Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
File: KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft (raw, json)
Hash identifier: ZxNzUbEQ35uE7KNg1bU5WRGNjFOvu0BW0CHB4EKPIUQ=
Subject key identifier: C7:C3:2E:F0:0D:FE:A3:F9:B5:70:87:34:E3:DC:C8:0F:B0:E8:D5:B4
Authority key identifier: 2A:36:9C:A9:BA:84:AD:84:7D:49:D3:1E:27:46:5F:AF:57:BF:28:E4
Certificate issuer: /CN=2a369ca9ba84ad847d49d31e27465faf57bf28e4
Certificate serial: 019510FE1DB578C96AFC4B3AE8514E794A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
Manifest number: 1454
Signing time: Sun 16 Feb 2025 23:00:44 +0000
Manifest this update: Sun 16 Feb 2025 23:00:44 +0000
Manifest next update: Mon 17 Feb 2025 23:00:44 +0000
Files and hashes: 1: AAnX94FZ-tQzXcJk_elGxuLR8aQ.roa (hash: D5KLLlx/C1ALQLS5LYzAlXJyxWisqcBsxXVALk1wu4g=)
2: KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl (hash: 9fwMeXDMb201etRZV/eYA8G6UnEkLdbEGUL3TXlgf6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:1d:b5:78:c9:6a:fc:4b:3a:e8:51:4e:79:4a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a369ca9ba84ad847d49d31e27465faf57bf28e4
Validity
Not Before: Feb 16 23:00:44 2025 GMT
Not After : Feb 17 23:00:44 2025 GMT
Subject: CN=c7c32ef00dfea3f9b5708734e3dcc80fb0e8d5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8d:05:0d:a0:df:53:f3:df:ef:61:eb:ad:6c:
2a:55:ed:e1:75:b8:1b:73:b6:69:4e:34:85:bd:95:
b5:03:db:a8:33:54:15:26:1f:a0:be:af:98:40:a8:
3f:ed:54:98:b3:c8:a9:69:a4:ed:25:90:00:98:fd:
01:9a:61:58:23:eb:20:9b:b9:a5:84:2f:61:fe:a5:
87:48:ff:bf:89:c5:e5:e5:37:8e:80:51:2d:fa:63:
19:b6:4d:d1:0c:ad:94:19:85:0d:40:54:45:6a:1c:
a8:f1:45:0f:bd:73:ff:97:02:aa:4e:8c:a8:0c:d5:
64:f6:4f:0c:1a:02:8c:63:46:1c:0f:9f:50:45:21:
f9:60:fd:0c:85:ca:72:ce:04:03:ba:29:cc:e1:9d:
45:57:5a:7a:66:c3:8c:90:46:20:54:99:05:f5:8e:
00:63:86:6c:63:43:6f:a6:d5:ce:eb:bd:ab:bb:ed:
28:7a:94:6b:f6:84:47:5b:60:61:fc:f1:1a:80:d3:
48:56:4d:a1:15:c2:42:b1:19:64:74:74:9f:73:e5:
13:8a:5d:6f:a4:bd:aa:19:95:d3:46:94:06:22:25:
07:ba:4c:de:59:7d:0e:28:ea:73:e9:19:60:97:06:
21:ed:4e:38:58:61:8d:07:0a:18:c9:b2:05:eb:fe:
2a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C3:2E:F0:0D:FE:A3:F9:B5:70:87:34:E3:DC:C8:0F:B0:E8:D5:B4
X509v3 Authority Key Identifier:
keyid:2A:36:9C:A9:BA:84:AD:84:7D:49:D3:1E:27:46:5F:AF:57:BF:28:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b3:55:7f:b9:b9:88:eb:4d:43:1c:20:19:0a:26:39:70:8e:
02:1f:f5:32:27:bf:1a:84:fb:20:35:a7:f0:43:01:4c:1a:a4:
22:a4:93:95:38:d9:c1:d4:5e:97:58:a7:6b:26:63:e2:fc:e8:
04:ed:bf:bf:63:98:f0:97:4b:53:b5:0c:0c:ee:ea:b9:13:23:
0d:ff:ff:5c:48:d6:25:cf:e0:25:d6:d7:45:a1:77:2d:df:98:
f5:04:ea:07:08:c7:08:da:95:5e:a3:d9:4e:11:e3:3b:53:16:
e6:01:2f:c5:c1:c4:3d:4b:01:13:80:89:14:62:1f:2b:d0:97:
a8:ec:3a:85:dd:0a:93:3d:23:2d:d0:a5:73:5c:1c:20:2e:92:
b9:4c:94:fa:82:27:fb:62:67:9b:81:9c:ad:7b:7a:f0:42:b4:
9f:b4:2f:6b:7b:17:88:3f:88:99:de:95:00:2d:dc:4b:f1:f6:
b6:a5:96:89:24:21:de:67:87:1c:56:0a:d8:53:78:33:42:7f:
8e:83:4a:b7:95:d3:7a:17:8b:8c:6c:e6:34:a4:bd:28:f3:f3:
d3:8c:60:41:54:0e:f8:0d:e7:64:a6:54:9f:90:3a:6e:40:3b:
22:4e:6e:9c:bc:18:af:1d:50:2a:a9:b4:3f:93:e1:d5:c5:51:
3c:d6:a7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:44 2025 by rpki-client