Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/7b6677-d2c4-4191-9fee-bd19b0836151/1/kliCV2f7wINzKpbhgSzMW_4VAYU.mft
File: kliCV2f7wINzKpbhgSzMW_4VAYU.mft (raw, json)
Hash identifier: Xoc9WmSkFn63nzUxT2V/URiuuPWkzsiz4M7rLoWsqq0=
Subject key identifier: 03:51:DA:1E:24:95:AB:8E:5D:70:63:EC:58:84:07:AA:09:ED:6E:3A
Authority key identifier: 92:58:82:57:67:FB:C0:83:73:2A:96:E1:81:2C:CC:5B:FE:15:01:85
Certificate issuer: /CN=9258825767fbc083732a96e1812ccc5bfe150185
Certificate serial: 0194BB6029F67C24D08557DD0CDF3AEEEFF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kliCV2f7wINzKpbhgSzMW_4VAYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/7b6677-d2c4-4191-9fee-bd19b0836151/1/kliCV2f7wINzKpbhgSzMW_4VAYU.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 08:00:29 +0000
Manifest this update: Fri 31 Jan 2025 08:00:29 +0000
Manifest next update: Sat 01 Feb 2025 08:00:29 +0000
Files and hashes: 1: kliCV2f7wINzKpbhgSzMW_4VAYU.crl (hash: ggAliVlbGcPA6jwBuCxOtbxSzZgQ683HSf2z1Qcd1Ko=)
2: yvQyy9Z9k5i1VmlHAKaertyzN34.roa (hash: Ff1Cn1lR26UTFSkop2LtIu2dpCA0zAQ/5vNY09uigMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/7b6677-d2c4-4191-9fee-bd19b0836151/1/kliCV2f7wINzKpbhgSzMW_4VAYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/7b6677-d2c4-4191-9fee-bd19b0836151/1/kliCV2f7wINzKpbhgSzMW_4VAYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kliCV2f7wINzKpbhgSzMW_4VAYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:29:f6:7c:24:d0:85:57:dd:0c:df:3a:ee:ef:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9258825767fbc083732a96e1812ccc5bfe150185
Validity
Not Before: Jan 31 08:00:29 2025 GMT
Not After : Feb 1 08:00:29 2025 GMT
Subject: CN=0351da1e2495ab8e5d7063ec588407aa09ed6e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c7:30:14:9f:9d:04:75:92:7a:7e:41:d2:52:
a3:80:9f:2e:ae:e0:ca:d3:5a:43:04:cc:59:5b:63:
34:aa:0e:38:36:b0:52:f7:30:eb:e1:6e:15:e6:e2:
9a:37:3a:e7:4d:68:21:0c:78:ca:ad:cb:93:96:de:
26:59:fe:78:67:62:1c:18:f2:97:f9:ab:a5:d4:00:
64:68:70:2a:c2:6a:78:f5:f0:e7:1c:81:54:95:16:
c8:de:2f:67:2c:d8:8b:27:1d:19:c2:42:80:08:5d:
1f:30:37:e4:5a:00:de:1f:fd:29:1c:53:9f:93:77:
cd:1d:30:a7:3c:2c:66:7e:33:13:3c:ce:5e:fb:46:
6d:53:d9:9e:cc:4d:8d:22:fd:35:ee:67:d1:c5:91:
80:62:d5:19:51:b8:b0:8d:e4:fa:0f:08:99:8d:8f:
80:5f:83:35:47:b1:f6:4f:a6:39:a7:d3:f8:8b:86:
1e:17:0d:36:e2:c6:51:58:cb:fc:b4:00:d7:85:37:
99:27:aa:c5:98:3a:d8:fa:70:15:4a:04:d4:12:5b:
d0:ce:6a:d0:ba:09:a1:56:0e:6b:5c:07:f7:23:d3:
e8:76:c0:db:aa:7f:07:cd:66:da:c6:be:73:84:fc:
73:84:15:d8:f9:dd:f2:6a:8c:0d:bc:56:0e:f8:6d:
0b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:51:DA:1E:24:95:AB:8E:5D:70:63:EC:58:84:07:AA:09:ED:6E:3A
X509v3 Authority Key Identifier:
keyid:92:58:82:57:67:FB:C0:83:73:2A:96:E1:81:2C:CC:5B:FE:15:01:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kliCV2f7wINzKpbhgSzMW_4VAYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/7b6677-d2c4-4191-9fee-bd19b0836151/1/kliCV2f7wINzKpbhgSzMW_4VAYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/7b6677-d2c4-4191-9fee-bd19b0836151/1/kliCV2f7wINzKpbhgSzMW_4VAYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:df:85:94:a6:47:60:be:c1:ee:5f:2d:b6:7e:f3:71:68:b8:
71:f9:c2:ef:c0:29:41:43:3b:9e:87:ee:4d:e3:12:7b:2f:15:
74:b5:54:81:11:56:69:73:13:6b:16:64:59:ec:74:56:02:ec:
29:43:e0:b7:4b:b4:75:04:1d:1e:93:4d:f1:b9:ad:80:22:fe:
8c:7c:95:26:53:6c:65:d5:31:d8:96:a8:13:89:0c:22:bf:5b:
74:8b:76:0f:d5:5e:2f:15:46:55:e5:39:9b:1b:61:31:83:bd:
60:4a:82:9b:28:ea:54:ee:2e:fb:81:17:74:79:b5:0d:41:ac:
60:55:0b:68:0d:38:0b:c6:a4:b4:c4:f3:da:d9:04:de:0d:02:
9d:22:cf:0c:33:46:97:e8:1f:78:36:8a:43:7d:1e:fe:b6:86:
92:66:29:f9:f1:3f:46:42:e8:03:96:03:6c:06:7a:c8:93:5e:
d5:2f:e8:22:d9:79:bf:4b:19:25:f2:f5:9b:1d:6c:c3:09:1e:
9c:01:6b:a4:36:71:38:06:a3:04:3f:01:fa:bc:b4:89:03:39:
b7:fc:ed:57:9a:df:53:d2:c0:94:2c:7a:3c:c2:7f:3c:30:23:
58:67:70:dd:3e:ea:91:b2:72:9c:98:40:d6:30:0f:58:14:71:
1a:e8:9e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:12 2025 by rpki-client on console-fra.rpki-client.org