Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
File: KKye3SQL_EUgzgvJskWWPSTiv-I.mft (raw, json)
Hash identifier: Ft58+SKZiMakoj8qnx+gzxYyAqiGKVmUwrE4EQDvXVw=
Subject key identifier: DC:18:B6:53:72:AA:7E:10:A8:2E:99:28:85:EE:B2:8E:62:E5:90:7A
Authority key identifier: 28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
Certificate issuer: /CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Certificate serial: 0194BABB3DD80B666B45E8EEA76F771F376D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
Manifest number: 117C
Signing time: Fri 31 Jan 2025 05:00:20 +0000
Manifest this update: Fri 31 Jan 2025 05:00:20 +0000
Manifest next update: Sat 01 Feb 2025 05:00:20 +0000
Files and hashes: 1: 7heC61NtQoMcpuhj_ZjE2RH5xUk.roa (hash: 9n2osY0Zh0YOvne11Off7803igcpZJUc8/cMI8UdihQ=)
2: KKye3SQL_EUgzgvJskWWPSTiv-I.crl (hash: oS/k+ipRfX7VUORcmPBF+SC32o5Jowxtm9JMrKjq7Dw=)
3: qu7vMGQcvRYv7s2ySlulG6L93rk.roa (hash: MEMNuLUG6QK5Jryxt/02AqlLZl7VyqgmTmooG82bGe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:3d:d8:0b:66:6b:45:e8:ee:a7:6f:77:1f:37:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Validity
Not Before: Jan 31 05:00:20 2025 GMT
Not After : Feb 1 05:00:20 2025 GMT
Subject: CN=dc18b65372aa7e10a82e992885eeb28e62e5907a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ea:43:df:36:69:67:2c:3c:bb:e2:6f:57:e4:
db:d8:a4:c9:d7:05:27:17:78:30:35:72:a8:16:73:
59:17:9c:5f:5d:a0:b1:6f:d7:31:fa:25:98:ec:f5:
38:05:19:d9:3d:60:d0:f4:fa:fb:5f:5f:dd:d5:3b:
8f:a3:a4:7e:40:d0:b2:7c:41:b1:d2:bc:72:f1:29:
f1:23:ac:ff:81:17:80:0d:fc:d2:82:bd:43:59:e3:
f3:be:c4:56:e8:3f:fd:b6:0f:bb:f2:60:0a:f0:ca:
43:ba:81:a1:3a:36:03:8e:0c:10:c2:b4:40:bb:2e:
b7:12:07:4b:7d:5b:56:dc:10:e4:ba:bf:49:e4:14:
dd:40:ac:ca:ea:8e:1a:58:b0:cd:0b:1f:e3:24:6e:
f0:85:b3:45:8b:9d:01:1e:a2:f4:48:a5:91:2a:8b:
68:cd:c6:32:dc:13:52:3c:30:0d:12:b3:3e:87:8a:
30:27:e4:ae:92:3a:d9:44:73:68:e2:42:07:b7:ce:
ba:a4:b3:04:ba:30:19:22:a9:1d:46:fc:cd:ec:a6:
23:b9:e4:4c:26:47:37:a5:0f:6c:a4:8d:b0:eb:1a:
e4:16:fc:e5:9c:70:07:14:b1:75:6b:d4:4c:e0:34:
55:f4:4c:03:56:fe:66:cf:12:95:17:84:79:33:02:
f5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:18:B6:53:72:AA:7E:10:A8:2E:99:28:85:EE:B2:8E:62:E5:90:7A
X509v3 Authority Key Identifier:
keyid:28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:fd:36:0f:d9:48:0e:ef:01:10:87:3a:3c:70:a7:08:b9:ed:
18:71:1f:39:2d:4b:40:b6:e1:97:1f:17:1f:40:85:04:2f:c9:
60:e0:6f:66:7a:78:b6:24:f5:a1:68:e8:f1:d4:a3:22:3c:93:
cd:a1:dd:7e:7c:aa:04:cd:38:14:1e:82:84:9d:bd:eb:e4:8e:
bd:ea:d3:c3:e8:c7:c9:90:5f:fc:32:d4:57:37:c5:83:6f:16:
5a:4b:04:33:ee:5c:66:3b:f8:81:5d:85:71:14:90:af:7f:fe:
8f:f7:f0:5c:88:61:4e:25:ba:14:64:6a:12:f8:d2:ad:4b:7e:
ca:dc:4f:a7:c7:6a:9d:ce:ff:ca:d9:10:1a:04:92:d9:71:64:
e2:2a:06:11:41:5a:7e:a5:ba:b9:56:87:39:b9:9d:32:7a:3a:
c0:de:bb:c6:29:7d:ea:bd:de:9b:9d:27:63:b8:fe:78:c8:f6:
ed:ed:87:97:2d:dd:17:b9:7e:b5:35:b7:9e:19:8e:7f:44:f2:
2c:e8:ce:ee:54:f1:6f:13:b9:86:34:2d:73:a9:fa:73:58:11:
08:0d:cb:b9:9c:ad:ef:ab:41:13:e8:92:2e:72:d5:c3:b9:3b:
7d:ae:a7:ad:b7:3c:77:47:ac:02:06:80:d0:0a:43:5e:1c:f5:
ab:29:59:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:55 2025 by rpki-client on console-fra.rpki-client.org