Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
File: kFLex7dhf-OchVDuIMOCIBq5ryo.mft (raw, json)
Hash identifier: +TN01XbeUk0lhWRpZxoTbRFRSYVTk+Vdgm0vdgIzPb4=
Subject key identifier: 71:86:7B:C4:2F:0B:BC:E2:6E:03:45:B6:1C:7B:AA:A2:56:B7:A1:37
Authority key identifier: 90:52:DE:C7:B7:61:7F:E3:9C:85:50:EE:20:C3:82:20:1A:B9:AF:2A
Certificate issuer: /CN=9052dec7b7617fe39c8550ee20c382201ab9af2a
Certificate serial: 0194BB96E287BDB0599FE439C5F872085C17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
Manifest number: 0EB2
Signing time: Fri 31 Jan 2025 09:00:15 +0000
Manifest this update: Fri 31 Jan 2025 09:00:15 +0000
Manifest next update: Sat 01 Feb 2025 09:00:15 +0000
Files and hashes: 1: DoqnptEmFDIWhd5INYDJmXuCj7c.roa (hash: knJh69OYwi71VIfestV+KfQIeq85PlXtAbjPJg+Zm8w=)
2: kFLex7dhf-OchVDuIMOCIBq5ryo.crl (hash: vHriUEMsmsG4G1DRo2+D28+Y/+qGD7n8K2NiCdncO4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:e2:87:bd:b0:59:9f:e4:39:c5:f8:72:08:5c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9052dec7b7617fe39c8550ee20c382201ab9af2a
Validity
Not Before: Jan 31 09:00:15 2025 GMT
Not After : Feb 1 09:00:15 2025 GMT
Subject: CN=71867bc42f0bbce26e0345b61c7baaa256b7a137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d4:58:5f:19:28:b6:7b:49:74:d3:2f:c3:c8:
52:ea:aa:6b:a4:75:dd:43:78:04:0c:54:db:1d:be:
c4:d8:4f:8e:fb:3d:62:d2:fa:42:77:df:c4:95:5b:
15:80:17:59:e7:26:98:2a:9e:c9:fd:02:6a:07:c1:
3e:cb:7b:64:7b:65:e5:d4:58:56:db:bc:ee:89:31:
58:83:28:db:87:9f:65:2e:90:b2:f4:f2:c7:35:7a:
d4:00:86:93:5a:d4:bf:c2:22:dc:04:3c:fb:6d:dc:
8e:b2:84:0f:9c:f5:47:65:61:a6:cf:d8:27:d4:59:
8c:a7:4b:5f:2f:70:70:6e:80:71:6a:0b:ed:cf:ef:
58:ad:61:79:33:0e:3f:94:a9:bd:f6:9e:42:18:db:
86:9f:f8:c6:72:7d:8b:0d:b0:37:0e:fb:2a:89:a3:
40:33:c9:06:a5:c5:c7:58:68:2f:8e:67:db:d6:70:
a8:ba:8c:18:59:c3:c9:5a:dc:24:d3:0d:17:bc:10:
75:84:6d:e2:8e:85:97:ca:30:b3:33:68:bc:e8:0f:
6f:a6:42:bd:4d:9b:09:e1:04:73:44:5f:da:2c:29:
66:3c:07:c6:1f:4a:0d:1b:e2:6b:5c:02:be:69:7a:
67:0b:9f:0c:2d:bf:6e:72:da:e8:c6:b7:b3:24:15:
04:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:86:7B:C4:2F:0B:BC:E2:6E:03:45:B6:1C:7B:AA:A2:56:B7:A1:37
X509v3 Authority Key Identifier:
keyid:90:52:DE:C7:B7:61:7F:E3:9C:85:50:EE:20:C3:82:20:1A:B9:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:8d:d5:35:48:81:1a:67:b8:0f:06:91:0f:7a:98:db:fa:2b:
35:5e:52:d4:7c:e9:0b:65:5f:7c:0b:fc:d3:64:6d:26:10:c1:
