Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
File: KMaADXS8QQW0DnfqCFugJtvuw18.mft (raw, json)
Hash identifier: WzL/vXxYfUcHCdnvObee9koeM7oc3KDbZprm/0L8xHU=
Subject key identifier: 59:79:D6:F1:DB:4F:DB:9B:37:54:41:AD:1F:71:BB:C8:56:5B:24:93
Authority key identifier: 28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F
Certificate issuer: /CN=28c6800d74bc4105b40e77ea085ba026dbeec35f
Certificate serial: 0194BABB61E3A02E5065F406C57DC097DC92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
Manifest number: 0E67
Signing time: Fri 31 Jan 2025 05:00:29 +0000
Manifest this update: Fri 31 Jan 2025 05:00:29 +0000
Manifest next update: Sat 01 Feb 2025 05:00:29 +0000
Files and hashes: 1: KMaADXS8QQW0DnfqCFugJtvuw18.crl (hash: KKTBsX9ldXxidvsBUHaO5Hvqmh15jKGepCh5WVkJrNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:61:e3:a0:2e:50:65:f4:06:c5:7d:c0:97:dc:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c6800d74bc4105b40e77ea085ba026dbeec35f
Validity
Not Before: Jan 31 05:00:29 2025 GMT
Not After : Feb 1 05:00:29 2025 GMT
Subject: CN=5979d6f1db4fdb9b375441ad1f71bbc8565b2493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:86:63:ad:13:94:93:95:20:99:00:28:dd:
76:06:76:7c:fa:61:c7:2b:97:5f:da:02:7f:b6:0f:
4f:77:c5:98:85:d2:6d:6d:34:9c:a8:70:4d:77:2d:
2f:5f:19:17:99:6a:df:fa:96:f1:64:46:08:8b:76:
51:bf:96:72:14:19:12:4f:9b:36:77:cc:b7:64:63:
3e:77:c6:99:f7:9d:96:54:25:0f:a2:e8:05:3e:75:
4b:de:be:15:53:02:bc:2f:22:11:69:ed:e9:7b:d0:
af:80:1b:87:88:9d:3d:9e:d8:86:fc:70:68:b1:e8:
aa:f5:20:91:87:4d:d9:4c:9d:51:7a:50:60:7c:43:
68:95:89:55:f1:e9:67:2c:fd:e6:aa:a4:8e:47:a0:
f4:42:e6:dc:bf:11:ea:bc:07:79:0c:0c:aa:6b:29:
d7:9f:eb:c0:4a:1a:ec:da:b0:8f:7d:a8:7e:21:be:
9f:6b:9a:9c:2f:03:94:6b:af:54:f1:52:ba:26:39:
9e:46:6d:6e:f4:ef:64:60:91:a2:07:5b:eb:7d:80:
57:d2:1d:82:45:58:bc:bc:b1:f9:2c:fa:40:ae:a7:
79:4d:47:4a:93:49:75:d7:c6:d7:ac:83:43:6d:9f:
03:dd:21:a7:2b:27:a1:82:f4:d8:8c:c8:c3:9d:a4:
64:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:79:D6:F1:DB:4F:DB:9B:37:54:41:AD:1F:71:BB:C8:56:5B:24:93
X509v3 Authority Key Identifier:
keyid:28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:09:54:b8:65:61:ed:51:60:b9:21:38:3c:e2:d1:a1:68:5e:
83:61:e1:da:0e:95:57:4b:d3:e0:0b:9e:3d:e1:c7:b5:63:c0:
ff:ea:7b:66:65:96:35:81:59:86:ae:d7:df:8b:ec:8e:52:de:
22:2c:22:f6:82:53:13:7a:f3:a0:94:60:11:d3:a1:04:e2:67:
d8:55:9c:b4:69:fd:24:da:9e:02:a1:d8:5f:c2:d2:57:5b:c3:
7a:6e:6f:1f:4e:da:eb:3f:8b:fe:79:07:df:30:3b:bc:36:e8:
90:6f:a9:a3:b6:1d:0b:74:93:fe:d1:a3:0c:a0:ef:13:51:ea:
92:cd:3e:7e:e2:12:3d:5e:b5:8c:be:3d:24:e1:71:38:8a:d5:
0a:58:a2:82:69:53:86:e9:d4:59:8b:82:e7:e1:43:c2:31:93:
b8:8e:05:26:8d:c1:b2:0e:9b:d1:b7:3c:33:5d:d1:85:54:82:
7e:2f:d5:fd:ff:e0:65:5b:1d:be:46:43:f3:40:13:d1:54:d2:
13:e6:a2:73:9d:b5:2b:a4:ed:91:b6:d8:1a:f5:c8:c7:35:a3:
27:c0:7b:37:09:4f:c3:fe:64:48:b1:1e:bb:b1:af:ba:a0:b6:
5c:1e:4f:72:2a:00:1f:01:16:60:51:3d:5f:c2:bb:79:22:ee:
ac:71:f4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:09 2025 by rpki-client on console-fra.rpki-client.org