Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
File: kWg1p4YCMde8FkjUX46Vf1FQWyg.mft (raw, json)
Hash identifier: lLMHbmAR7rMn8W+/oy1xB7ipUvu7DAwDX28QkPgR2oM=
Subject key identifier: 25:12:D6:8D:AB:A4:EB:AE:8B:D8:B9:80:C3:3E:16:FD:2F:E6:4E:98
Authority key identifier: 91:68:35:A7:86:02:31:D7:BC:16:48:D4:5F:8E:95:7F:51:50:5B:28
Certificate issuer: /CN=916835a7860231d7bc1648d45f8e957f51505b28
Certificate serial: 0194BB603041173B542EF8C9E060B5628C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
Manifest number: 0208
Signing time: Fri 31 Jan 2025 08:00:30 +0000
Manifest this update: Fri 31 Jan 2025 08:00:30 +0000
Manifest next update: Sat 01 Feb 2025 08:00:30 +0000
Files and hashes: 1: kWg1p4YCMde8FkjUX46Vf1FQWyg.crl (hash: loOlz0CQlqgM1qL4AywNOZlCgJOgfmqRDhsvwkC7pVI=)
2: wrpYuCoTA0QDqUx1_Pjj2R81Fzo.roa (hash: EwlJIDraNdoBBYvI+7Xd9v0lh6FgCXu/F5yckTradM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:30:41:17:3b:54:2e:f8:c9:e0:60:b5:62:8c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916835a7860231d7bc1648d45f8e957f51505b28
Validity
Not Before: Jan 31 08:00:30 2025 GMT
Not After : Feb 1 08:00:30 2025 GMT
Subject: CN=2512d68daba4ebae8bd8b980c33e16fd2fe64e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:16:84:53:d1:23:81:33:a3:48:b3:9d:62:05:
9f:13:20:f2:4f:50:88:ce:8f:c6:ff:d7:5e:5d:a3:
73:cb:aa:7e:3c:92:d6:f4:f6:9f:9f:1c:0e:5a:af:
97:a4:b5:44:50:46:1d:72:af:0a:d7:d4:6f:11:e1:
20:53:93:f0:5d:e0:ab:c8:fd:a8:aa:2a:34:69:77:
2e:ee:8e:08:eb:74:f6:77:27:0c:37:3a:a1:6e:e4:
9f:98:22:75:32:d9:eb:93:c1:c6:b8:cf:34:35:42:
bd:a1:63:1d:53:23:5f:ea:c2:a1:05:08:22:ca:bf:
62:c8:76:b3:f1:47:89:cb:74:9a:62:0d:f6:e8:bd:
4d:b5:bb:99:63:dd:00:19:c0:ae:87:31:13:8c:43:
9b:13:84:91:cc:62:3f:63:07:40:6f:d2:07:9f:b2:
6d:6c:18:43:be:89:fc:ae:1c:e4:fb:e3:1b:04:26:
17:8e:98:91:b4:54:da:f7:c9:09:76:a8:ce:b8:ee:
85:10:e2:67:d2:17:f1:7c:8a:24:b5:fa:3b:51:29:
6d:bf:5f:bb:90:3a:b2:9d:e4:76:b9:0e:bf:43:45:
c4:4c:6a:ce:77:9d:74:24:fa:16:bb:31:d9:da:32:
13:b6:4d:80:d8:17:d9:f1:d2:0f:48:1e:68:b1:ad:
66:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:12:D6:8D:AB:A4:EB:AE:8B:D8:B9:80:C3:3E:16:FD:2F:E6:4E:98
X509v3 Authority Key Identifier:
keyid:91:68:35:A7:86:02:31:D7:BC:16:48:D4:5F:8E:95:7F:51:50:5B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:45:dd:c7:9f:80:59:68:16:dc:56:db:89:7b:c6:7a:6b:9c:
fb:b3:78:e7:a8:5c:51:e5:de:a0:e5:6a:1b:e2:04:5e:d3:5c:
57:47:81:f7:cb:70:c5:58:a6:9c:68:42:28:54:c3:a1:3c:98:
85:bb:75:bf:7b:69:68:57:56:dc:5c:6b:d4:a3:69:fd:5a:97:
10:66:91:61:11:8e:b6:ae:a6:16:e5:93:8e:26:df:3c:b0:07:
fe:18:96:6d:e8:56:3a:6c:8f:0e:fe:22:f3:10:d7:bb:f5:bb:
a9:3b:a0:46:75:31:84:8f:37:ce:a6:26:15:6e:ff:24:ed:72:
43:03:f2:24:49:d5:24:6b:a2:b0:e8:78:cb:a9:01:4a:33:e1:
66:0c:b3:aa:c7:00:b8:b4:f3:e1:fd:e4:20:56:ec:f2:24:55:
4e:a5:59:8c:48:21:49:cc:13:ea:71:c6:13:57:e8:a0:5d:dc:
d9:7a:f4:c5:60:ad:4b:62:50:1b:4f:01:7e:64:f1:89:07:23:
49:ac:cc:64:c5:1f:a0:42:65:bc:88:65:33:0d:58:0e:e6:7f:
3e:e1:5e:61:6a:93:e2:dc:9c:ef:30:bb:40:41:8a:a1:e5:61:
8b:5d:bb:22:82:83:ef:10:44:9d:17:1b:18:3e:3c:21:70:4d:
df:79:fa:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:26 2025 by rpki-client on console-fra.rpki-client.org