Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
File: kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft (raw, json)
Hash identifier: ArSuEpWnAPeBM31QjLxNNgsjGqXL+LJ2RlZ696RCZ2M=
Subject key identifier: 61:E6:CF:90:60:8D:EE:C2:2E:1C:CC:87:25:B5:F0:B5:9A:72:F5:E8
Authority key identifier: 91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E
Certificate issuer: /CN=91cd4c6c1260fc9a7c894bf6abe77a6eecfec06e
Certificate serial: 0194BAF251164CAB85707F49C5B3E9D1D1E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
Manifest number: 0FAC
Signing time: Fri 31 Jan 2025 06:00:29 +0000
Manifest this update: Fri 31 Jan 2025 06:00:29 +0000
Manifest next update: Sat 01 Feb 2025 06:00:29 +0000
Files and hashes: 1: 7onO-XhdJCc_IRQIQVCJn8u-1wE.roa (hash: sTU2wUb7RHNn6n+c6UyiV4vOHD7amsQkLEZ6q5B98dM=)
2: kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl (hash: pTOSC/OvfbI2IFm/BZ/X0Vp4y6yPxMa7puB7o/lviLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:51:16:4c:ab:85:70:7f:49:c5:b3:e9:d1:d1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91cd4c6c1260fc9a7c894bf6abe77a6eecfec06e
Validity
Not Before: Jan 31 06:00:29 2025 GMT
Not After : Feb 1 06:00:29 2025 GMT
Subject: CN=61e6cf90608deec22e1ccc8725b5f0b59a72f5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cd:a1:0d:c8:2b:08:9e:19:a9:e4:21:85:5a:
09:f9:fc:46:19:47:f2:a2:5e:7a:a3:1c:37:4a:5e:
b6:a7:46:ad:26:0b:e6:32:52:d7:a3:5c:ea:e4:4a:
fc:fe:f1:7f:a7:a4:89:2a:22:ee:5f:d5:3d:4b:f0:
9c:74:07:c8:4b:76:3a:a5:d5:57:49:4a:dd:99:44:
38:e6:be:60:8d:97:b4:a6:e1:b8:5b:7e:fd:f2:d8:
3c:2d:37:a9:89:60:a2:12:a0:74:db:70:fd:6c:b2:
d2:b1:95:66:11:fd:51:ab:92:01:9d:79:2d:d4:d7:
93:51:15:b7:a8:14:7a:45:e8:ef:6c:16:ed:00:30:
d9:bc:bd:fe:ae:34:66:19:97:6e:64:61:29:5d:5f:
b8:60:79:88:52:fb:f3:52:30:e8:9f:b5:b8:35:2d:
a2:70:94:0c:fc:98:d9:29:a5:98:ce:f1:4a:ec:72:
7a:92:e5:3a:70:0e:6f:c8:23:6d:86:fe:1c:15:29:
23:04:86:65:3a:c3:da:df:ff:c8:a8:10:7f:84:b4:
25:1d:b8:aa:98:88:c4:ad:57:91:df:05:4d:02:f8:
11:f7:94:7a:b2:6d:ad:24:e0:df:4e:5e:1c:73:7e:
16:c9:5a:87:ed:b7:04:b4:77:86:f1:4a:09:30:a6:
c3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E6:CF:90:60:8D:EE:C2:2E:1C:CC:87:25:B5:F0:B5:9A:72:F5:E8
X509v3 Authority Key Identifier:
keyid:91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:97:19:e5:9c:05:a3:57:43:a9:7a:b4:60:e8:a1:06:f3:66:
e9:b3:12:bf:bd:8f:b5:d6:b6:72:f1:b6:c6:9e:c7:e7:13:8c:
8a:38:9f:43:6d:85:20:11:41:b9:04:f6:ab:3d:17:e7:ce:81:
0d:12:f4:3d:38:d7:1a:c2:0d:8e:c2:7c:3c:ce:3b:7c:a9:0c:
43:b5:89:a7:d2:0f:c8:2d:e8:a0:b2:38:32:4d:63:6d:03:db:
0d:62:b9:5e:df:b9:12:d7:62:b7:0f:04:4f:e3:31:b2:01:2f:
19:bb:9c:a1:cd:bb:0f:5f:db:52:e6:5a:f8:3b:5b:4c:d0:af:
d3:58:1b:68:e0:8b:b5:5a:4c:f8:1e:6d:33:dd:a9:e3:cb:2d:
18:14:9c:1f:32:86:1c:34:05:73:89:1d:e7:a9:ad:5c:2d:e1:
3b:34:54:34:00:1c:a3:a9:b8:f0:36:f4:23:74:64:1e:9c:f4:
7f:5d:b8:83:6d:da:d1:b4:91:0a:cc:cc:48:c2:d9:cd:6d:4d:
84:a6:3f:14:d7:01:6d:c7:02:ec:1e:22:a0:27:81:cd:41:79:
29:fc:9b:7c:8d:a9:bc:ad:56:5f:b0:f7:b4:67:13:dd:07:9a:
b5:e0:32:f4:00:b6:87:d0:0a:b0:b2:46:df:f4:fe:6b:9c:82:
a2:cf:9c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:44 2025 by rpki-client on console-fra.rpki-client.org