Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
File: KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft (raw, json)
Hash identifier: F1oUF2SlgtkC6BoA73cTo8ina+gM3G6ckPlwzT0hGsg=
Subject key identifier: EC:95:20:91:82:24:EE:C3:3F:03:63:D6:07:8E:88:DB:09:FB:C3:9D
Authority key identifier: 2A:36:9C:A9:BA:84:AD:84:7D:49:D3:1E:27:46:5F:AF:57:BF:28:E4
Certificate issuer: /CN=2a369ca9ba84ad847d49d31e27465faf57bf28e4
Certificate serial: 01958C97564524EAC85D71A097D19EDAE30B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
Manifest number: 1494
Signing time: Wed 12 Mar 2025 23:01:23 +0000
Manifest this update: Wed 12 Mar 2025 23:01:23 +0000
Manifest next update: Thu 13 Mar 2025 23:01:23 +0000
Files and hashes: 1: AAnX94FZ-tQzXcJk_elGxuLR8aQ.roa (hash: D5KLLlx/C1ALQLS5LYzAlXJyxWisqcBsxXVALk1wu4g=)
2: KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl (hash: cRmYZy6SgibIIO63ccsDi4xTuHw90i45paRXrLegGUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:97:56:45:24:ea:c8:5d:71:a0:97:d1:9e:da:e3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a369ca9ba84ad847d49d31e27465faf57bf28e4
Validity
Not Before: Mar 12 23:01:23 2025 GMT
Not After : Mar 13 23:01:23 2025 GMT
Subject: CN=ec9520918224eec33f0363d6078e88db09fbc39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a3:fd:71:20:6d:ae:2d:e7:8e:88:8f:0f:73:
0e:8c:1a:34:a6:1e:87:6a:1a:8a:ef:89:3b:c1:bf:
57:61:43:bf:a9:c3:b9:46:ab:4c:80:54:3a:42:42:
f1:00:1a:fd:f4:ec:5e:16:2e:d9:c5:24:21:15:fa:
34:cb:49:8b:42:8f:5c:c6:3a:b2:f9:b7:f8:2f:fb:
53:ca:53:48:37:86:26:fd:b4:d5:34:1a:d8:12:0f:
3b:5d:81:21:a2:d1:9b:80:5a:61:f2:94:3d:fc:76:
a0:70:e4:43:9a:0e:66:c1:8c:bd:86:c8:a2:22:cd:
4c:58:da:ac:24:b6:7a:fd:1b:b4:49:46:10:12:83:
6b:24:33:1c:e0:e0:cd:ce:1a:a9:6d:57:a3:71:cc:
bb:d2:1f:0e:ac:6a:3a:c0:fb:fc:d7:d8:6c:c9:8b:
c6:70:ae:fe:d3:0e:39:a0:70:c9:c8:e9:58:75:3c:
07:cb:c3:2f:88:45:c1:0b:c4:97:40:82:74:e3:f7:
ff:a4:05:e5:d0:a2:6d:e9:7c:cf:29:22:24:fe:bf:
f6:a0:ad:82:ef:0b:25:fc:63:35:03:4f:0d:cb:c7:
f5:dd:4e:f3:66:27:53:1d:0c:65:be:ae:16:f8:16:
d9:06:23:76:7c:cf:c0:a9:96:8f:ec:3c:76:17:cc:
e9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:95:20:91:82:24:EE:C3:3F:03:63:D6:07:8E:88:DB:09:FB:C3:9D
X509v3 Authority Key Identifier:
keyid:2A:36:9C:A9:BA:84:AD:84:7D:49:D3:1E:27:46:5F:AF:57:BF:28:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:13:39:47:57:dc:14:da:10:34:5d:ad:b4:7b:a6:81:70:da:
1b:9b:3e:93:a1:10:ae:48:50:7e:2a:a4:8a:c9:58:70:f3:af:
25:52:2a:e0:62:b2:71:ef:03:8d:8e:51:7f:db:ab:35:21:6f:
e0:86:83:c0:29:e5:44:65:ba:c0:10:03:e7:8b:bc:b9:25:8a:
c0:65:25:92:95:12:fd:0c:c4:55:95:b8:a6:b0:a6:2c:ae:9d:
3d:3d:88:7d:52:d9:67:9e:f3:db:bf:73:4e:ff:b3:24:0f:1b:
1e:6e:10:71:ee:af:5c:db:c2:b7:d9:d1:e3:01:37:ff:5c:2e:
2e:41:43:03:0f:f6:f2:1e:96:14:41:47:c4:a3:cf:f3:c7:b7:
fb:1a:a6:fb:70:b0:2a:51:f3:61:46:ec:dd:35:d5:bb:f5:a0:
3d:75:98:ea:3d:7c:f5:fe:80:53:6b:dd:e3:bc:65:32:21:f9:
a1:41:a7:b5:f0:ad:0c:1d:cc:d5:70:32:e0:ad:0e:1a:ba:40:
53:00:e9:4f:29:5d:e1:dd:05:d4:f0:9d:97:fd:89:36:37:f5:
51:ec:02:e3:96:8b:d7:4c:ac:8b:dd:1d:44:fe:70:b9:72:62:
6f:85:7c:e4:fc:a7:41:bd:ca:f3:29:67:e7:a5:b9:01:2c:d0:
96:4f:4f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:08:08 2025 by rpki-client