Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
File: KtNUu6DgTX5arSd5J4n8Jt3W31E.mft (raw, json)
Hash identifier: vp1vzKNfbtfT3RUMDtkNrOp8PrFfIwEBKpqimYwt0IU=
Subject key identifier: EC:E7:C4:88:55:79:3B:1F:A1:AE:54:AF:1B:72:C6:71:55:5F:0E:B2
Authority key identifier: 2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
Certificate issuer: /CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Certificate serial: 0194BB973C3BFEFBDAC3837B6359BD5F77F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
Manifest number: 0E4A
Signing time: Fri 31 Jan 2025 09:00:38 +0000
Manifest this update: Fri 31 Jan 2025 09:00:38 +0000
Manifest next update: Sat 01 Feb 2025 09:00:38 +0000
Files and hashes: 1: KtNUu6DgTX5arSd5J4n8Jt3W31E.crl (hash: Tenlp4r/3IEslyXYmpnOqDF0Tjo7CoD8+SPPwRN74UY=)
2: ybOe8ZqyigG4FWAsCMbOcL0c5L0.roa (hash: eOMsv1LZ5Dq7SSni9aMR0p8V/nr5wD1XrXlWWtuivxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:3c:3b:fe:fb:da:c3:83:7b:63:59:bd:5f:77:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Validity
Not Before: Jan 31 09:00:38 2025 GMT
Not After : Feb 1 09:00:38 2025 GMT
Subject: CN=ece7c48855793b1fa1ae54af1b72c671555f0eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c1:d4:68:e4:8b:75:06:bb:67:12:ba:d5:c4:
a7:05:31:e2:39:81:b0:26:60:c7:8f:e0:f5:96:46:
80:40:0e:57:26:86:79:01:94:84:66:47:52:08:2f:
fc:0f:24:4f:66:e5:da:a8:ed:66:ec:ea:2b:54:59:
9e:a9:6d:28:2b:c0:cc:ca:d9:02:01:d9:29:22:91:
df:fd:b4:14:6e:a3:43:03:b3:0e:33:6c:ec:ce:4c:
66:6f:f1:01:dc:ac:fa:61:c7:80:4a:d6:ce:69:69:
1a:a2:43:58:a3:eb:17:25:27:c4:46:fc:09:58:1b:
56:a5:b5:24:d9:87:1e:21:5d:01:c4:ae:68:3b:bd:
6a:74:37:ad:07:2c:4f:83:75:af:5f:bb:6a:ef:a8:
a9:8f:49:7c:a5:ae:2f:76:ae:9d:85:1d:00:e5:17:
ad:88:5f:b8:ec:40:31:63:4a:58:a4:1f:63:6b:69:
d1:55:c2:80:61:ad:c7:f4:d3:56:65:b8:c1:9b:b9:
5c:73:2f:8b:12:6f:2d:01:22:77:11:b7:25:94:c2:
09:3a:5a:dd:89:ab:25:f0:7f:1f:8d:25:ff:a3:d0:
30:d1:42:6c:96:86:ae:22:a4:43:72:9b:b0:57:f6:
1d:5d:83:58:d2:9d:a1:3d:c0:30:c0:b9:3b:85:7b:
83:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E7:C4:88:55:79:3B:1F:A1:AE:54:AF:1B:72:C6:71:55:5F:0E:B2
X509v3 Authority Key Identifier:
keyid:2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:5a:77:a1:d0:dc:d1:0d:60:2b:13:bd:fa:fb:e7:da:7d:34:
74:29:6a:08:3d:66:ab:b1:5e:49:55:43:7a:97:01:e7:fb:51:
ed:81:6d:34:df:c6:e9:4c:89:e9:8a:e6:51:c2:13:50:25:22:
18:4c:c1:fc:bf:25:01:a8:fd:46:a1:c9:be:32:1d:ae:63:5f:
08:e3:b8:05:e9:9a:43:9c:e3:cd:80:92:7a:e0:5a:93:99:15:
ba:f2:d5:05:d6:da:ab:b1:85:05:c9:dc:6d:0d:8e:35:68:1c:
f6:69:25:d6:5c:4c:ef:2f:28:33:72:07:36:61:d7:36:42:2c:
57:5d:33:bb:f9:3c:a0:3c:e4:dc:e9:87:83:e8:63:a1:8b:20:
a6:dc:ef:66:32:94:0a:2d:9c:11:bf:cf:3b:3f:4f:65:ad:c2:
69:4c:23:ad:13:df:bd:fa:1a:81:1e:82:69:77:b2:b8:a8:fb:
16:fc:b6:f7:8c:ce:7c:05:6c:f5:a0:b2:60:f5:95:5e:a2:9e:
0c:cd:05:7c:27:ad:22:7f:58:e0:76:b9:57:cf:43:2d:53:1e:
40:0e:46:1e:cf:6c:dc:94:49:31:68:09:88:91:34:ac:37:8b:
1d:93:9e:a4:f2:f8:9f:88:5a:2a:ee:e9:d2:75:c4:5f:74:eb:
41:8c:46:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:06 2025 by rpki-client on console-fra.rpki-client.org