Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
File: KoxYiVEmChGj771tgWvVb4Ly_DQ.mft (raw, json)
Hash identifier: 7h3qzPawGAmIe8NwAImrTyJUR77Ebv22/NVhSh7B5BA=
Subject key identifier: 49:E7:01:6E:BA:11:45:C5:8D:FF:F8:7F:2E:F0:64:8D:FE:82:A0:D1
Authority key identifier: 2A:8C:58:89:51:26:0A:11:A3:EF:BD:6D:81:6B:D5:6F:82:F2:FC:34
Certificate issuer: /CN=2a8c588951260a11a3efbd6d816bd56f82f2fc34
Certificate serial: 0194C42CC9B962DDD56A4BBBC368B4F1A28D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
Manifest number: 0BDA
Signing time: Sun 02 Feb 2025 01:00:57 +0000
Manifest this update: Sun 02 Feb 2025 01:00:57 +0000
Manifest next update: Mon 03 Feb 2025 01:00:57 +0000
Files and hashes: 1: KoxYiVEmChGj771tgWvVb4Ly_DQ.crl (hash: k03u7JcG0cr1iRjl+fg4bMgV75CUdVm9DLcacpxwYUc=)
2: bEf44I_katxftzRhRoOcb5k7xJw.roa (hash: B4D2C0R7a4GwUSt6VcyTIkYPBhevJsFHyCCfjO/vPIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:c9:b9:62:dd:d5:6a:4b:bb:c3:68:b4:f1:a2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a8c588951260a11a3efbd6d816bd56f82f2fc34
Validity
Not Before: Feb 2 01:00:57 2025 GMT
Not After : Feb 3 01:00:57 2025 GMT
Subject: CN=49e7016eba1145c58dfff87f2ef0648dfe82a0d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0d:f3:8f:a1:e2:26:34:f5:a4:53:8a:dc:25:
03:e9:c8:d7:0d:1c:78:01:f1:d6:d2:0a:78:32:f9:
84:1f:04:24:70:64:54:52:4e:f2:69:1b:62:e5:bd:
5b:c3:67:3a:ef:4a:8f:1b:96:5b:45:d7:bc:ec:75:
31:3b:82:79:88:6d:db:69:38:e0:3f:c0:b8:60:e5:
5f:f7:7f:53:15:69:a0:6b:db:52:76:69:c6:cb:dc:
d7:be:01:0e:65:ed:3a:b4:5e:4a:74:0b:40:b7:33:
92:dc:33:4f:be:80:d5:dd:fe:00:17:83:e0:f4:eb:
43:ff:60:6b:c7:d0:d6:63:23:dd:0f:da:42:46:ba:
e6:89:e0:2f:3c:7a:8a:0c:6d:62:56:10:19:e7:03:
09:e0:1f:da:06:27:02:c9:ae:57:11:6b:92:e5:ea:
aa:60:5e:5f:e5:84:59:e1:00:24:d9:5f:6a:cf:6f:
3e:ac:22:ac:12:bf:2a:01:2f:12:f4:4d:8a:08:bd:
0c:e3:88:a4:29:03:71:38:ea:51:f7:de:a0:62:22:
0d:c8:0a:e0:e2:9d:e4:4b:af:17:18:a1:e5:ef:d3:
49:6c:7c:d1:7b:5d:23:25:69:56:c5:4b:29:76:78:
55:32:21:e7:9a:4b:ed:06:9e:bc:83:4a:8a:c9:44:
54:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E7:01:6E:BA:11:45:C5:8D:FF:F8:7F:2E:F0:64:8D:FE:82:A0:D1
X509v3 Authority Key Identifier:
keyid:2A:8C:58:89:51:26:0A:11:A3:EF:BD:6D:81:6B:D5:6F:82:F2:FC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:27:02:3c:35:4e:86:a2:db:a8:3d:e1:74:0f:08:85:4c:c2:
