Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
File: kPeS6o__kECyzX8XBzbkLnSDp2c.mft (raw, json)
Hash identifier: qa3zYUgVlUn1RFH8Ihh2SdOgApudaO3MnCgmLmSvogg=
Subject key identifier: 37:F9:2E:8D:98:4B:14:52:BE:5D:16:AF:AE:ED:5F:0F:AE:07:AF:3E
Authority key identifier: 90:F7:92:EA:8F:FF:90:40:B2:CD:7F:17:07:36:E4:2E:74:83:A7:67
Certificate issuer: /CN=90f792ea8fff9040b2cd7f170736e42e7483a767
Certificate serial: 0194C463C7CA5FF66594EB83A2D2BB49D70A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
Manifest number: F4
Signing time: Sun 02 Feb 2025 02:01:00 +0000
Manifest this update: Sun 02 Feb 2025 02:01:00 +0000
Manifest next update: Mon 03 Feb 2025 02:01:00 +0000
Files and hashes: 1: R-CX4CB0hLo514CToPVhOwxreNk.roa (hash: uWvGHgIozdO3NKS0KfC+P7cEFWYQl8434I9zUzprdfA=)
2: kPeS6o__kECyzX8XBzbkLnSDp2c.crl (hash: ohxRhYd1TzukKi8MHjFjg4y6L3MtLDl73cnSfoOjCCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:c7:ca:5f:f6:65:94:eb:83:a2:d2:bb:49:d7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f792ea8fff9040b2cd7f170736e42e7483a767
Validity
Not Before: Feb 2 02:01:00 2025 GMT
Not After : Feb 3 02:01:00 2025 GMT
Subject: CN=37f92e8d984b1452be5d16afaeed5f0fae07af3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9b:e9:b3:1d:57:56:ed:00:59:1b:66:22:f8:
6d:d1:df:b0:b3:40:60:e4:29:dc:85:81:1d:f8:c7:
8d:82:7f:97:b5:06:49:1d:1a:b1:c7:34:52:b0:06:
8c:de:c9:97:88:0b:00:cd:af:5e:d4:ac:87:e6:3a:
e2:ab:ef:b0:41:5e:e5:3e:2f:c2:47:72:fd:cb:a1:
7c:b5:ae:c0:50:4f:6e:81:ee:a0:6c:fd:9e:23:5a:
50:ef:11:bb:22:8c:b7:98:ad:23:f8:ba:fd:80:a6:
38:09:1c:96:2b:89:d7:25:43:cc:69:0d:75:0e:19:
22:aa:10:ba:f1:2f:b1:70:50:1c:6f:7c:20:ff:c1:
81:f5:44:2c:0c:cc:30:79:8c:20:72:91:7a:56:cd:
16:bf:28:48:96:b7:a7:8d:ac:41:a2:e3:c1:47:e1:
cb:08:91:7c:11:13:fd:e2:61:f9:5c:97:f5:98:4f:
f1:25:1f:76:8a:1b:d1:54:65:69:c1:d7:b1:3b:f8:
d9:bc:7b:c0:df:0c:31:86:fb:da:00:fe:11:5d:8e:
3b:ff:ae:00:b1:e5:14:37:58:66:dd:94:a2:a4:14:
09:cc:7f:6f:59:2f:2d:06:c2:23:ca:71:5f:70:0c:
ff:42:76:c5:7d:1c:8d:1e:5d:19:89:c0:be:95:ff:
5d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F9:2E:8D:98:4B:14:52:BE:5D:16:AF:AE:ED:5F:0F:AE:07:AF:3E
X509v3 Authority Key Identifier:
keyid:90:F7:92:EA:8F:FF:90:40:B2:CD:7F:17:07:36:E4:2E:74:83:A7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:1e:c5:e6:8e:82:7c:5f:30:5e:42:a8:a6:4c:fb:9a:4c:0a:
09:6d:b1:c2:2e:32:ac:51:f9:2b:90:aa:f5:01:5f:0e:b5:c3:
f1:5b:54:08:80:9b:49:0f:c3:41:21:42:7f:ca:db:da:1f:ea:
71:f6:54:79:5f:32:dd:80:a0:91:66:16:ad:2d:0d:d1:63:b3:
11:24:cc:23:85:43:46:48:dd:c1:f5:cd:32:cb:dc:ed:02:7b:
83:4f:41:09:e7:22:90:ce:52:f9:61:dd:d9:bf:cd:38:89:fa:
c3:86:01:1b:93:96:7d:46:73:58:0d:bb:5e:3e:a1:07:36:76:
9e:b5:64:9d:d9:fe:07:b6:05:61:2f:db:73:0f:14:e4:5d:dc:
db:24:55:17:06:d4:34:c9:15:54:df:a5:7c:30:75:a9:b8:66:
f5:cf:f7:90:71:62:ed:d2:b4:48:43:f8:c9:4a:d3:01:43:23:
af:66:f1:f5:9a:b1:04:e3:f4:58:20:85:9a:a4:42:50:7c:94:
14:c0:56:06:17:ce:b4:18:8b:a3:e8:92:10:d6:62:ac:91:5a:
90:34:e6:86:a3:3e:e8:4f:1c:70:b9:bc:3c:d8:27:74:4d:a7:
66:57:36:45:fe:78:48:11:ae:7e:fe:98:0a:62:b6:a9:26:fb:
af:ee:6a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:44:26 2025 by rpki-client