Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
File: Kksu12XR1HipbYLxJgEen7dS_Ic.mft (raw, json)
Hash identifier: 03+NIj8UCbou3Jx+vWtpUpOJqqZ9Lwqy+t4m5OM1TxU=
Subject key identifier: 69:D6:73:75:1E:84:F8:33:DD:B4:E1:B4:BF:C5:22:F7:67:B9:AC:43
Authority key identifier: 2A:4B:2E:D7:65:D1:D4:78:A9:6D:82:F1:26:01:1E:9F:B7:52:FC:87
Certificate issuer: /CN=2a4b2ed765d1d478a96d82f126011e9fb752fc87
Certificate serial: 0194C4638407EB74B38453134375CEC4A2FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
Manifest number: 142A
Signing time: Sun 02 Feb 2025 02:00:43 +0000
Manifest this update: Sun 02 Feb 2025 02:00:43 +0000
Manifest next update: Mon 03 Feb 2025 02:00:43 +0000
Files and hashes: 1: Kksu12XR1HipbYLxJgEen7dS_Ic.crl (hash: m458D+md8UIZe+2I6jkk7SPx8erd86ZzRzBWx1rg/AU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:84:07:eb:74:b3:84:53:13:43:75:ce:c4:a2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4b2ed765d1d478a96d82f126011e9fb752fc87
Validity
Not Before: Feb 2 02:00:43 2025 GMT
Not After : Feb 3 02:00:43 2025 GMT
Subject: CN=69d673751e84f833ddb4e1b4bfc522f767b9ac43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a5:87:e1:06:88:fc:9d:52:95:08:d4:a4:b0:
26:fd:f0:f6:90:4d:90:f2:9f:73:fb:2f:b0:dd:e8:
d4:34:97:5c:6f:aa:9b:99:50:b4:d5:b3:9b:c5:ff:
e0:75:10:2d:3f:84:2e:c9:f8:82:54:9b:76:0a:e8:
4e:4c:5c:99:e3:cc:02:34:c9:20:ab:89:c7:37:51:
0c:c6:71:73:70:8b:94:fc:fa:bf:f6:d2:18:10:2b:
29:88:2c:2c:c2:24:df:8d:0d:5b:8e:27:c1:1c:d5:
15:db:ec:ed:37:b3:f3:ef:6b:42:b8:27:85:a7:17:
25:4e:cc:7e:59:38:1c:40:73:51:87:c3:6c:de:ab:
a3:f7:71:7f:c9:f4:60:d8:ce:95:5d:8d:d3:f2:dc:
dc:1c:d1:f4:97:4e:85:38:e5:35:de:4a:1f:7a:4f:
06:5c:0a:8f:8f:96:4d:27:f1:b2:99:9b:d2:92:e5:
d2:44:5b:dd:7a:99:da:49:c6:3a:a7:d2:2e:81:8f:
69:e7:58:4d:b1:1f:93:db:2b:46:74:a9:71:4c:f7:
38:fe:57:fa:38:e1:6d:c7:67:69:e0:ed:20:e6:b2:
d8:70:25:02:ed:da:c5:75:09:99:3c:74:e3:f2:a9:
0b:7f:68:9d:35:17:70:53:e9:06:11:25:40:fa:8a:
d5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D6:73:75:1E:84:F8:33:DD:B4:E1:B4:BF:C5:22:F7:67:B9:AC:43
X509v3 Authority Key Identifier:
keyid:2A:4B:2E:D7:65:D1:D4:78:A9:6D:82:F1:26:01:1E:9F:B7:52:FC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:52:89:a8:05:47:50:61:9e:5c:48:3f:1a:9c:38:80:00:c1:
1f:2b:14:16:d4:51:81:32:4d:4f:11:a0:cb:67:ef:08:85:4a:
