Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
File: kr0ltrnzz-B4X_1OXlQCgztKT40.mft (raw, json)
Hash identifier: 1e0eWMcxWw+/0dUNtM/34W9lWi1TcsVKd3j4YbQYtnA=
Subject key identifier: 6A:98:03:6F:CB:E9:6A:92:7D:C0:9F:BC:0D:62:5B:B5:03:9B:6B:AF
Authority key identifier: 92:BD:25:B6:B9:F3:CF:E0:78:5F:FD:4E:5E:54:02:83:3B:4A:4F:8D
Certificate issuer: /CN=92bd25b6b9f3cfe0785ffd4e5e5402833b4a4f8d
Certificate serial: 0194BB6043A0D4F0F54E0268283798F4E8C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 08:00:35 +0000
Manifest this update: Fri 31 Jan 2025 08:00:35 +0000
Manifest next update: Sat 01 Feb 2025 08:00:35 +0000
Files and hashes: 1: bOAoo9Xlbcl-PK-rbfwF58rAKlc.roa (hash: Vn8yXcKwSTNwIZccCZWqjun9GvkjZC8dYUcNBhWRmco=)
2: kr0ltrnzz-B4X_1OXlQCgztKT40.crl (hash: YJu0dc9gtXXfV3WoktwFnBtnN1sKkmYZEtSe8KGz5xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:43:a0:d4:f0:f5:4e:02:68:28:37:98:f4:e8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bd25b6b9f3cfe0785ffd4e5e5402833b4a4f8d
Validity
Not Before: Jan 31 08:00:35 2025 GMT
Not After : Feb 1 08:00:35 2025 GMT
Subject: CN=6a98036fcbe96a927dc09fbc0d625bb5039b6baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bf:2b:d2:fb:ea:bd:aa:b3:59:85:ac:fc:94:
ff:41:dc:a1:97:8a:1e:aa:86:a1:b0:eb:47:90:ed:
00:53:78:b0:3e:fc:fe:68:7c:95:ca:94:a3:0a:1d:
92:f9:05:8e:d1:fa:57:0d:9e:f0:50:90:92:15:14:
c7:eb:8b:29:5f:5e:01:5b:74:fa:ff:a2:22:bf:bc:
9a:13:c6:3a:d2:4d:ee:59:1d:cd:d0:60:26:89:4b:
32:05:bf:74:2d:e8:c5:9c:6f:33:e6:02:1a:bd:78:
27:13:87:08:24:dc:20:35:af:0f:95:8a:2a:27:6a:
4d:ae:35:14:3a:59:cc:d3:74:eb:d8:57:41:2d:cc:
0a:89:72:98:e6:a0:09:42:7b:99:1f:85:ca:83:93:
38:42:3b:b6:c5:73:e3:57:85:c2:7a:a3:a6:c9:18:
06:46:aa:77:7c:fa:e8:38:c4:21:63:27:4b:e8:cb:
e2:af:f7:1b:dc:96:12:54:00:6a:be:2c:82:1b:f0:
cf:32:39:6f:f0:7b:71:67:0d:1e:c3:4d:38:99:9b:
52:2b:f3:8c:3b:f5:70:01:e5:cf:00:bf:59:7f:ce:
c9:40:20:0c:28:47:7a:05:21:4e:9d:10:24:30:9c:
fe:f0:b6:e4:cd:3a:5c:ac:e0:9a:48:a1:e6:d1:33:
c5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:98:03:6F:CB:E9:6A:92:7D:C0:9F:BC:0D:62:5B:B5:03:9B:6B:AF
X509v3 Authority Key Identifier:
keyid:92:BD:25:B6:B9:F3:CF:E0:78:5F:FD:4E:5E:54:02:83:3B:4A:4F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:9c:4d:05:9e:70:bb:f4:e9:27:49:91:6b:c9:02:68:98:2e:
70:3a:32:63:e4:e7:84:23:6c:b6:01:e9:69:84:e0:03:fd:50:
bf:ca:0f:61:88:b8:75:80:86:9f:e1:70:f2:7f:1e:b5:9b:49:
51:12:f8:1c:b3:03:f6:1f:0c:b4:19:3d:68:57:ca:71:d5:c0:
f4:38:3f:c6:2b:48:78:9c:98:be:34:64:d1:09:85:c9:50:db:
23:a3:84:49:0b:1e:67:0e:28:c5:dc:4b:3a:c0:f3:da:95:76:
2d:dd:f1:82:4d:90:4f:2a:06:2f:c2:21:a7:d2:f0:62:de:58:
42:38:8a:aa:45:6e:42:7c:cd:ab:e9:38:aa:90:41:97:0e:c8:
6e:b7:15:66:67:c9:08:20:23:a7:96:4a:72:4e:75:35:cc:55:
82:57:fe:93:e8:07:b4:8a:53:b6:34:18:a6:fe:df:75:f1:de:
a5:78:d9:48:f0:fa:93:76:4f:74:30:e5:07:51:74:c0:1e:62:
1d:bf:55:64:ea:36:ca:aa:00:28:0a:08:ea:b2:b2:c5:43:19:
5e:e0:a7:4f:25:4c:15:db:8d:c7:35:18:dd:c8:48:a1:13:bf:
91:dc:bb:bb:19:f8:92:f5:c7:a8:16:61:66:2d:00:be:f3:f9:
a6:d3:ca:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:03 2025 by rpki-client on console-fra.rpki-client.org