Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
File: inK2D1-0kwAWzrhgzBdKUxNfFhY.mft (raw, json)
Hash identifier: avwibU2UqPHUNlT6d7UZ1nWX8iulO+EPW5P03DacWSY=
Subject key identifier: 09:2E:64:17:7B:49:A9:78:24:71:86:1C:38:9E:41:4A:05:04:E6:6C
Authority key identifier: 8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
Certificate issuer: /CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Certificate serial: 0194C3F56F30EF227E0AA39345056F5431A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
Manifest number: 1433
Signing time: Sun 02 Feb 2025 00:00:29 +0000
Manifest this update: Sun 02 Feb 2025 00:00:29 +0000
Manifest next update: Mon 03 Feb 2025 00:00:29 +0000
Files and hashes: 1: UFOKhaK0v1gPCCQKJ0nfF2TPj8Q.roa (hash: gXk89omIH5bBJ5a1OXq1J0BsTh4qVLHTS/I1WBLRmYU=)
2: ZrKS833-z3Eio1cEs6mC2u69XvI.roa (hash: z4A6aCJBnlDjwJixWl3FAWoiLh9JN5kfRWL7hdBFHkM=)
3: inK2D1-0kwAWzrhgzBdKUxNfFhY.crl (hash: +idat0yrk4eJzv6cIPBbsCW/CCdTk9oq5KePbAstHSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:6f:30:ef:22:7e:0a:a3:93:45:05:6f:54:31:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Validity
Not Before: Feb 2 00:00:29 2025 GMT
Not After : Feb 3 00:00:29 2025 GMT
Subject: CN=092e64177b49a9782471861c389e414a0504e66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:be:02:64:29:ff:f3:b7:2d:27:a1:c7:94:5b:
7a:53:ff:4f:16:7f:af:cd:0d:cc:72:15:77:dc:28:
3d:4d:df:0d:40:ca:d1:e8:7b:f9:f3:c7:c1:53:bd:
bf:39:59:3c:07:f4:9e:76:b0:5f:65:d3:93:25:6e:
16:29:a7:66:48:2b:8d:04:41:06:aa:df:b8:c1:f6:
1e:a2:da:79:08:66:10:fe:29:5d:9f:4f:d6:8d:69:
f4:ca:1f:b1:ea:8b:ba:f0:6d:a5:20:c7:dd:e2:08:
76:0b:49:70:7b:a8:35:68:f9:96:f6:58:09:b9:28:
7e:0e:86:76:af:21:9b:31:76:5d:6c:38:a0:85:36:
17:a2:50:98:f6:8e:5a:a7:99:d7:5c:a1:89:f1:ea:
c1:c7:d9:b0:81:93:70:50:e1:a3:bb:13:a1:da:8a:
66:f5:9a:2c:5e:84:a4:b2:db:c5:22:8e:97:ab:ea:
bd:c3:7b:02:52:01:44:50:48:8a:22:fa:d8:bc:4b:
3c:e3:fc:18:14:07:80:74:a2:ac:35:57:b0:59:96:
bc:60:ec:a5:5a:05:f2:d2:cd:5a:93:e8:0b:87:0b:
79:1b:ed:ef:f6:4d:0f:69:80:20:af:69:5c:86:ae:
bd:72:d6:7d:42:bb:eb:8d:f4:f3:c9:f6:1f:08:7a:
11:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2E:64:17:7B:49:A9:78:24:71:86:1C:38:9E:41:4A:05:04:E6:6C
X509v3 Authority Key Identifier:
keyid:8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:3e:a9:1a:39:6c:71:df:69:9f:cf:48:85:ec:5f:37:4a:ab:
98:a4:bf:53:03:99:1c:14:50:f9:b1:f5:4b:a4:dc:45:92:11:
83:d1:1d:5d:fe:b9:c6:ac:5a:33:96:0a:cf:ff:5b:74:41:44:
fe:37:2d:88:5d:6a:7d:50:68:1a:e3:b2:f3:0b:25:c3:c8:70:
f8:8e:2f:a7:b4:07:8d:77:10:40:67:b3:63:5c:08:62:05:fc:
59:de:9b:5c:31:46:0d:e3:c9:62:4d:86:24:e1:5d:48:a6:57:
c7:26:b3:0d:79:6f:9a:4a:b5:cf:bf:65:22:bb:41:0a:de:7b:
c9:90:74:b8:38:e0:f3:7d:0c:64:d3:ed:90:10:28:7c:8a:f4:
98:01:8b:9e:bf:44:f9:48:0a:56:43:f1:95:e6:7f:78:18:ec:
c5:0d:36:c2:dd:95:bb:71:11:ab:7d:ae:80:36:6a:69:12:2c:
19:f7:f4:56:37:8e:6a:89:71:e7:28:58:83:e6:22:12:78:1f:
4b:fa:f9:7b:58:b8:1e:44:ef:35:f2:31:79:ff:96:1a:a5:61:
b9:90:a1:71:49:36:b2:f6:24:39:86:3e:15:60:06:21:08:c8:
44:9d:64:b4:b0:3b:42:8e:bc:a8:52:00:23:2d:36:97:fb:8a:
47:89:67:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:08:23 2025 by rpki-client