Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
File: KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft (raw, json)
Hash identifier: nqx6yepwHKjmiJoeu7FXxAcj3Q6HmPL8N9Wla0WqKrg=
Subject key identifier: 4B:B9:10:24:E5:19:BF:8F:83:90:70:A8:57:7F:19:90:CC:E3:E3:62
Authority key identifier: 28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC
Certificate issuer: /CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac
Certificate serial: 0194BB2953AC1F7A39AF715EDDD20C752D2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 07:00:35 +0000
Manifest this update: Fri 31 Jan 2025 07:00:35 +0000
Manifest next update: Sat 01 Feb 2025 07:00:35 +0000
Files and hashes: 1: KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl (hash: 5y2NbOvDHKJ1v9SiI6FF5Ajbf0ZBvzW9ict7l9JExNg=)
2: uxMrGXP4FNtk4vhqO5cU5mQf3-A.roa (hash: hNIkM7+jAO3rAd67WrBtFJIrTsZ1lPQ5IhBNiYcTU/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:53:ac:1f:7a:39:af:71:5e:dd:d2:0c:75:2d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac
Validity
Not Before: Jan 31 07:00:35 2025 GMT
Not After : Feb 1 07:00:35 2025 GMT
Subject: CN=4bb91024e519bf8f839070a8577f1990cce3e362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:81:6b:79:64:87:d0:36:07:34:42:87:7e:
1e:a6:2e:55:ed:d1:77:9f:9e:05:02:12:65:8b:ca:
af:41:88:c2:ba:36:1b:08:b7:93:52:c1:a6:e8:46:
8a:f0:f4:7c:2a:ea:ff:56:1c:8f:3a:08:74:d6:85:
7f:48:32:ae:c9:f2:e7:0d:eb:e3:8f:bb:17:bc:56:
81:94:9d:69:da:fc:4e:58:cc:8f:aa:1b:be:ee:ac:
67:5c:83:d5:8b:d1:09:63:fe:c0:34:56:ac:d0:4b:
36:5c:ea:da:14:be:d8:bd:ec:46:0f:b1:09:a4:ef:
2a:67:32:0c:99:d7:fa:57:be:61:57:a7:a6:29:21:
57:11:05:e5:a5:e1:8b:31:db:bd:db:3e:6c:1e:16:
d7:c9:2b:4c:37:2a:27:f4:2d:59:16:e4:00:39:a7:
e9:1b:b9:6d:56:77:c8:bc:29:62:2b:cf:27:77:b5:
8e:95:c2:40:64:b4:82:46:89:04:cd:fb:d1:24:eb:
a2:68:72:f9:f8:6e:3d:22:89:c5:79:98:51:3c:b9:
17:a5:da:87:31:b5:49:4b:12:3f:76:27:58:29:b9:
12:84:19:6a:b2:df:5e:27:33:51:1a:ae:6e:53:81:
64:99:cc:91:c0:a6:6f:c7:70:26:f8:a9:9c:70:77:
96:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B9:10:24:E5:19:BF:8F:83:90:70:A8:57:7F:19:90:CC:E3:E3:62
X509v3 Authority Key Identifier:
keyid:28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:45:27:67:69:93:24:b2:c9:29:67:fd:d6:eb:15:02:cc:83:
a3:54:60:75:cf:e2:b4:51:8e:42:97:2b:ae:a1:a0:02:6a:ec:
52:b9:b1:ff:5b:24:14:da:23:89:73:f7:3a:4b:53:92:7d:5e:
33:2b:b6:5f:4a:0b:bf:09:b2:33:0a:03:1d:d4:fd:9f:3c:cb:
86:06:80:44:13:43:a0:26:14:df:20:6a:45:d5:94:4e:88:fb:
db:fe:bd:01:05:63:07:42:b6:6a:03:1c:f3:e2:e9:44:66:7a:
5d:61:7f:39:ac:36:3d:04:4d:08:a5:3f:e1:32:0f:33:42:84:
2f:1c:97:c7:96:24:47:e0:b8:30:e7:1e:9d:4a:8d:85:d9:94:
dd:2e:a3:37:e1:4b:09:bc:0f:5c:76:8a:5d:eb:d2:42:70:6b:
9d:1a:3a:3e:e9:05:36:21:e3:83:e8:10:d2:f4:7c:b0:32:96:
5c:6b:4e:16:07:ea:e9:cd:c4:96:96:c9:3b:b0:21:b7:ce:12:
4e:5d:53:c2:70:bf:1e:d8:9c:7a:78:1b:59:38:73:5b:31:01:
a6:e9:f9:33:35:b5:0a:3f:0b:f2:cb:e4:dc:3d:ed:56:f8:5e:
60:ee:75:83:38:5a:c2:99:cb:f3:f2:aa:56:5a:d7:7e:b9:16:
93:41:09:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:34 2025 by rpki-client on console-fra.rpki-client.org