2e:48:9e:5d:6e:
54:65:58:2c:32:82:2a:4a:90:48:a9:3e:59:90:f3:
bf:51:ff:0c:71:ea:01:85:e1:4d:b1:72:f0:0d:ff:
74:ba:63:22:26:8a:f3:a7:03:56:67:c9:66:d7:a5:
c9:d9:17:a6:09:e3:83:15:da:ff:a3:6b:76:3b:30:
c1:fc:22:ba:45:c4:f4:6b:5f:8b:c0:e4:05:a2:86:
cd:12:23:20:2d:4e:7b:66:8f:1c:f7:52:1e:67:62:
6d:dd:db:06:a0:a2:31:89:af:93:7f:45:da:c0:c4:
7d:d1:ba:a4:5f:a8:82:c0:15:ec:95:cf:5a:38:e0:
d4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AD:4E:A5:BF:12:F5:CB:A0:60:E6:01:24:90:99:F8:7C:75:84:CF
X509v3 Authority Key Identifier:
keyid:92:A1:FB:A2:AB:2C:D1:01:14:8A:95:9E:7F:8C:08:F7:A4:1B:C3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:b0:ff:ea:01:5f:24:22:1e:b8:5b:3d:aa:c8:05:a9:1b:08:
3d:f0:de:ac:d1:63:27:63:97:24:32:c7:54:99:71:97:1c:1b:
7b:51:e0:c8:3a:51:a7:21:81:4d:cb:98:8c:1b:3d:9d:3e:98:
ca:38:70:4d:9f:47:29:9d:98:87:a1:54:03:cc:58:f1:8d:e8:
7e:e1:81:4b:17:0d:90:65:e2:2c:6e:91:cb:aa:8a:c4:14:22:
ea:2b:e3:14:b0:27:c2:87:ef:8b:38:43:64:76:38:05:fa:2a:
1c:82:6f:48:75:07:a6:c7:0b:5a:6a:8e:bf:0f:07:38:ea:47:
87:9e:85:40:a7:a1:51:03:f0:dd:65:d1:c8:b8:2a:5f:38:ad:
a6:ac:33:40:84:ac:a5:55:3e:cf:27:af:03:de:fd:b3:36:cf:
a2:14:ff:0d:85:e2:fd:a1:8e:37:8c:95:8b:4f:ce:89:f7:77:
71:37:3f:eb:f7:a7:b7:a6:de:04:81:3b:31:60:94:6a:ad:c0:
05:ae:13:fa:c0:16:26:69:23:41:11:43:44:4d:55:e8:1c:62:
00:ec:31:c8:b1:4f:06:f7:78:bb:da:a4:aa:3f:1b:c0:c2:be:
7d:b5:4a:a0:28:27:39:84:8d:fc:cd:9e:89:67:43:7b:ad:b5:
ca:b8:0c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:43 2025 by rpki-client