Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
File: KboKHXhI0sGyMd0-aCRCDRh5mRM.mft (raw, json)
Hash identifier: ZDlaSSjU5eMHNlgVwx8tiY7luVDiKQgLiE2fcd8xilI=
Subject key identifier: 30:08:61:66:EF:B1:D7:3F:D5:F0:46:E5:91:E2:4A:EA:68:36:A5:2F
Authority key identifier: 29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13
Certificate issuer: /CN=29ba0a1d7848d2c1b231dd3e6824420d18799913
Certificate serial: 0194C4630E7655CCBC11CD4FA131B69389E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
Manifest number: 1433
Signing time: Sun 02 Feb 2025 02:00:13 +0000
Manifest this update: Sun 02 Feb 2025 02:00:13 +0000
Manifest next update: Mon 03 Feb 2025 02:00:13 +0000
Files and hashes: 1: KboKHXhI0sGyMd0-aCRCDRh5mRM.crl (hash: 6JxJtzrRw/tg5T9RJlKqzw/M3Pc8JQdvgq4ILcuI0fk=)
2: eZNf3C9feSNGJ4V8vhX9W1CodHo.roa (hash: jCzejzqRu1A4u7nv7yzoXy+ymx/Nx97x4lbTMxiUYlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:0e:76:55:cc:bc:11:cd:4f:a1:31:b6:93:89:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ba0a1d7848d2c1b231dd3e6824420d18799913
Validity
Not Before: Feb 2 02:00:13 2025 GMT
Not After : Feb 3 02:00:13 2025 GMT
Subject: CN=30086166efb1d73fd5f046e591e24aea6836a52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ef:a5:f2:81:13:cb:5b:26:0b:c2:d1:dd:23:
47:cb:20:89:5f:61:bc:d6:15:55:07:71:f5:e9:98:
8b:dc:fd:6e:07:29:95:e5:39:51:96:01:f5:02:0c:
30:85:03:d9:04:fd:4d:74:b0:3f:8d:2e:c4:a6:9c:
be:4d:08:2c:70:f0:0d:59:b9:9a:b9:4f:3a:f1:ac:
99:64:02:16:14:79:0c:76:be:d0:54:97:ff:4e:c6:
d5:46:a0:ab:42:8d:bd:db:07:30:8a:eb:8e:e7:2d:
05:07:2f:d5:cd:d2:48:68:81:40:da:e4:13:07:88:
cb:b6:43:00:24:c2:63:b4:ee:2d:82:1a:54:05:43:
9d:e4:9d:70:1b:eb:65:0d:35:90:5d:1b:f0:67:e4:
c9:80:5f:e7:12:db:24:d0:52:ad:8e:c2:37:5b:58:
23:bd:af:ff:38:45:f2:d3:48:a0:6d:26:3a:5e:e5:
a1:3c:0b:3e:7f:93:74:cc:6b:fe:d5:a0:a5:ff:54:
30:c1:ce:80:81:a9:ab:bc:33:eb:de:bb:c9:c9:f0:
07:d7:50:0a:36:95:5a:eb:49:c8:90:6f:60:88:67:
bb:09:5a:98:86:bd:c5:fe:3a:5f:6a:85:e1:6b:35:
26:f8:de:22:ee:d1:7a:3c:b0:90:ba:24:74:2c:ba:
1d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:08:61:66:EF:B1:D7:3F:D5:F0:46:E5:91:E2:4A:EA:68:36:A5:2F
X509v3 Authority Key Identifier:
keyid:29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:01:81:ab:0c:27:2a:68:e9:39:b1:38:e1:02:78:f8:a1:ed:
56:ab:a7:6a:14:85:15:09:67:7a:d3:cd:e4:d7:60:20:d4:79:
64:17:91:f0:a3:16:bc:3e:66:4d:07:dc:0e:2c:1b:71:c4:98:
b4:2f:44:2b:fa:fa:cd:55:7c:87:d3:b1:fe:2c:31:11:7a:e0:
7f:78:dd:bf:02:78:8b:6e:55:15:1e:00:89:6b:66:5a:c6:3c:
fe:71:4c:44:85:58:67:bb:66:84:7f:28:63:6d:0a:1d:0e:26:
de:b2:ee:90:f7:1f:c8:e2:51:67:33:a1:df:b8:32:c0:85:96:
d5:4e:d9:25:02:0e:d0:8c:7a:51:5f:29:0e:d6:38:86:30:78:
0a:6b:c4:8b:fd:7e:7b:45:58:17:79:8d:61:e2:33:da:8d:ff:
06:98:a0:68:ca:df:b9:b1:42:f5:c1:1c:59:c2:b3:5a:d2:64:
e4:39:1e:cd:a5:19:d9:b4:5c:96:99:45:f0:1d:09:46:84:bc:
93:96:b5:77:bd:e6:13:b4:39:9c:bb:e5:ce:96:d5:00:1a:cb:
71:5a:8d:d1:60:18:ab:b0:2b:3d:1b:c6:3a:27:1f:43:2e:1e:
2f:5f:d7:89:e6:2a:d0:88:9d:06:8b:86:5d:31:f6:39:ab:2b:
c3:c3:0a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:47:58 2025 by rpki-client