Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
File: KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft (raw, json)
Hash identifier: CUiOVWyO3SjTEB48/ajQzs5jqL6OJPNVIAG5P1lACYI=
Subject key identifier: C1:CD:7D:71:19:7D:B3:BE:33:26:A9:93:87:0C:C3:20:03:86:66:B2
Authority key identifier: 29:4B:5B:BB:E1:74:67:47:6E:22:82:88:82:21:88:7D:F5:49:F4:B9
Certificate issuer: /CN=294b5bbbe17467476e2282888221887df549f4b9
Certificate serial: 0194C387E931FC2D4B9DF54A584B86B54256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
Manifest number: 13BF
Signing time: Sat 01 Feb 2025 22:00:51 +0000
Manifest this update: Sat 01 Feb 2025 22:00:51 +0000
Manifest next update: Sun 02 Feb 2025 22:00:51 +0000
Files and hashes: 1: HJiIfDvFo_sDLMJ5OE82mYFpyHQ.roa (hash: P459lfA3vTZFDKOU1GovB2qolTUez89TIhHTMpHxZQo=)
2: KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl (hash: POyOeIcyTjw9n4dUCQNWvEhGLhjxdNEtGBZzmrEniYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:e9:31:fc:2d:4b:9d:f5:4a:58:4b:86:b5:42:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294b5bbbe17467476e2282888221887df549f4b9
Validity
Not Before: Feb 1 22:00:51 2025 GMT
Not After : Feb 2 22:00:51 2025 GMT
Subject: CN=c1cd7d71197db3be3326a993870cc320038666b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:88:97:40:3f:a9:b7:17:d1:52:2a:3c:ee:2d:
91:e1:29:2d:46:27:ff:f2:11:f9:e0:61:97:d8:bc:
82:c8:02:d4:4d:cd:8b:6f:42:2f:a4:a9:c1:d4:db:
be:04:19:b2:31:57:f2:80:94:83:f9:32:1f:d8:08:
e9:3f:c4:96:de:18:e1:4e:1f:da:6e:40:e9:b0:df:
cb:b1:f1:89:8e:77:e8:cc:21:46:48:f2:fd:f2:e5:
e4:c8:41:c7:13:95:0d:8d:f7:1b:fb:f1:ad:f1:b9:
ec:c4:92:40:88:22:b9:3f:e1:84:3d:50:e5:6d:03:
92:f6:4d:4e:b5:eb:67:f3:cf:ef:29:6d:b6:9b:92:
f0:a0:62:fa:d0:9b:b5:6b:90:64:31:4f:f5:9b:a5:
ae:43:46:03:ae:d2:a2:b9:b0:07:84:f0:df:95:f9:
bb:9b:1b:a0:32:40:01:b7:2f:7e:7f:09:30:93:15:
4a:08:66:b1:2c:49:81:30:4c:f0:82:ab:f1:cb:ab:
8a:20:b1:9b:62:d7:91:d8:b4:89:ef:63:7e:7e:12:
40:ef:4b:3c:92:5f:f2:45:dd:5c:79:bf:f0:61:88:
e4:5c:af:2d:5f:dc:c4:11:1f:3b:02:e9:39:76:af:
ec:8f:92:b5:50:5b:fa:0b:e9:89:f5:50:12:27:e0:
a1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CD:7D:71:19:7D:B3:BE:33:26:A9:93:87:0C:C3:20:03:86:66:B2
X509v3 Authority Key Identifier:
keyid:29:4B:5B:BB:E1:74:67:47:6E:22:82:88:82:21:88:7D:F5:49:F4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c7:28:db:14:16:14:bf:f5:91:6c:5f:50:37:b0:d4:9f:ac:
35:90:57:c1:fc:85:26:6a:96:b9:09:17:c0:1a:40:e5:6f:99:
1c:7f:be:83:d5:fe:8f:75:e2:9e:36:48:a9:66:1e:22:28:f4:
3f:90:b7:02:88:b6:4c:17:2f:39:60:7c:13:97:07:2c:2e:c9:
d7:14:a2:22:e3:0a:3b:af:fa:dd:48:97:b5:24:51:1b:60:93:
50:d4:5e:f1:8d:bb:6c:e0:1e:33:ab:3b:b9:d9:6e:90:08:03:
84:36:de:1e:a4:ae:8c:23:7d:c6:5f:8e:4e:23:94:c7:70:44:
17:59:06:37:aa:e7:65:02:60:f5:c0:0a:6d:cf:16:37:57:29:
44:be:f4:fd:0c:29:9c:b0:47:bc:1e:7f:88:63:9e:03:29:28:
c1:1c:e3:0a:79:d6:d1:e3:47:e4:c5:f6:9e:e0:42:a3:5a:da:
e6:1f:14:53:45:d8:60:9e:6f:3f:77:a1:d7:19:95:ed:12:f7:
4d:93:24:f8:fc:da:4a:75:1f:6f:11:ca:5f:c9:34:63:25:53:
7f:16:da:c0:94:81:cc:e0:f4:5c:4b:36:97:0c:78:9e:49:81:
c2:00:aa:cc:eb:6c:3b:72:01:09:e8:29:d1:d5:f5:79:62:fb:
a7:66:0e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:50:37 2025 by rpki-client