cb:47:ae:0d:47:e0:13:d5:ef:5b:10:18:3a:27:ad:34:b0:71:
70:06:6a:f6:ad:c1:b2:9e:3e:04:da:ac:5d:78:ae:7b:8e:dc:
ff:8b:79:4a:e9:01:72:14:90:a6:2f:6f:1f:c8:05:a6:1c:1f:
8f:1a:36:d5:ac:10:60:f3:46:50:7d:c4:6a:60:4d:10:6e:46:
86:3c:eb:33:44:63:40:8f:c0:88:3b:6f:2e:dd:13:58:75:2f:
54:f4:fc:c9:2d:0c:3f:e2:f4:60:6a:b5:11:94:d8:fd:c0:d2:
3f:db:22:ba:6b:0f:fd:2b:69:ed:21:dd:71:42:33:99:ee:f3:
89:09:f6:50:ba:56:4d:40:89:35:56:60:8b:0a:62:30:ee:f6:
84:dc:58:cf:2d:cb:39:2a:af:79:02:fd:d8:ba:ca:cf:ad:fb:
dc:78:82:84:da:5e:5d:8b:97:ab:42:1a:a9:6b:e6:0f:5e:44:
12:5e:8f:14:cb:db:24:a7:ca:72:7f:ac:77:03:f5:af:0a:42:
eb:b5:3f:dd:0f:55:10:61:b6:6a:70:52:39:7d:25:f2:44:df:
ce:88:65:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTEY4QH63SzhFMTQ3XOxKL6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNGIyZWQ3NjVkMWQ0NzhhOTZkODJmMTI2MDExZTlmYjc1
MmZjODcwHhcNMjUwMjAyMDIwMDQzWhcNMjUwMjAzMDIwMDQzWjAzMTEwLwYDVQQD
Eyg2OWQ2NzM3NTFlODRmODMzZGRiNGUxYjRiZmM1MjJmNzY3YjlhYzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaWH4QaI/J1SlQjUpLAm/fD2kE2Q
8p9z+y+w3ejUNJdcb6qbmVC01bObxf/gdRAtP4QuyfiCVJt2CuhOTFyZ48wCNMkg
q4nHN1EMxnFzcIuU/Pq/9tIYECspiCwswiTfjQ1bjifBHNUV2+ztN7Pz72tCuCeF
pxclTsx+WTgcQHNRh8Ns3quj93F/yfRg2M6VXY3T8tzcHNH0l06FOOU13kofek8G
XAqPj5ZNJ/GymZvSkuXSRFvdepnaScY6p9IugY9p51hNsR+T2ytGdKlxTPc4/lf6
OOFtx2dp4O0g5rLYcCUC7drFdQmZPHTj8qkLf2idNRdwU+kGESVA+orVqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnWc3UehPgz3bThtL/FIvdnuaxDMB8GA1UdIwQY
MBaAFCpLLtdl0dR4qW2C8SYBHp+3UvyHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2tzdTEyWFIxSGlwYllMeEpnRWVuN2RTX0ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC80OWUwYjItMWUyYS00MzJhLWJhMTkt
MTE1OTg4ZDgxMjg5LzEvS2tzdTEyWFIxSGlwYllMeEpnRWVuN2RTX0ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC80OWUwYjItMWUyYS00MzJhLWJhMTktMTE1OTg4ZDgxMjg5
LzEvS2tzdTEyWFIxSGlwYllMeEpnRWVuN2RTX0ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1KJqAVH
UGGeXEg/Gpw4gADBHysUFtRRgTJNTxGgy2fvCIVKy0euDUfgE9XvWxAYOietNLBx
cAZq9q3Bsp4+BNqsXXiue47c/4t5SukBchSQpi9vH8gFphwfjxo21awQYPNGUH3E
amBNEG5GhjzrM0RjQI/AiDtvLt0TWHUvVPT8yS0MP+L0YGq1EZTY/cDSP9siumsP
/Stp7SHdcUIzme7ziQn2ULpWTUCJNVZgiwpiMO72hNxYzy3LOSqveQL92LrKz637
3HiChNpeXYuXq0IaqWvmD15EEl6PFMvbJKfKcn+sdwP1rwpC67U/3Q9VEGG2anBS
OX0l8kTfzohlhQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:06:38 2025 by rpki-client