Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
File: KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft (raw, json)
Hash identifier: HOsrw5n381zfLPQWFdwAmytYund1xT8nUzPaQ9psicc=
Subject key identifier: D5:D6:8D:88:2E:F9:36:60:9D:9D:06:5E:5C:44:05:04:26:F0:38:91
Authority key identifier: 29:3F:2E:C7:4B:40:66:AC:67:A8:76:8D:8E:38:60:6E:FC:D6:40:13
Certificate issuer: /CN=293f2ec74b4066ac67a8768d8e38606efcd64013
Certificate serial: 0194BB29378D0BC04FA64D047AC125C08D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
Manifest number: 115F
Signing time: Fri 31 Jan 2025 07:00:27 +0000
Manifest this update: Fri 31 Jan 2025 07:00:27 +0000
Manifest next update: Sat 01 Feb 2025 07:00:27 +0000
Files and hashes: 1: KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl (hash: WoTLkdOQrT+3JC9eXHuEh0QhhTAk7CCZelAs3cJGwVw=)
2: Lc2MOeHrhJYACH3DTtJSFK-up5U.roa (hash: jsqmE6guApHIEUr5xOYbDvIqn7++Rg1hChyQTZ/F2xY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:37:8d:0b:c0:4f:a6:4d:04:7a:c1:25:c0:8d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293f2ec74b4066ac67a8768d8e38606efcd64013
Validity
Not Before: Jan 31 07:00:27 2025 GMT
Not After : Feb 1 07:00:27 2025 GMT
Subject: CN=d5d68d882ef936609d9d065e5c44050426f03891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:68:e4:11:86:01:fc:98:05:51:dd:8b:94:f1:
52:4b:b3:0b:4d:d5:f7:63:55:af:78:0e:97:71:99:
56:03:99:64:1b:81:25:42:da:8e:a0:e9:45:a7:6e:
e5:24:1a:45:e6:fc:c4:17:61:c3:fb:1a:71:d2:37:
28:22:11:cd:9f:22:e9:55:11:67:c6:58:2d:d7:e6:
76:75:0e:c5:ce:d5:05:06:15:25:a1:c7:5c:29:5a:
25:d4:2f:36:82:52:15:38:a3:9f:4f:72:39:19:23:
1b:75:41:65:c4:c5:ae:73:80:cc:dc:6d:e8:1d:10:
d0:ea:38:6c:4a:40:e5:5e:cc:6f:e9:c1:9f:2c:0d:
50:d0:d2:33:44:72:94:c2:bb:37:98:ba:37:3a:08:
19:dc:8d:3f:6c:12:8b:81:bd:b0:1d:bb:c9:00:2a:
b7:1d:95:16:41:b4:55:6d:97:a8:b7:49:91:0b:63:
1c:04:73:80:99:94:cc:2f:4f:8d:94:a9:a3:49:5f:
0b:7d:46:4c:91:bd:b8:71:9c:f7:1b:df:8d:ed:ff:
79:94:71:7d:0f:b4:08:c7:fc:bd:78:6e:0e:34:c9:
dd:e9:38:bd:f6:ef:a8:e8:bc:fc:19:cb:64:75:e2:
9f:ab:c3:18:9f:cc:ba:a3:07:c4:59:30:8f:0e:e6:
99:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D6:8D:88:2E:F9:36:60:9D:9D:06:5E:5C:44:05:04:26:F0:38:91
X509v3 Authority Key Identifier:
keyid:29:3F:2E:C7:4B:40:66:AC:67:A8:76:8D:8E:38:60:6E:FC:D6:40:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b8:56:df:fd:16:cb:43:53:54:ca:64:05:22:5a:83:d4:20:
ab:91:ef:54:93:39:1a:ac:31:c7:58:13:3d:d6:0c:ec:1b:40:
c1:32:0c:71:bd:7b:02:f4:99:22:a7:19:4e:28:25:d7:64:94:
67:ab:aa:a5:12:a3:2c:b5:d8:0d:61:c1:8d:dd:ab:e9:2d:32:
31:06:0b:36:9f:66:6f:e2:8c:f0:2f:2b:3a:81:e4:55:ad:dc:
7c:db:31:ce:b6:77:28:c8:6b:36:c5:7e:10:19:0c:23:0f:36:
7b:b2:f1:4b:e1:07:a8:1f:c6:45:df:f2:6f:2e:bb:9f:54:e2:
9a:54:9c:4d:90:9b:93:3f:76:37:8b:3d:4e:1c:72:f4:d3:c0:
84:17:86:a1:da:e0:4b:2a:c3:18:e0:2b:83:80:e2:8f:6c:8e:
66:4d:9f:42:94:da:28:9e:d2:b3:52:2b:3a:5e:7b:ef:c2:f5:
20:8f:32:04:c1:e5:e3:3a:7a:3c:c1:8a:23:df:e6:d8:60:77:
8c:13:dc:2b:13:98:83:12:6d:59:8e:6e:8e:08:6b:ad:9c:2b:
e3:b7:dc:12:88:4d:33:6a:fd:54:4b:c1:29:39:97:a7:a1:be:
11:17:8c:cd:fd:66:cc:c4:86:2a:fb:25:d4:ad:39:44:11:c4:
02:f6:6c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:02 2025 by rpki-client on console-fra.rpki-client.org