89:b4:3a:d1:a9:9c:ae:27:44:fb:ff:ad:da:f1:85:2c:dc:d5:
95:bc:f7:fb:0e:c4:fa:61:18:d3:24:39:e4:3d:7f:68:0f:fc:
99:3d:8b:04:59:63:4a:ec:19:86:11:a4:7c:c2:77:8e:39:12:
1b:3c:8d:32:45:c8:73:a0:98:4f:8e:39:ab:d3:5c:89:20:33:
6a:bb:c9:58:cc:99:9b:a8:c0:e2:ce:17:3c:1e:11:8d:24:b9:
e7:05:be:7a:79:c3:52:89:a9:10:78:3e:69:4a:a6:f4:97:09:
9a:aa:11:ea:10:a0:19:3e:23:67:81:3d:0b:0a:03:f0:39:0f:
bd:1c:73:12:4f:51:54:60:95:45:98:ef:93:53:d5:5a:1b:46:
31:26:4c:7f:67:f8:37:6b:a7:f7:21:c8:fc:c4:3d:e5:03:b9:
7e:99:8e:a0:a1:70:7d:80:ea:84:46:72:79:fb:40:f2:e6:48:
6f:62:26:fa:ba:1e:10:5c:51:ef:ba:20:70:14:a3:63:cf:e7:
73:e5:cb:bd:0a:8a:bc:1e:d4:b9:0c:b3:15:cd:36:3d:18:2f:
44:69:e4:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7luKHvbBZn+Q5xfhyCFwXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNTJkZWM3Yjc2MTdmZTM5Yzg1NTBlZTIwYzM4MjIwMWFi
OWFmMmEwHhcNMjUwMTMxMDkwMDE1WhcNMjUwMjAxMDkwMDE1WjAzMTEwLwYDVQQD
Eyg3MTg2N2JjNDJmMGJiY2UyNmUwMzQ1YjYxYzdiYWFhMjU2YjdhMTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudRYXxkotntJdNMvw8hS6qprpHXd
Q3gEDFTbHb7E2E+O+z1i0vpCd9/ElVsVgBdZ5yaYKp7J/QJqB8E+y3tke2Xl1FhW
27zuiTFYgyjbh59lLpCy9PLHNXrUAIaTWtS/wiLcBDz7bdyOsoQPnPVHZWGmz9gn
1FmMp0tfL3BwboBxagvtz+9YrWF5Mw4/lKm99p5CGNuGn/jGcn2LDbA3DvsqiaNA
M8kGpcXHWGgvjmfb1nCouowYWcPJWtwk0w0XvBB1hG3ijoWXyjCzM2i86A9vpkK9
TZsJ4QRzRF/aLClmPAfGH0oNG+JrXAK+aXpnC58MLb9uctroxrezJBUEHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGGe8QvC7zibgNFthx7qqJWt6E3MB8GA1UdIwQY
MBaAFJBS3se3YX/jnIVQ7iDDgiAaua8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0ZMZXg3ZGhmLU9jaFZEdUlNT0NJQnE1cnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9lOWE3YTEtZTlmZS00N2Q0LWFlMzIt
ZGYwYTQ0ODAwYWE1LzEva0ZMZXg3ZGhmLU9jaFZEdUlNT0NJQnE1cnlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9lOWE3YTEtZTlmZS00N2Q0LWFlMzItZGYwYTQ0ODAwYWE1
LzEva0ZMZXg3ZGhmLU9jaFZEdUlNT0NJQnE1cnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvY3VNUiB
Gme4DwaRD3qY2/orNV5S1HzpC2VffAv802RtJhDBibQ60amcridE+/+t2vGFLNzV
lbz3+w7E+mEY0yQ55D1/aA/8mT2LBFljSuwZhhGkfMJ3jjkSGzyNMkXIc6CYT445
q9NciSAzarvJWMyZm6jA4s4XPB4RjSS55wW+ennDUompEHg+aUqm9JcJmqoR6hCg
GT4jZ4E9CwoD8DkPvRxzEk9RVGCVRZjvk1PVWhtGMSZMf2f4N2un9yHI/MQ95QO5
fpmOoKFwfYDqhEZyeftA8uZIb2Im+roeEFxR77ogcBSjY8/nc+XLvQqKvB7UuQyz
Fc02PRgvRGnkuQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:26 2025 by rpki-client on console-fra.rpki-client.org