Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
File: K4V9n2ATsKvwt13vPuHIGbbCWEs.mft (raw, json)
Hash identifier: GrGN+Bd0+uF2v9v97Sc7WEcuvQ9G58Reic5UEDVwrU0=
Subject key identifier: 69:B3:40:17:DE:02:64:3F:FF:57:88:21:44:FD:8F:AA:67:2A:D9:3E
Authority key identifier: 2B:85:7D:9F:60:13:B0:AB:F0:B7:5D:EF:3E:E1:C8:19:B6:C2:58:4B
Certificate issuer: /CN=2b857d9f6013b0abf0b75def3ee1c819b6c2584b
Certificate serial: 0194BA8443688A680B444FC4FE0F8DB14DBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
Manifest number: 10DA
Signing time: Fri 31 Jan 2025 04:00:17 +0000
Manifest this update: Fri 31 Jan 2025 04:00:17 +0000
Manifest next update: Sat 01 Feb 2025 04:00:17 +0000
Files and hashes: 1: K4V9n2ATsKvwt13vPuHIGbbCWEs.crl (hash: IJ63e3IziduvQKHiYbfhBksatSIa+2C0jy4MAH0wTQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:43:68:8a:68:0b:44:4f:c4:fe:0f:8d:b1:4d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b857d9f6013b0abf0b75def3ee1c819b6c2584b
Validity
Not Before: Jan 31 04:00:17 2025 GMT
Not After : Feb 1 04:00:17 2025 GMT
Subject: CN=69b34017de02643fff57882144fd8faa672ad93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bb:ea:64:c4:8a:57:0c:be:5b:3f:73:e2:e9:
10:12:e0:79:46:6b:30:f5:36:ff:87:bd:8e:a6:aa:
7f:4c:8e:59:e3:86:bb:ee:ac:0a:11:5b:17:93:29:
d2:09:64:e9:1d:ee:02:67:f0:00:32:5e:6a:62:87:
8e:33:2c:55:0c:9b:49:78:53:8c:f9:0a:53:de:05:
28:a6:fa:89:f2:1d:44:18:4c:8a:8d:53:3f:72:1f:
26:bc:45:2a:82:3d:b8:d1:54:44:d3:31:fb:2a:a5:
76:79:b5:20:64:bc:3c:16:bf:c2:9a:92:98:85:8a:
00:eb:ee:dc:bb:cd:04:db:a0:12:48:23:48:00:be:
42:a3:9b:0d:e9:6b:ef:b6:d5:ec:d3:ac:4d:5c:75:
d8:98:e7:0e:12:ce:84:a7:3a:65:97:af:9c:ac:07:
f5:1e:96:e5:0b:82:78:13:42:58:44:0c:d8:04:6d:
c5:9e:56:47:e6:91:2c:39:a3:19:52:42:d5:41:6e:
13:d1:7a:ea:d8:b1:c1:8c:4d:33:14:a2:03:f7:d1:
bf:8f:67:61:9c:d5:78:68:05:df:08:1b:5d:39:32:
4b:ec:74:e3:f2:59:7e:5b:12:77:09:7b:ba:45:dc:
92:13:da:a8:7d:ee:26:84:a9:d5:4d:3b:7b:ff:95:
30:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B3:40:17:DE:02:64:3F:FF:57:88:21:44:FD:8F:AA:67:2A:D9:3E
X509v3 Authority Key Identifier:
keyid:2B:85:7D:9F:60:13:B0:AB:F0:B7:5D:EF:3E:E1:C8:19:B6:C2:58:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:1d:f6:60:99:6c:af:c2:46:6c:5a:b5:ac:a5:d1:a6:90:15:
37:45:7d:ce:96:c6:f7:58:ad:77:28:e9:c3:1e:8e:e4:67:10:
5f:70:91:22:c4:94:23:39:47:61:8f:59:86:ad:e2:fb:39:60:
8b:a3:97:86:c9:88:32:8e:46:3d:37:f7:2e:d8:9f:88:42:b1:
08:87:d7:78:56:2f:0f:b8:28:4c:54:c3:fa:2f:5b:11:9f:54:
fe:c8:fc:66:f3:8f:8d:9e:16:93:4c:aa:a7:3d:b4:0e:01:a8:
56:f3:11:65:49:c0:4b:97:3e:b9:1e:a0:31:be:02:51:50:eb:
0f:52:50:5a:92:73:de:18:bd:6d:83:d0:74:7c:5f:03:44:4d:
a1:54:80:43:66:94:ba:44:19:b9:fa:79:eb:ee:77:e8:7a:13:
ad:d3:9d:f5:26:53:8e:86:0d:f4:8e:18:b4:68:9d:bb:7b:d7:
af:b4:46:7c:2c:12:2d:22:d9:c3:94:d9:f6:a3:fb:31:dd:bd:
ca:8b:95:b9:cf:2f:d2:b7:05:1d:01:ed:bc:50:27:35:8c:d7:
bb:4a:6b:9d:7e:03:cf:eb:b2:cb:65:7f:c3:fc:8b:fb:38:c0:
df:e7:9a:24:33:14:f5:9d:d7:d9:77:d8:e2:73:8a:d8:e6:9e:
a9:a9:aa:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:03 2025 by rpki-client on console-fra.rpki-client.org