Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
File: knpH10d_JWifZNBks-yglkfozqI.mft (raw, json)
Hash identifier: 4V2wEVhykOsMUfwaibFk/u8n9xEcsrhd9Xk8l0D9kDw=
Subject key identifier: 43:83:E2:05:1E:43:6E:90:E9:F8:B7:2E:9D:50:A4:FA:03:0F:8E:86
Authority key identifier: 92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2
Certificate issuer: /CN=927a47d7477f25689f64d064b3eca09647e8cea2
Certificate serial: 0194C35105A64096078F5DB2C04730ECDA4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
Manifest number: 0F2C
Signing time: Sat 01 Feb 2025 21:00:54 +0000
Manifest this update: Sat 01 Feb 2025 21:00:54 +0000
Manifest next update: Sun 02 Feb 2025 21:00:54 +0000
Files and hashes: 1: Lb4_w3xo3b2R5NUCynuhYVfd8F0.roa (hash: InJIfmRDJ+fA/aUu2uO9nwQjhMlW3TmyfkS552qt2Xg=)
2: knpH10d_JWifZNBks-yglkfozqI.crl (hash: RPvjMzBiYUbup6DWbUDKVxlpjkcXwdri6c97NvINy5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:51:05:a6:40:96:07:8f:5d:b2:c0:47:30:ec:da:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927a47d7477f25689f64d064b3eca09647e8cea2
Validity
Not Before: Feb 1 21:00:54 2025 GMT
Not After : Feb 2 21:00:54 2025 GMT
Subject: CN=4383e2051e436e90e9f8b72e9d50a4fa030f8e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4e:f1:13:c7:31:51:97:4e:a6:21:48:c3:c4:
b6:44:72:09:df:fb:bc:ef:5d:20:a2:51:2e:b8:ac:
f6:07:52:60:c5:a9:0b:f6:a7:3f:d5:13:4f:1a:36:
be:68:64:36:73:b6:ec:39:33:3e:d1:d8:09:56:be:
44:02:51:eb:99:f4:f3:83:72:4e:c9:c7:87:15:17:
5a:93:36:95:63:dd:02:15:4b:40:50:7d:2f:c8:f1:
d2:0e:bd:92:db:5f:58:0a:f3:a7:1f:f1:09:c7:b4:
fd:a1:6c:85:55:d8:03:ab:07:b9:3d:f7:8c:cc:37:
96:41:89:06:09:4a:ff:4c:41:35:5d:25:4d:a0:b7:
64:c5:12:93:d1:c4:28:d9:27:f2:bd:bd:f5:a0:7e:
35:b6:73:9d:7c:0d:ce:25:8a:88:3f:e0:b7:c9:bb:
21:0e:62:fa:9e:61:e5:e7:b4:4d:09:1b:76:6f:c9:
d9:31:c5:29:d3:c9:1a:3f:e6:5a:02:37:1b:9b:09:
89:96:98:26:f6:f2:b4:8a:4c:c6:c2:09:7e:d9:75:
cc:f0:64:17:1d:43:56:d2:91:45:cc:1c:8b:d3:eb:
81:94:ea:e6:a4:1c:27:18:37:ed:63:14:78:0c:98:
8c:a3:5f:1b:58:ff:61:09:32:07:e5:07:e3:f9:ca:
dc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:83:E2:05:1E:43:6E:90:E9:F8:B7:2E:9D:50:A4:FA:03:0F:8E:86
X509v3 Authority Key Identifier:
keyid:92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:3e:ad:56:55:63:b9:88:3a:2a:9f:7b:9f:81:ed:4f:06:28:
46:90:3b:3e:c2:90:63:8d:5c:11:00:59:9a:3c:67:2a:81:4f:
10:64:19:5e:aa:3e:19:69:a1:1d:af:6b:98:19:35:f2:8f:8d:
68:b5:05:06:13:0f:21:31:e6:22:2a:6f:08:9e:e6:91:db:32:
6f:62:94:93:b7:5d:ef:7d:1a:98:22:bc:29:d0:c5:44:bd:b5:
ef:e0:4c:a2:f0:96:3f:fc:fa:4c:c4:ec:d6:a5:6c:10:7d:a6:
62:c8:54:cd:b2:07:4c:b4:01:0e:90:0d:aa:a9:18:1d:b8:69:
c2:87:11:d8:3f:f8:24:96:9e:1b:67:91:62:0c:f2:3a:c5:cf:
ae:1f:87:67:d3:6e:d1:aa:69:b9:9e:c6:05:be:e1:37:b1:c0:
82:66:56:7e:16:84:98:6e:49:0d:7f:c6:f5:be:62:07:bf:8e:
83:17:da:bf:59:0b:c1:81:f3:8c:68:3a:fb:d8:72:17:c9:18:
4e:3e:5a:99:55:eb:74:8f:1c:7c:f0:e5:7b:bd:29:1f:b5:f3:
cc:3b:ec:98:a9:fe:a7:d5:7f:9a:3d:86:74:a1:e7:c6:af:03:
6b:23:2c:6b:2c:4b:92:87:ec:a1:06:f4:60:b0:d2:dc:91:39:
80:5b:1d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:07:38 2025 by rpki-client