96:c4:ad:6a:7b:79:31:72:af:31:64:54:bf:eb:09:59:89:5a:
93:53:4c:c7:7a:ee:ee:3c:2e:44:f9:32:4a:9a:15:f9:de:77:
0e:38:9a:7c:b7:cc:a8:6b:e4:52:1b:e1:0a:0f:e7:2f:43:1f:
15:5e:02:aa:c0:83:57:61:0f:a5:c3:33:7e:74:e1:27:ba:65:
44:61:b2:45:7e:d2:ef:9b:21:42:e0:ab:7f:a8:18:f1:47:c5:
10:ee:78:dc:ac:8e:0c:79:d5:4d:f2:45:38:a4:e3:a5:81:64:
c2:04:18:3b:54:e3:d7:8a:21:93:63:19:39:17:c7:ec:ad:10:
d9:dd:d8:d5:ca:e6:15:ac:8c:73:1f:8c:f3:cd:d4:ef:e6:83:
8d:3c:6a:a7:1f:fe:49:81:e9:3f:31:cc:f7:e6:f5:b8:3d:d6:
df:b0:e9:c9:2e:cd:34:92:09:cf:0c:7f:23:dc:03:25:71:ab:
ff:37:1f:d2:e7:52:2e:77:62:d2:ca:a9:de:49:65:f4:3f:f3:
b0:3d:bb:6a:0f:7b:74:c5:ce:55:c9:68:a8:fa:c9:01:29:18:
96:eb:e3:08:d2:7b:96:91:6a:71:9c:1d:71:24:9b:2c:35:56:
58:62:f8:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTELMm5Yt3Vaku7w2i08aKNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOGM1ODg5NTEyNjBhMTFhM2VmYmQ2ZDgxNmJkNTZmODJm
MmZjMzQwHhcNMjUwMjAyMDEwMDU3WhcNMjUwMjAzMDEwMDU3WjAzMTEwLwYDVQQD
Eyg0OWU3MDE2ZWJhMTE0NWM1OGRmZmY4N2YyZWYwNjQ4ZGZlODJhMGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw3zj6HiJjT1pFOK3CUD6cjXDRx4
AfHW0gp4MvmEHwQkcGRUUk7yaRti5b1bw2c670qPG5ZbRde87HUxO4J5iG3baTjg
P8C4YOVf939TFWmga9tSdmnGy9zXvgEOZe06tF5KdAtAtzOS3DNPvoDV3f4AF4Pg
9OtD/2Brx9DWYyPdD9pCRrrmieAvPHqKDG1iVhAZ5wMJ4B/aBicCya5XEWuS5eqq
YF5f5YRZ4QAk2V9qz28+rCKsEr8qAS8S9E2KCL0M44ikKQNxOOpR996gYiINyArg
4p3kS68XGKHl79NJbHzRe10jJWlWxUspdnhVMiHnmkvtBp68g0qKyURUswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnnAW66EUXFjf/4fy7wZI3+gqDRMB8GA1UdIwQY
MBaAFCqMWIlRJgoRo++9bYFr1W+C8vw0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS294WWlWRW1DaEdqNzcxdGdXdlZiNEx5X0RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi80ZGU0OWMtYWE1OC00NGFmLWIwMmEt
MWU4ZDIxOWY4N2FmLzEvS294WWlWRW1DaEdqNzcxdGdXdlZiNEx5X0RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi80ZGU0OWMtYWE1OC00NGFmLWIwMmEtMWU4ZDIxOWY4N2Fm
LzEvS294WWlWRW1DaEdqNzcxdGdXdlZiNEx5X0RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWScCPDVO
hqLbqD3hdA8IhUzClsStant5MXKvMWRUv+sJWYlak1NMx3ru7jwuRPkySpoV+d53
DjiafLfMqGvkUhvhCg/nL0MfFV4CqsCDV2EPpcMzfnThJ7plRGGyRX7S75shQuCr
f6gY8UfFEO543KyODHnVTfJFOKTjpYFkwgQYO1Tj14ohk2MZORfH7K0Q2d3Y1crm
FayMcx+M883U7+aDjTxqpx/+SYHpPzHM9+b1uD3W37DpyS7NNJIJzwx/I9wDJXGr
/zcf0udSLndi0sqp3kll9D/zsD27ag97dMXOVcloqPrJASkYluvjCNJ7lpFqcZwd
cSSbLDVWWGL4KA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:52:31 2025 by rpki-client