Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
File: KjbWeMS7ysJK5r6pokyZXEjVk_A.mft (raw, json)
Hash identifier: G3+vEic/ARV1Z+XQ2Bhiib/CKPh/3Sr8oGjpqCkzPIU=
Subject key identifier: 85:F5:4C:8C:3F:56:41:65:80:F8:D3:F9:65:F5:E0:78:0F:A4:70:74
Authority key identifier: 2A:36:D6:78:C4:BB:CA:C2:4A:E6:BE:A9:A2:4C:99:5C:48:D5:93:F0
Certificate issuer: /CN=2a36d678c4bbcac24ae6bea9a24c995c48d593f0
Certificate serial: 019512477FCA1F7FDC807840817D761C823D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
Manifest number: 1459
Signing time: Mon 17 Feb 2025 05:00:30 +0000
Manifest this update: Mon 17 Feb 2025 05:00:30 +0000
Manifest next update: Tue 18 Feb 2025 05:00:30 +0000
Files and hashes: 1: KjbWeMS7ysJK5r6pokyZXEjVk_A.crl (hash: nOXixS7vq9AmHoc+tGOhyZkKOCVRMxTc/QUirCt/n8g=)
2: zK1LIZGeSSnaNXNW0qcn6w1MLCU.roa (hash: e8RwpvlrpxWqEOoeavX1Cyz9aTwhsZ8GdJGcHGa5+Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:7f:ca:1f:7f:dc:80:78:40:81:7d:76:1c:82:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a36d678c4bbcac24ae6bea9a24c995c48d593f0
Validity
Not Before: Feb 17 05:00:30 2025 GMT
Not After : Feb 18 05:00:30 2025 GMT
Subject: CN=85f54c8c3f56416580f8d3f965f5e0780fa47074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7c:d3:3d:f9:51:b1:81:96:36:f4:e8:aa:1f:
f1:9c:ba:44:46:58:08:3e:12:55:18:52:4e:e5:af:
f5:87:21:81:2a:d0:64:79:20:af:ad:10:8b:04:67:
84:df:81:5e:7d:28:ca:c5:9a:ef:40:06:6f:1e:db:
c9:08:a9:44:56:60:30:ac:d9:3c:7e:f2:b8:7f:2f:
29:86:22:4a:1d:5b:e0:57:6f:77:05:13:33:e1:81:
2e:1f:bd:81:cd:57:90:f3:f0:4b:a4:fa:b1:f4:98:
d3:29:2e:d7:f9:c7:7c:3f:28:dc:25:14:b2:c1:a2:
76:95:44:82:7f:d6:e0:03:a2:1a:80:9e:62:18:76:
3b:bd:cf:40:e8:34:47:66:83:2e:12:34:bc:19:f6:
2a:e0:48:cf:c3:f9:3e:a1:33:31:eb:2e:e4:bd:31:
fd:f5:3c:eb:be:ee:6b:d3:22:e0:36:42:8a:58:bd:
74:2e:0f:af:5d:27:b0:27:1b:c9:69:eb:11:22:24:
64:df:bf:d8:55:46:0e:a5:62:cc:0b:dc:79:2f:7b:
a4:d5:56:44:38:22:0c:8c:95:c7:2a:c5:13:37:fb:
5e:d3:1f:7c:e3:ea:d9:2a:b5:ed:2b:17:ec:aa:a3:
fe:a4:84:8e:a0:61:52:c4:17:37:a1:91:d8:a8:ef:
ca:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F5:4C:8C:3F:56:41:65:80:F8:D3:F9:65:F5:E0:78:0F:A4:70:74
X509v3 Authority Key Identifier:
keyid:2A:36:D6:78:C4:BB:CA:C2:4A:E6:BE:A9:A2:4C:99:5C:48:D5:93:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:5c:03:97:7f:fd:7b:6b:e7:43:fe:a0:76:12:db:1b:3e:64:
62:de:2c:c6:14:c7:00:c7:0e:a0:25:06:2b:bd:f2:00:3e:01:
fb:38:e9:e1:cf:3d:c3:0c:80:df:da:f6:6b:e3:7a:72:8f:c7:
67:da:81:e0:d5:90:5c:f3:c4:4b:de:ac:a1:8d:f4:c4:a3:b0:
f8:68:b1:5e:1b:c0:0c:f5:73:f3:1d:62:3c:03:b0:be:ca:9d:
0e:87:5c:51:3e:54:73:7b:28:05:0c:d5:45:3f:e4:89:70:b8:
2c:ba:15:f8:db:34:51:27:a1:12:b1:8a:c6:3e:1b:03:cf:a6:
be:1b:77:0b:b0:f3:af:97:6c:4b:5f:fc:82:4e:21:ce:94:d9:
de:26:44:bd:58:03:77:5a:74:09:32:89:86:e0:0c:74:98:bf:
a5:1a:ba:a2:83:b1:71:dc:42:7b:7f:3a:6c:8b:0c:90:ef:ba:
25:6b:c5:d5:61:8b:f6:3d:39:22:c5:ca:3c:37:65:43:8f:6f:
d5:40:04:f6:42:e1:de:8b:db:36:0e:89:42:f4:12:4c:09:66:
57:c3:5e:d8:c5:7e:fe:53:b9:18:08:1d:40:3d:30:9b:4b:03:
6a:c1:60:1d:6d:f1:51:1b:30:92:45:0d:fe:36:8a:cd:26:26:
23:00:29:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:34 2025 by rpki-client