Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
File: KqttsAX47NmhIcY2hYB17xMUXbA.mft (raw, json)
Hash identifier: ZBIbs4jTQozj45IDsRM5llXEH//K1cu8apEyi9HcQXI=
Subject key identifier: 6B:23:D3:D7:53:39:C8:69:32:C8:30:42:58:7B:33:A0:49:A7:56:4F
Authority key identifier: 2A:AB:6D:B0:05:F8:EC:D9:A1:21:C6:36:85:80:75:EF:13:14:5D:B0
Certificate issuer: /CN=2aab6db005f8ecd9a121c636858075ef13145db0
Certificate serial: 0194C3509CC18ED11584991E8D0C48D305CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
Manifest number: 0E29
Signing time: Sat 01 Feb 2025 21:00:27 +0000
Manifest this update: Sat 01 Feb 2025 21:00:27 +0000
Manifest next update: Sun 02 Feb 2025 21:00:27 +0000
Files and hashes: 1: KqttsAX47NmhIcY2hYB17xMUXbA.crl (hash: r+zDERWWqij0TGVECoDs0TGwOZErdLF1W6T7pu6Ca5w=)
2: NTwv9MrFUxU0rREuWqapE-DiajI.roa (hash: hq+d0ybPFOeu8D+rx2edFf/i0EP0Jbrx83E12M+26zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:9c:c1:8e:d1:15:84:99:1e:8d:0c:48:d3:05:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aab6db005f8ecd9a121c636858075ef13145db0
Validity
Not Before: Feb 1 21:00:27 2025 GMT
Not After : Feb 2 21:00:27 2025 GMT
Subject: CN=6b23d3d75339c86932c83042587b33a049a7564f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dd:8c:67:91:53:21:59:c5:ae:49:9a:d6:ef:
7a:cc:a1:a1:ae:20:e8:ed:a0:e1:64:f4:f6:fc:b0:
0e:71:30:4e:b2:74:02:5a:d8:d2:02:4c:e0:d5:bd:
14:bf:09:26:39:93:1b:36:73:1b:21:dc:7d:5c:ba:
96:8b:40:67:b5:9f:21:8e:63:1e:53:64:90:12:ca:
85:9f:d2:ce:a0:8f:4c:1c:17:37:cc:7e:c0:b3:b8:
83:31:b0:0a:7a:ca:a2:46:5d:5b:91:00:65:71:c3:
f8:3a:90:de:6d:20:0d:cb:0b:04:2c:f4:4d:22:7d:
46:6c:d6:5c:02:9a:20:31:78:52:96:55:27:63:ba:
b7:02:ae:b7:f0:6d:16:41:45:15:51:30:94:d8:0f:
99:5b:5e:89:a7:12:b0:41:cd:21:81:ef:a5:fb:d5:
3b:ae:51:37:df:8e:8c:40:34:bb:ed:e3:65:b0:02:
d2:5a:59:44:6f:49:d2:35:a5:a8:6b:19:36:c9:3b:
41:b1:8c:cb:6d:68:b8:76:e9:d4:c3:bd:bf:bc:5c:
1a:f6:8a:a8:e2:94:cf:90:6c:dc:2f:52:62:8b:74:
cd:c8:42:0b:c2:b4:7a:e7:a3:fa:53:3e:af:fc:82:
17:96:90:71:73:5c:12:2f:35:28:de:66:62:64:f0:
dd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:23:D3:D7:53:39:C8:69:32:C8:30:42:58:7B:33:A0:49:A7:56:4F
X509v3 Authority Key Identifier:
keyid:2A:AB:6D:B0:05:F8:EC:D9:A1:21:C6:36:85:80:75:EF:13:14:5D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:0f:c4:81:d2:5f:cd:e5:41:f2:22:5c:c0:a9:a7:6e:d6:45:
59:fb:0c:d4:26:09:ce:48:f0:17:05:3f:e8:c3:4c:d7:6f:9a:
fa:64:5c:e6:1c:7b:7f:e5:c3:bd:2d:34:6f:8c:88:ad:da:ef:
e1:30:c5:5c:d0:e3:c2:3d:69:41:21:e3:68:16:6f:2f:89:12:
b8:b4:ba:98:18:ad:89:44:5e:03:e1:fe:21:1a:4c:4a:71:b3:
e3:03:d6:9b:36:25:5f:fb:87:06:d7:b2:bf:ec:37:78:08:12:
80:90:e4:14:0a:b1:06:a4:2e:eb:c7:b5:af:0d:33:ef:de:4c:
a8:49:a0:40:e0:7a:b1:0a:41:b5:ee:2e:cb:4d:2a:f5:93:a9:
52:5f:72:7f:67:25:5a:e4:70:4c:e9:b0:f4:c3:cc:1a:00:9e:
bb:93:11:0a:4a:d7:85:ae:dc:bb:a9:7c:05:a6:1c:f8:21:70:
a2:93:0b:54:a5:02:72:09:64:7b:29:9d:12:d9:2e:b1:ba:ab:
39:08:66:09:95:44:28:41:5d:37:e7:b7:d5:19:cd:54:75:b8:
62:d5:e5:4e:30:7b:d3:b3:eb:d7:b7:50:84:bd:7e:46:90:4a:
cc:5b:20:4e:9d:8b:5a:56:93:38:e4:11:28:c8:78:74:95:a9:
06:80:33:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:55:38 2025 by rpki-client