Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
File: KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft (raw, json)
Hash identifier: PFTAAugBSoDMEyPgqaPONreI+7CVD0VInGcs4AwgWOc=
Subject key identifier: 0D:E0:2C:3F:E4:65:09:E0:C3:08:4A:7F:CE:63:E9:84:22:C5:4A:4E
Authority key identifier: 2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
Certificate issuer: /CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Certificate serial: 0194C507C92BF7FC831A9C6FD9944CF9BCBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
Manifest number: 0D3A
Signing time: Sun 02 Feb 2025 05:00:09 +0000
Manifest this update: Sun 02 Feb 2025 05:00:09 +0000
Manifest next update: Mon 03 Feb 2025 05:00:09 +0000
Files and hashes: 1: KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl (hash: xJbcZKJr3ydAdxoMLWU7LbvXRKVt1lB0hlgdniWwdhs=)
2: UZvnE-CaTB9qoHVdVXMgB-LiNEM.roa (hash: Ycg6B0Rffq0DfziTHdPyE76c/wB4R/dWXA7Fjbacvbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:c9:2b:f7:fc:83:1a:9c:6f:d9:94:4c:f9:bc:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Validity
Not Before: Feb 2 05:00:09 2025 GMT
Not After : Feb 3 05:00:09 2025 GMT
Subject: CN=0de02c3fe46509e0c3084a7fce63e98422c54a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b6:84:e8:ca:df:40:6e:bf:b1:e3:ab:c1:e0:
33:7e:62:30:6a:46:46:46:0a:4a:b0:69:89:4e:28:
df:08:d6:c0:41:6f:ed:fa:56:f8:d2:de:69:d0:e9:
d3:fa:d0:58:ae:4e:ea:e9:07:34:43:27:c4:00:e7:
8e:46:97:04:1a:19:4a:c5:66:19:41:e9:d5:3e:72:
28:a5:3e:8b:f0:96:06:c2:67:e5:11:07:0a:01:e0:
69:95:34:6f:aa:4f:5c:09:2c:1c:23:90:b4:ff:d9:
cf:46:16:cc:2d:25:1f:60:6d:44:d1:7b:c2:90:6b:
9a:b3:94:ec:8f:1c:1c:ad:14:ee:3f:3a:c3:f2:d5:
5d:44:48:8c:42:e6:d9:6a:be:07:3b:a7:c5:ef:31:
bf:a9:c4:59:24:2b:68:07:1d:b8:c7:00:b3:39:18:
c3:98:4e:62:4d:5c:64:69:a7:29:38:ec:bb:67:0f:
22:aa:3c:a5:c3:5d:07:b4:d3:b3:bb:db:6f:c6:d9:
b9:05:78:9b:61:92:20:43:e1:df:6a:d8:e3:f4:b4:
ae:f0:ee:70:f0:23:3c:93:57:0e:f3:a1:ff:ad:41:
de:c4:c3:02:55:8f:72:72:64:09:b9:0f:2a:7c:e2:
69:3f:6c:e4:68:13:24:79:c3:e1:01:aa:72:bb:4b:
7c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E0:2C:3F:E4:65:09:E0:C3:08:4A:7F:CE:63:E9:84:22:C5:4A:4E
X509v3 Authority Key Identifier:
keyid:2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f0:89:b9:0f:e6:dd:3e:2c:91:97:1f:0b:2a:1f:c6:4b:12:
11:b6:8b:b5:aa:38:6d:38:6a:ea:9f:b7:30:b5:80:4a:06:a5:
db:d7:9d:da:ae:6e:aa:ee:27:b3:a9:95:5e:8e:59:8d:61:5c:
2e:92:d8:56:6c:d5:9b:ac:5b:9a:29:a8:84:67:9d:f4:44:f0:
01:a1:02:f5:63:0e:44:5a:bd:8a:3b:8a:9a:be:7f:86:ff:6a:
ec:f8:8a:15:5f:f5:d7:ff:f0:cb:c0:f8:88:6c:32:01:dd:e2:
4c:a4:20:87:9e:2d:56:3e:d8:b7:57:4a:7f:83:83:33:72:ef:
25:96:50:f2:40:eb:e1:0f:da:fa:0c:6d:a3:14:bc:67:4f:e1:
d7:72:d9:1c:df:6c:8b:57:00:1c:a4:1f:6f:9c:66:87:54:18:
5b:7d:bc:8b:bf:12:02:db:ce:ff:9b:ee:74:e4:39:bf:e6:48:
a0:fd:0e:77:0c:f1:f7:00:da:90:5f:73:40:e1:2b:69:2b:94:
22:c7:cc:e0:a0:40:d6:ae:81:28:dd:51:3c:29:d0:04:c4:98:
f1:d7:4c:77:91:6b:cb:c5:8d:f9:8c:a7:a6:63:b7:33:30:45:
9f:e9:bd:d9:2b:de:a8:3a:ea:ac:0e:4d:70:15:3a:60:25:15:
11:cf:26:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:05:59 2025 by rpki-client