Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
File: KfzfdinE4A6QbxQ19EndEJ9BC2w.mft (raw, json)
Hash identifier: V2g2oQALpqc0Ff+sIbfb9PPgR5CWDsm9Ek6c6Y3d/lE=
Subject key identifier: 31:FA:A2:96:7E:A8:20:03:F6:8F:B8:7A:1E:BE:AC:51:E1:7C:9A:4F
Authority key identifier: 29:FC:DF:76:29:C4:E0:0E:90:6F:14:35:F4:49:DD:10:9F:41:0B:6C
Certificate issuer: /CN=29fcdf7629c4e00e906f1435f449dd109f410b6c
Certificate serial: 019510C75650C5E34D3FD81E5A90C11BB3AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
Manifest number: 1133
Signing time: Sun 16 Feb 2025 22:00:53 +0000
Manifest this update: Sun 16 Feb 2025 22:00:53 +0000
Manifest next update: Mon 17 Feb 2025 22:00:53 +0000
Files and hashes: 1: KfzfdinE4A6QbxQ19EndEJ9BC2w.crl (hash: W7IEeDdEqBrrUq1HwhVRvQzvDXmGfMOIPLxb7xelm/k=)
2: lKv_MpftntPeWIBfQDo4EvQnOCE.roa (hash: v96JNz5ZiqAWk2kEUzYU+IVtwUC39vYGpp2p54BaFZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:56:50:c5:e3:4d:3f:d8:1e:5a:90:c1:1b:b3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fcdf7629c4e00e906f1435f449dd109f410b6c
Validity
Not Before: Feb 16 22:00:53 2025 GMT
Not After : Feb 17 22:00:53 2025 GMT
Subject: CN=31faa2967ea82003f68fb87a1ebeac51e17c9a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c0:d4:d7:59:b1:b6:46:31:26:8d:a9:2a:23:
ce:9d:e7:d1:38:e6:28:cb:ae:6f:90:d6:f0:72:71:
65:43:e1:a9:41:a4:d2:f7:37:b7:00:dd:47:01:8a:
a5:3c:da:73:b5:7d:dc:84:89:9d:c5:5b:d8:6d:b3:
b2:90:27:4a:5f:33:06:c5:ff:f9:31:8c:9f:36:b9:
fd:ce:79:c9:9b:70:cd:a2:ff:3b:f6:40:6a:91:79:
3d:29:f6:bc:e7:62:c0:5b:d0:07:9a:7d:58:de:fc:
ce:75:ac:8b:e7:4a:77:05:01:86:5c:34:30:03:1e:
d8:52:82:b0:bb:df:eb:df:ef:cb:32:ec:6b:7b:d6:
fe:0e:db:65:fb:aa:77:e4:54:2a:b6:73:09:1e:e9:
19:06:08:f4:e2:a3:21:aa:ed:b5:dc:d8:15:22:e6:
ed:19:51:d8:28:77:11:9e:3b:42:32:16:14:ef:67:
b8:e6:32:1a:31:97:9f:4f:4f:e3:7d:68:dd:b9:7b:
76:25:78:6d:d7:55:18:48:52:11:01:f6:3c:a1:e8:
19:ee:96:ee:ff:2a:6a:87:e6:74:ef:78:8f:68:91:
52:d8:3e:d0:6d:e7:ed:8a:4b:d3:08:6f:87:e3:c6:
f7:85:95:ae:1c:64:4d:df:90:23:14:23:8a:ad:96:
f0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FA:A2:96:7E:A8:20:03:F6:8F:B8:7A:1E:BE:AC:51:E1:7C:9A:4F
X509v3 Authority Key Identifier:
keyid:29:FC:DF:76:29:C4:E0:0E:90:6F:14:35:F4:49:DD:10:9F:41:0B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:41:49:7c:03:d5:c5:bf:9a:00:b8:95:64:4d:d0:ee:e6:2a:
b2:84:d4:67:e0:91:7d:6e:78:d9:48:59:f2:ee:5d:52:52:55:
8c:44:05:2a:fb:42:0b:c7:e7:8b:c6:2d:0c:c6:e6:ee:6d:1d:
bb:2a:27:dc:56:16:a5:52:a0:7a:d3:c9:86:3e:db:f8:cc:e5:
50:f2:c5:56:e4:73:cd:39:f9:b6:11:53:67:c5:4f:92:d6:f6:
95:98:58:9a:e4:d2:70:80:2c:b5:2d:a6:22:34:cc:64:f6:07:
52:3a:03:7d:80:8f:aa:e1:d5:67:4d:a6:a6:f4:aa:c2:0a:eb:
64:4a:47:98:c1:9d:2a:f4:63:51:10:a2:34:34:b6:55:05:59:
d8:99:14:e2:2d:dd:53:62:bf:07:df:39:e0:fc:2a:00:a6:48:
84:fb:54:dc:b3:75:d6:e2:2a:0c:e3:e8:05:e6:1e:ef:f7:f0:
6d:06:4e:78:e6:83:a5:ae:ce:e4:92:19:07:2c:18:83:37:91:
ad:0d:b7:7e:dd:33:ff:49:ce:b3:71:19:f2:0d:91:b1:bc:d2:
fa:4f:34:2c:48:3d:76:76:e7:bf:66:91:ce:92:f0:15:20:b3:
31:66:9e:9f:f4:c8:e7:e9:1a:15:9a:68:50:d2:4e:ec:a8:50:
26:cd:76:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:17 2025 by rpki-client