Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
File: KslDUX9eO3R-dTAyB4mgNES0ORI.mft (raw, json)
Hash identifier: akFWJhgTJPF9SqWHtyZuPyc1VVFJ+Hqcrl2GC2V8xkA=
Subject key identifier: 28:0D:6E:87:1B:A2:C3:C0:82:5C:D0:21:AF:AB:50:2A:E9:D6:EE:29
Authority key identifier: 2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
Certificate issuer: /CN=2ac943517f5e3b747e7530320789a03444b43912
Certificate serial: 0194C4D0DD35950E3C2E789EAE0AD82EE68E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
Manifest number: 0D1B
Signing time: Sun 02 Feb 2025 04:00:09 +0000
Manifest this update: Sun 02 Feb 2025 04:00:09 +0000
Manifest next update: Mon 03 Feb 2025 04:00:09 +0000
Files and hashes: 1: 9MozB7L4Set7tNqN83WEH4oSTdk.roa (hash: kJHNE/MlmNWFKujPeHu4+QOZo4UmV5tDMpJ/m8T23WE=)
2: KslDUX9eO3R-dTAyB4mgNES0ORI.crl (hash: Wku+XRvwZYGKdtGjcU7dkKJlplsSBaK2hkcsllB+PhA=)
3: uVYVNQRzsDPwMzraGWOMobAeRZU.roa (hash: LlKkw85Oa6CIOC62S9TZpd9ZLNUlHcAGh3rwRjg40H0=)
4: wXKkmEzVnT6wH-e4RUZ5ISziflM.roa (hash: 0ibg6oISPGaXyJMIkBYpRfjFyr2Dyc5Kyu9O/zaq9rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d0:dd:35:95:0e:3c:2e:78:9e:ae:0a:d8:2e:e6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac943517f5e3b747e7530320789a03444b43912
Validity
Not Before: Feb 2 04:00:09 2025 GMT
Not After : Feb 3 04:00:09 2025 GMT
Subject: CN=280d6e871ba2c3c0825cd021afab502ae9d6ee29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:47:62:37:19:99:4f:5d:2c:42:fa:4c:36:80:
5a:b8:ed:98:00:5c:71:b6:54:52:b5:af:47:bc:f6:
c6:cb:e4:cd:34:a1:f6:b0:b7:6d:d2:c0:b3:90:c3:
46:d9:3d:1c:0f:91:0b:b5:47:94:9c:66:e7:31:f4:
2f:44:69:35:a6:7f:18:62:47:98:f5:31:22:fd:97:
76:c0:a3:51:0b:1c:8a:44:85:3f:2e:31:ec:f0:ac:
cc:1c:f7:c0:28:47:26:4a:35:1f:5d:ec:34:f9:35:
41:3a:d6:96:95:31:93:cb:28:d7:3f:b3:b2:6e:b5:
92:67:f4:de:49:0b:0f:1f:ef:b1:2d:ae:8e:45:a4:
fc:d9:66:77:bd:60:32:b0:4c:84:8e:31:4d:7a:9c:
51:ec:36:00:1a:06:b0:1e:a2:8a:6d:e2:0a:a7:bb:
fe:35:d6:ad:7d:c4:d0:d7:3e:9a:d7:3d:fa:6e:12:
68:1f:f2:45:6d:92:35:02:7e:f8:75:eb:51:ac:49:
66:1d:41:ba:64:ff:ae:b7:94:f6:f3:a8:eb:c3:a6:
33:71:fc:12:4b:62:a1:d5:ae:db:ac:92:6e:4e:80:
46:82:22:f4:de:a1:a5:98:3b:03:b5:8b:f2:7e:8c:
dc:83:63:ad:30:f8:19:8e:38:22:7f:34:fb:22:14:
c8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0D:6E:87:1B:A2:C3:C0:82:5C:D0:21:AF:AB:50:2A:E9:D6:EE:29
X509v3 Authority Key Identifier:
keyid:2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:15:2d:aa:60:e8:82:68:1e:77:14:cb:47:30:bb:fd:ca:02:
2b:35:7c:ac:22:52:8a:04:22:6b:63:24:b9:5a:bf:b2:dc:1e:
bd:5c:1c:44:cc:17:dd:8e:86:26:35:e0:bf:89:e1:88:2e:48:
d1:c0:99:15:72:b4:b5:e7:8e:cd:1b:1e:2f:e3:c8:a7:b8:f1:
54:d8:07:88:e6:8e:39:5a:14:22:40:8c:70:e8:2f:4c:1a:2b:
f4:cb:45:9d:ff:62:de:dc:9c:c6:b4:d6:4a:e0:9e:46:cf:ef:
35:70:f7:d2:64:49:a9:d4:01:7f:22:24:6f:3b:4d:9a:d5:8f:
ca:52:4b:07:7b:b9:9b:af:d4:6d:94:32:18:14:ff:de:d3:94:
91:8e:da:8f:f9:c6:7c:c0:71:7e:76:07:7b:fa:59:16:32:87:
d2:0e:0c:1d:64:81:8c:1a:d9:bc:7c:d0:84:db:b5:22:0d:d8:
74:54:0a:03:97:24:ff:74:7f:cf:2a:20:3d:88:b1:50:84:86:
70:58:91:56:a6:e7:d1:ae:f1:47:87:71:4c:c5:d6:4c:81:f5:
a0:79:87:71:01:44:ac:5d:9f:f9:e6:0a:46:fc:df:be:08:da:
ec:83:cc:2e:32:a6:b8:a2:05:4c:6c:ae:cf:43:99:f4:ee:70:
1f:94:26:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:48:17 2025 by rpki-client