Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
File: kaBxUIM4JgVRpV8B_QcI_fXggoc.mft (raw, json)
Hash identifier: Z6Swwn32rbntcAeU3QcvAoY5flSMASng7H6EQAx4zyU=
Subject key identifier: 98:E0:77:2D:BC:AE:BD:EA:F3:28:DE:C4:80:75:BE:0B:EE:6B:6D:B8
Authority key identifier: 91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87
Certificate issuer: /CN=91a071508338260551a55f01fd0708fdf5e08287
Certificate serial: 0194C4D14C151F12262FE9356F437E865620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
Manifest number: 1430
Signing time: Sun 02 Feb 2025 04:00:38 +0000
Manifest this update: Sun 02 Feb 2025 04:00:38 +0000
Manifest next update: Mon 03 Feb 2025 04:00:38 +0000
Files and hashes: 1: Cgt_gy7EMOYMV19k2tz2rtLd7TU.roa (hash: j2CPj0aVUdndtIwS2SsvRubF8DiJi7ArwXEuxy5F6uI=)
2: LtAL3K8AdfyisGKqq9Vjp_7EH0w.roa (hash: ExkUCXkAhlWeYSrTyMjTF0LGwM8Q8/UHTNY3ZJzGHYE=)
3: kaBxUIM4JgVRpV8B_QcI_fXggoc.crl (hash: /fTkJXr03W2InXOshWRB29NZxBVspZsinnyokC6Dg4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:4c:15:1f:12:26:2f:e9:35:6f:43:7e:86:56:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91a071508338260551a55f01fd0708fdf5e08287
Validity
Not Before: Feb 2 04:00:38 2025 GMT
Not After : Feb 3 04:00:38 2025 GMT
Subject: CN=98e0772dbcaebdeaf328dec48075be0bee6b6db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:51:68:25:6b:c2:4f:b1:cc:43:03:62:78:cc:
6e:d9:91:63:6a:60:0a:0d:f8:fd:0f:e6:d1:ac:a0:
6f:54:23:09:5f:33:63:88:91:58:cb:fa:c9:e9:c6:
e9:0a:78:d8:c4:9e:62:a7:16:f3:a7:40:b2:35:0b:
a5:cc:7f:4d:b0:e5:4d:20:d4:d7:f6:63:2a:13:3f:
48:44:1f:24:38:81:4e:23:5e:17:fc:aa:f6:83:c5:
06:07:1e:02:c7:33:d6:dd:16:a9:d4:2c:a3:d7:d6:
0d:ad:38:37:56:dd:c1:77:5a:83:9b:3e:95:5b:f6:
3d:ec:83:0d:43:97:e8:89:14:2b:5a:ad:d4:df:84:
4a:69:cd:7d:cf:a2:90:97:cb:fc:83:a9:3b:1a:48:
37:d0:6f:39:f1:5c:88:60:fc:86:be:e1:16:6d:7a:
0b:ef:ab:25:e9:64:2b:08:17:09:e5:18:11:59:2f:
11:c8:a3:9a:a2:21:d1:29:56:1e:7a:28:db:0f:5a:
8f:84:03:a7:2e:55:7f:02:5c:18:e2:fa:c6:0b:8e:
f5:15:a2:c8:22:1d:b0:a3:9c:6c:f1:bf:1f:f1:44:
9b:03:8f:fe:73:39:0e:7c:c7:9a:d9:f9:50:ef:0c:
0a:e2:08:2a:bf:ec:02:51:15:fd:d8:15:9f:01:98:
4b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E0:77:2D:BC:AE:BD:EA:F3:28:DE:C4:80:75:BE:0B:EE:6B:6D:B8
X509v3 Authority Key Identifier:
keyid:91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:83:6a:87:67:4c:31:65:dc:33:f9:7a:1e:3b:86:81:b1:98:
3b:9e:7a:c9:99:fd:3f:fe:48:3a:45:97:02:7d:d0:0e:c1:24:
9b:5f:96:fd:c5:3b:4b:e7:ef:6a:3d:d6:34:44:d4:32:ba:6c:
99:15:e1:06:cd:cc:3c:9e:d1:9e:23:10:1a:01:5b:54:02:d7:
cd:6b:ce:6d:cc:6c:2e:dc:82:82:fe:d1:1c:db:ad:43:73:c4:
07:62:4f:11:c7:45:d1:8b:cb:d5:75:bc:06:d5:ab:c6:ac:19:
c3:f7:3d:0c:2d:2e:45:41:a8:00:6a:9f:35:5b:fd:c5:de:e1:
d8:54:77:87:f7:77:2f:ea:99:88:32:de:87:a6:8d:38:21:35:
bc:e6:0a:10:34:63:25:cb:e5:c2:6c:5a:aa:cf:21:d7:5b:1f:
95:f0:c6:ef:82:59:d4:4c:44:dd:4f:ab:47:25:7b:62:99:40:
47:24:4a:08:00:0e:63:d8:1d:09:00:b2:d7:45:4e:f9:9b:2f:
39:93:58:5f:f7:6d:bd:17:c5:54:39:11:fd:d9:69:f7:f2:ce:
4a:02:ed:7d:a4:c3:52:43:16:29:cf:6e:46:b6:00:3c:a0:dd:
71:30:d5:63:7d:82:dc:22:01:57:f6:98:b7:ef:30:1b:68:f0:
52:b0:bf:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:58:29 2025 by rpki-client