Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
File: kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft (raw, json)
Hash identifier: LO5iCyxJcFqjhDUsCh9mO2V9l+UudHDGJMYOBz/FFgc=
Subject key identifier: 98:09:19:D7:8B:0C:DA:4B:40:EB:E1:C8:8E:B9:F3:98:57:75:A9:9C
Authority key identifier: 92:EC:29:54:76:CA:1D:93:4D:B0:4D:00:24:4F:C5:07:9B:9C:97:48
Certificate issuer: /CN=92ec295476ca1d934db04d00244fc5079b9c9748
Certificate serial: 0194BABBC43DA42AFE4F59C8F494FDC58DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
Manifest number: 103A
Signing time: Fri 31 Jan 2025 05:00:55 +0000
Manifest this update: Fri 31 Jan 2025 05:00:55 +0000
Manifest next update: Sat 01 Feb 2025 05:00:55 +0000
Files and hashes: 1: kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl (hash: YYB1EgIwYr1ojAtdArJyBszFieT7g81/NTmQxEoQW1Y=)
2: sZ85FeVfKS3RqKqG5NUDvn--qlo.roa (hash: gTaYc3X+G3Jkjg5kUdF0n9TPsOguK/WjYif95eZGzOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:c4:3d:a4:2a:fe:4f:59:c8:f4:94:fd:c5:8d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92ec295476ca1d934db04d00244fc5079b9c9748
Validity
Not Before: Jan 31 05:00:55 2025 GMT
Not After : Feb 1 05:00:55 2025 GMT
Subject: CN=980919d78b0cda4b40ebe1c88eb9f3985775a99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f5:f7:39:75:b7:37:ff:3d:f6:22:4c:a4:01:
9b:16:4f:4e:46:e4:fe:41:e5:a4:d5:88:de:e4:74:
7d:69:8e:b4:bd:c8:4b:ae:ca:f7:a2:99:19:dc:65:
dd:85:79:d1:cd:e9:ad:99:66:97:76:28:b6:66:ce:
b2:6a:c4:68:f9:0b:87:75:9b:21:c4:db:0b:1c:98:
b9:bd:2c:e0:57:73:6c:8f:a6:60:f3:18:05:5b:0d:
f3:9e:e6:a9:b3:2e:fd:28:8c:fa:d9:d5:2c:78:68:
82:a2:89:c1:42:6d:3e:72:fe:be:76:e1:bc:ae:dc:
77:95:5d:7b:0a:66:88:b4:eb:e4:1b:8e:ef:23:89:
c1:48:ef:58:58:74:96:f7:23:43:82:0b:4a:0b:7d:
53:72:ab:92:5e:15:2f:37:15:0e:b2:02:9d:80:b3:
97:b0:f5:f7:5d:4e:38:c3:21:be:ff:c8:3b:d9:04:
53:83:db:44:ba:64:65:af:e7:d7:f9:8a:c4:c2:91:
f1:47:3b:95:f4:2a:96:2b:07:24:b2:de:88:a7:0b:
e9:f5:cc:3f:d3:bc:9a:1f:ad:d7:59:2c:76:d7:3b:
4e:13:b2:90:61:f5:a0:86:e8:6d:fd:c3:bf:62:75:
1c:a4:78:9d:cb:3d:92:cf:ad:3d:a9:cf:73:cd:ca:
71:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:09:19:D7:8B:0C:DA:4B:40:EB:E1:C8:8E:B9:F3:98:57:75:A9:9C
X509v3 Authority Key Identifier:
keyid:92:EC:29:54:76:CA:1D:93:4D:B0:4D:00:24:4F:C5:07:9B:9C:97:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:42:aa:d8:f1:0c:61:15:08:5f:4f:72:74:d9:86:28:cb:02:
d5:23:4c:b2:29:85:b0:99:5b:66:a4:0b:db:9a:7b:c0:dc:01:
1b:12:55:2f:de:c1:fd:63:8b:68:13:28:24:ba:5a:6c:0b:f4:
3d:af:fa:71:54:ce:c9:d1:e3:33:75:d8:d8:af:5a:ed:aa:35:
20:7b:f6:85:37:a8:93:a6:37:2e:88:fa:5b:a9:ac:3f:32:f1:
3e:53:07:bd:95:b8:f9:4f:15:c2:47:c3:20:35:ef:97:66:15:
00:8c:55:2c:50:bd:f7:9c:e9:b1:70:2e:57:17:e4:80:88:99:
5d:d0:ed:85:bd:1c:e4:af:ab:0d:4c:64:08:a3:3b:6c:45:6e:
ce:41:2a:bf:e2:49:5f:23:2b:4a:a7:d9:6e:ac:c4:79:f2:5e:
97:f0:9d:9b:6f:0c:81:a0:fc:38:05:ab:10:67:43:25:2b:40:
22:c9:01:70:15:f4:14:61:9f:69:a5:31:04:cc:8e:fb:68:34:
7e:32:af:ed:ba:b4:8c:dd:46:4f:3e:64:85:b5:ca:a6:84:72:
fc:a2:37:37:5e:f3:22:8c:da:b6:c9:a8:e5:55:7c:fe:db:34:
c1:35:b3:7c:20:ee:6d:d2:52:af:6d:9a:5f:a8:dc:95:f6:0b:
cb:9d:b3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:44 2025 by rpki-client on console-fra.rpki-client.org