Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
File: kY74I7sEHqOsfIk2x1C2AYE34s0.mft (raw, json)
Hash identifier: XD+4zgSaxFH7xMfGOFDf7PQFzXs6DNw5YL5DY17/Src=
Subject key identifier: F2:E1:BA:BD:F5:87:6B:96:5D:50:70:48:56:8A:4A:4F:B6:25:60:65
Authority key identifier: 91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD
Certificate issuer: /CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
Certificate serial: 0194BABB8A35BA53633DB2959E3B81BAEADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 05:00:40 +0000
Manifest this update: Fri 31 Jan 2025 05:00:40 +0000
Manifest next update: Sat 01 Feb 2025 05:00:40 +0000
Files and hashes: 1: A9fnzzZSIyyk78DkykeGYg11L2Q.roa (hash: jan8f+is44AYa9jG93HTE50pBitsknBS00si8XIMwqI=)
2: DHmLK6qv7LDp9GSFF3bVVqiSSSs.roa (hash: 4c04LYJlSQnDFsWUTe3RinfcXPa5HIaLB5gKn1wNfQ8=)
3: X2DKxHgU0pJJ7l0RSAZexJQ4yk4.roa (hash: c4ZqtHFp+NEImgqSyGp/s8/x5ohWKo9ZUlSrkI+FleE=)
4: kY74I7sEHqOsfIk2x1C2AYE34s0.crl (hash: T2DgJNlANP1DSOcF18nInJtfxOQpZ1DSjl4cy8Ntqo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:8a:35:ba:53:63:3d:b2:95:9e:3b:81:ba:ea:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
Validity
Not Before: Jan 31 05:00:40 2025 GMT
Not After : Feb 1 05:00:40 2025 GMT
Subject: CN=f2e1babdf5876b965d507048568a4a4fb6256065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:10:42:e3:dd:19:7c:81:44:b2:b2:2f:7d:b8:
a5:3c:d1:16:7a:fa:33:0c:7f:d7:21:46:48:8b:12:
57:ad:50:93:d2:a5:99:05:9b:e9:4f:ad:71:cf:65:
e3:49:5b:85:8b:1d:c5:88:86:f5:6b:6e:76:86:96:
67:82:73:68:4e:44:e2:4e:50:7a:d2:ad:cd:9e:31:
ee:1d:a7:61:75:5f:84:63:d6:b1:4d:d0:d9:5f:53:
59:7e:3b:01:d6:41:ac:c6:a9:2c:c8:db:f9:a0:90:
54:0a:22:33:36:69:58:c6:5b:de:5a:83:57:be:88:
99:1b:89:8d:56:73:bc:c4:06:67:4a:dd:0c:51:b0:
79:02:83:57:21:9e:00:5a:fe:81:8d:c1:7c:b2:2c:
a5:05:36:60:45:54:0c:97:e1:88:05:1c:a4:71:0d:
60:c9:b0:36:3d:4c:b0:ad:8a:cd:ef:ab:3d:9c:d5:
10:9e:78:22:84:9a:d3:61:7d:2d:05:10:5e:59:d4:
48:6e:06:79:ce:bd:20:a5:8c:03:a6:59:09:4c:53:
cb:29:f9:db:9c:58:32:25:9a:a3:6a:88:9f:49:33:
50:6a:c0:f6:26:3e:72:b3:b1:c3:da:bf:67:91:fa:
95:4d:35:6c:f4:99:3b:1a:7e:0f:0c:ea:b8:d6:51:
bf:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E1:BA:BD:F5:87:6B:96:5D:50:70:48:56:8A:4A:4F:B6:25:60:65
X509v3 Authority Key Identifier:
keyid:91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:bc:a3:d1:d6:b5:17:c6:c3:12:21:94:17:55:ff:e3:41:ed:
1b:4a:0b:c0:a8:66:4b:a2:cb:96:b9:47:19:3c:7e:12:1e:b0:
e6:81:0c:00:1a:06:61:f9:2a:f3:f1:80:75:45:0b:16:32:e5:
cc:dd:67:f4:12:c5:57:0e:68:f7:fc:fd:50:8d:43:20:0a:0f:
ed:86:b5:67:cc:4a:a6:6a:68:2b:ec:76:a1:72:bd:0b:68:1f:
85:b7:41:06:29:8b:a7:c8:5e:e2:e9:78:d9:08:b0:fb:2c:a4:
05:ad:e5:b2:54:9a:6f:60:43:5f:c7:b7:32:98:25:a6:63:ed:
2a:72:cd:27:a0:62:42:3f:2c:8d:9a:5e:96:9c:e1:f9:ab:68:
c0:d6:d6:f2:dc:41:85:00:6d:d6:5e:49:a8:5e:45:2c:9a:47:
f3:25:b5:3c:d8:45:c1:1b:c4:ec:49:a9:24:63:90:cc:ea:c6:
d7:9a:45:6d:f7:c5:1d:7b:0b:25:36:3d:7d:3a:15:74:0f:0a:
61:b3:84:f6:00:86:d6:b2:9b:9b:c4:7b:56:82:8f:86:59:b3:
cb:d3:c0:af:a2:69:cc:38:6d:0c:fa:e2:ed:da:fc:64:b1:4c:
d2:17:ea:75:fe:fe:67:5f:c1:93:04:78:73:77:a9:9c:c9:32:
59:f2:7e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:16 2025 by rpki-client on console-fra.rpki-client.org