Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
File: kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft (raw, json)
Hash identifier: XGdyg9bxT1Y+uCiiLpBRH4CldqnHqrR0QKKauZayqNw=
Subject key identifier: 29:8E:E0:AC:FC:0E:00:F7:86:16:4B:62:C3:F7:4A:F6:F5:4E:58:AF
Authority key identifier: 90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62
Certificate issuer: /CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
Certificate serial: 0194BAF23896EA7AFB03BF74B547DFE9DB79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
Manifest number: 0726
Signing time: Fri 31 Jan 2025 06:00:23 +0000
Manifest this update: Fri 31 Jan 2025 06:00:23 +0000
Manifest next update: Sat 01 Feb 2025 06:00:23 +0000
Files and hashes: 1: NfRATxtwxdk8t5k10NmnaIEBcI8.roa (hash: 48zogp0gFyhuprEhPJDieZAGrOKDhLcNh+8XpGM82yA=)
2: kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl (hash: RTpslWPaaX6bDSa1ynyH+FUX1NbEDD6MhdDlg+ycV2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:38:96:ea:7a:fb:03:bf:74:b5:47:df:e9:db:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
Validity
Not Before: Jan 31 06:00:23 2025 GMT
Not After : Feb 1 06:00:23 2025 GMT
Subject: CN=298ee0acfc0e00f786164b62c3f74af6f54e58af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fc:7b:78:25:d8:e6:30:87:a6:2e:e5:59:ae:
a5:57:7e:a9:ba:24:57:c1:22:4d:50:80:b5:05:d7:
16:79:31:26:a3:e9:9b:24:8c:76:5b:88:92:42:49:
ee:6f:ab:32:ff:63:c6:00:c8:1a:0b:09:ca:99:65:
5b:38:3e:06:37:11:33:f1:5b:a0:4a:c6:98:2c:2a:
3c:4e:09:a2:1b:1a:60:df:a4:39:f6:60:b8:32:7b:
d6:cc:71:89:0c:df:1f:57:77:83:da:24:b5:95:e6:
04:47:8b:35:55:2a:92:5e:9e:65:4c:60:cf:41:1a:
7b:6f:4c:0f:d7:4d:a3:d7:93:f2:1e:3b:4d:18:a9:
ef:3f:db:46:3a:dc:f1:62:52:a9:e1:14:27:58:ef:
fe:1f:85:7e:77:1b:ee:c7:08:8d:db:42:02:f4:c3:
a9:cd:b1:e5:19:d6:4f:52:3d:ad:57:0f:14:f0:b2:
9c:98:70:10:a1:4b:52:bc:c2:fd:d5:b2:32:63:0c:
d4:31:cb:18:1d:95:dd:c9:5b:40:70:bc:57:6c:cf:
11:6b:1c:51:ef:92:64:ab:cc:6d:c9:03:6d:a3:b5:
7b:5a:c7:38:81:7e:e9:2c:63:df:cc:33:1b:3c:de:
d2:4a:d4:6e:d6:dc:5a:69:82:f1:6c:bd:c0:99:94:
3c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8E:E0:AC:FC:0E:00:F7:86:16:4B:62:C3:F7:4A:F6:F5:4E:58:AF
X509v3 Authority Key Identifier:
keyid:90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:80:a5:fc:f3:8f:84:0a:75:47:0a:d7:68:8b:71:7b:5b:94:
f1:f6:ec:f8:d8:47:ea:22:55:78:35:51:e5:9c:9f:62:38:35:
fa:c4:44:7f:ad:c6:2f:42:17:a2:2b:41:47:bb:aa:3c:f9:34:
5b:06:35:12:ae:85:0b:6e:a0:8b:9a:d3:bc:0e:57:06:e1:8c:
84:78:1c:8c:0a:fe:44:97:40:f8:50:84:0b:f9:2a:b4:29:ee:
22:8f:bc:7d:92:a9:04:3e:82:84:c7:4e:c7:3b:0d:67:1b:2d:
f1:70:b6:d4:15:28:f1:c5:ae:30:8c:1f:73:11:7f:f4:76:c0:
54:63:f8:e4:0e:17:5f:6b:3a:f2:5e:29:73:26:a2:e2:c6:6e:
4c:96:77:63:95:71:d2:ea:c2:cb:47:79:af:e1:3e:45:a8:7f:
69:d5:23:32:84:18:95:7f:0d:d6:5c:fb:27:6c:ed:46:9f:da:
0f:d1:b4:20:dd:47:15:9b:b2:b2:18:41:b8:6d:15:64:b3:94:
00:9e:4f:61:af:90:f3:20:db:0b:56:8c:44:90:80:7d:b5:37:
dc:c4:1f:ae:95:6b:e3:b1:80:1d:bb:0e:9b:d7:17:ba:99:cc:
a1:c9:85:11:71:e0:7b:6a:5e:63:71:64:2f:4d:7d:2e:9e:30:
38:08:5b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:36 2025 by rpki-client on console-fra.rpki-client.org