Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
File: K5rePBkSeLKqitdnQu673v5yheY.mft (raw, json)
Hash identifier: 0mjShkfS/1sKxpk5I6Fakl+bu/fyT0Szv6lQheBTVh4=
Subject key identifier: 57:36:2C:6E:8C:29:0E:00:EE:40:3C:A8:7E:BE:76:F9:2B:16:42:A7
Authority key identifier: 2B:9A:DE:3C:19:12:78:B2:AA:8A:D7:67:42:EE:BB:DE:FE:72:85:E6
Certificate issuer: /CN=2b9ade3c191278b2aa8ad76742eebbdefe7285e6
Certificate serial: 0194BB9749664ACD05D7B7ECD8243C0C262D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 09:00:41 +0000
Manifest this update: Fri 31 Jan 2025 09:00:41 +0000
Manifest next update: Sat 01 Feb 2025 09:00:41 +0000
Files and hashes: 1: K5rePBkSeLKqitdnQu673v5yheY.crl (hash: NMER5q0G3SAeIebBBol+ONeeUF36sWT2l23AQZ1dxoY=)
2: qG28szwgzKPw-jxxXZAb6g2XGqU.roa (hash: izxZJRDh1PNPhAdwizTZ+zNrbkp/H2QNfLC0QfnH8sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:49:66:4a:cd:05:d7:b7:ec:d8:24:3c:0c:26:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9ade3c191278b2aa8ad76742eebbdefe7285e6
Validity
Not Before: Jan 31 09:00:41 2025 GMT
Not After : Feb 1 09:00:41 2025 GMT
Subject: CN=57362c6e8c290e00ee403ca87ebe76f92b1642a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:11:dd:d1:67:9d:b8:32:54:92:94:52:ef:4d:
ab:f6:8d:8b:8e:a1:a9:42:40:aa:33:9a:e0:df:d9:
98:3b:2b:73:fd:52:85:49:42:7a:21:e8:29:43:cd:
3d:aa:4b:7d:af:c3:f3:ba:6b:2f:93:f6:5b:05:29:
d5:a9:15:b1:b7:1c:ab:1e:b0:e6:46:6d:63:d2:23:
37:fb:f4:51:94:cc:a6:dd:03:78:df:02:0e:b8:90:
68:53:9f:78:f1:bf:a1:00:04:b4:4f:6f:93:c4:a3:
f6:f0:d4:17:df:8c:e7:89:d1:34:30:76:f9:7f:95:
30:36:0b:ab:bf:9e:60:73:13:f4:2a:d9:06:ec:0f:
03:1f:a9:1b:02:c4:f5:55:3f:b2:62:aa:3c:dc:91:
dd:71:a2:da:be:40:da:e5:03:4c:80:b1:c9:41:ca:
2d:ea:88:1c:c6:bc:a2:fd:67:2e:4a:48:98:31:5d:
27:d7:9a:28:06:8e:94:5c:c1:c5:6b:a7:06:02:73:
32:2e:cb:a8:0c:38:30:4c:37:54:6a:3e:09:22:7f:
40:8f:67:57:3d:c7:3b:b5:16:9e:f3:f5:93:ba:25:
af:30:99:13:46:79:ee:95:70:2b:be:50:f0:bc:f5:
e1:46:16:de:09:9b:5e:ae:1c:f1:c1:27:28:35:0b:
38:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:36:2C:6E:8C:29:0E:00:EE:40:3C:A8:7E:BE:76:F9:2B:16:42:A7
X509v3 Authority Key Identifier:
keyid:2B:9A:DE:3C:19:12:78:B2:AA:8A:D7:67:42:EE:BB:DE:FE:72:85:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f6:3a:81:46:95:e3:0a:82:01:0a:8b:e4:a3:9c:3a:4a:59:
ac:85:32:c5:b8:4d:56:48:c0:38:c0:0e:9b:ee:ce:f1:2c:45:
54:96:18:f6:20:95:91:98:9c:c3:1e:35:7c:c8:ae:f4:bc:57:
a8:ba:82:e3:c6:57:0d:89:b9:7a:d9:e5:bf:8d:72:d3:e4:5a:
f0:ea:70:6b:1a:dc:97:20:1d:18:0a:c6:03:02:d3:9a:b6:a0:
10:96:bb:36:fa:20:5f:61:a4:3d:24:41:12:77:fe:d9:a0:a1:
95:a4:1f:66:d9:38:80:4e:01:85:d4:79:fd:51:fa:44:63:00:
e8:ef:3a:3e:0a:5b:8b:75:56:cd:1a:e6:f4:75:12:d1:e8:fc:
9d:13:9b:b8:0a:c6:e6:28:93:ce:c5:85:cb:46:4d:93:40:fd:
14:48:af:1f:2c:de:c9:39:3d:21:fb:1b:eb:42:7d:65:30:ca:
31:e8:ea:58:a0:38:60:53:a9:95:3f:ad:ad:5e:da:1a:6d:6d:
3f:92:0c:50:46:27:d5:3a:db:b9:b3:b0:7c:7e:76:69:92:b3:
29:52:f3:4f:dd:27:42:d5:6a:41:11:7d:64:e9:ee:e8:18:ac:
5b:95:f3:76:a8:c0:50:6c:fe:a6:74:15:1a:0f:ff:19:6b:4b:
ab:8c:aa:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:19 2025 by rpki-client on console-fra.rpki-client.org