Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.mft
File: KFJhMsT89rTN_3QCVWAsz53LBC8.mft (raw, json)
Hash identifier: 7AQR1B3ssj5Y5iKftQYCYUD7iH6HvU2Oi/wD4V+9x1A=
Subject key identifier: 8F:0D:44:0B:C1:09:61:53:1C:40:FB:91:46:A3:A3:29:86:20:54:81
Authority key identifier: 28:52:61:32:C4:FC:F6:B4:CD:FF:74:02:55:60:2C:CF:9D:CB:04:2F
Certificate issuer: /CN=28526132c4fcf6b4cdff740255602ccf9dcb042f
Certificate serial: 0194BABB837A6AAE22B6655B343F3F3B4456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KFJhMsT89rTN_3QCVWAsz53LBC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 05:00:38 +0000
Manifest this update: Fri 31 Jan 2025 05:00:38 +0000
Manifest next update: Sat 01 Feb 2025 05:00:38 +0000
Files and hashes: 1: KFJhMsT89rTN_3QCVWAsz53LBC8.crl (hash: fXWQnEf0TIl9RjUm9Ge0It0oKxRS3q3YYDuGRTlGgbY=)
2: ZhfTjFWerubW-wXYF5uHcQImBi0.roa (hash: ETJfKBPXF5SBOehYcFURbCVWhceZCDiTMb0cVW0YkTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KFJhMsT89rTN_3QCVWAsz53LBC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:83:7a:6a:ae:22:b6:65:5b:34:3f:3f:3b:44:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28526132c4fcf6b4cdff740255602ccf9dcb042f
Validity
Not Before: Jan 31 05:00:38 2025 GMT
Not After : Feb 1 05:00:38 2025 GMT
Subject: CN=8f0d440bc10961531c40fb9146a3a32986205481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0e:cb:18:3a:55:d5:a2:73:a7:11:c7:28:aa:
1e:78:00:c8:24:ab:20:d2:f4:78:10:4c:6b:a4:0c:
9f:ed:86:f4:aa:1d:f8:71:b6:b6:fe:82:70:fe:e1:
13:ce:11:9b:e7:fe:6e:3a:70:08:b6:01:f9:1d:70:
96:1e:07:ef:25:92:ac:87:0f:9d:fc:0a:78:95:67:
dc:09:20:f9:12:87:06:b2:6a:34:cf:30:96:03:b2:
0f:20:95:d7:3b:a6:5b:c8:b5:eb:50:b9:de:eb:8d:
56:61:94:12:e2:38:97:8f:02:79:30:00:6e:bd:7d:
3b:b9:1b:f4:a8:d6:6a:96:a2:88:31:72:1c:4a:b2:
85:a4:c0:6b:c1:d8:ab:2f:a8:e3:c5:8f:d9:4e:5c:
fe:52:9d:60:03:1f:1d:3f:cc:1e:68:02:24:26:a9:
46:30:31:b6:96:ce:23:02:ac:d2:9a:a0:99:69:ef:
0b:80:9a:85:a5:48:a5:1b:80:c9:c3:21:6c:7b:6b:
7d:4a:09:e3:b3:6e:cd:22:74:19:13:93:e4:0f:a2:
97:ca:4d:e6:80:c3:26:6b:36:2b:c4:b1:32:9b:d7:
b2:8b:80:5a:95:d2:73:f0:ff:7f:64:9b:20:55:ad:
d0:ae:e0:bd:69:af:16:ca:14:4e:b9:59:58:ed:bd:
5f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0D:44:0B:C1:09:61:53:1C:40:FB:91:46:A3:A3:29:86:20:54:81
X509v3 Authority Key Identifier:
keyid:28:52:61:32:C4:FC:F6:B4:CD:FF:74:02:55:60:2C:CF:9D:CB:04:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KFJhMsT89rTN_3QCVWAsz53LBC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:67:5e:77:1e:64:65:0e:bb:f7:b0:d3:8a:96:8a:11:40:ef:
18:79:5c:03:aa:05:51:a4:a9:98:cf:45:e3:81:99:17:5d:be:
b0:d3:2f:d5:b5:8f:99:43:45:f8:be:2b:16:22:25:05:2b:8e:
ff:33:34:98:72:87:93:a1:83:30:a2:b7:02:17:20:51:5e:14:
a1:b8:61:82:d0:57:34:9f:7b:d6:91:20:1e:3f:a6:0e:d7:53:
de:c0:1c:f1:29:61:0b:8c:13:90:d3:b5:70:e4:1b:0d:52:16:
82:c1:a6:cc:a1:bb:ae:72:d5:71:ee:9f:15:37:43:87:6d:ec:
d4:3d:9a:8d:62:45:42:e1:68:d5:03:b4:90:6b:70:91:3c:be:
43:f4:87:bc:83:75:af:96:43:04:4f:50:d7:d2:03:af:d3:88:
55:d8:63:6f:8c:b5:f7:58:00:21:02:49:7a:52:6f:d7:00:51:
eb:b2:17:9f:41:3b:08:0a:1e:37:cf:13:9e:41:f5:41:12:27:
7b:da:7d:f8:08:de:23:3c:55:04:de:6a:37:91:d3:a3:f2:c6:
e7:a1:05:5a:84:a5:f9:4a:82:80:bc:df:5e:22:09:08:00:75:
a0:7f:b4:4e:75:84:d7:75:62:5a:01:98:ed:a2:36:0b:3d:c6:
56:40:08:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:54 2025 by rpki-client on console-fra.rpki-client.org