Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
File: kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft (raw, json)
Hash identifier: Mjuz/l79o/dCBH0xbH7esoCDpk38XOwIcOevR9n22hs=
Subject key identifier: 15:4C:1E:0D:B4:B6:7C:B2:1D:54:D8:DF:E8:8F:CD:94:DF:82:DC:5F
Authority key identifier: 92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20
Certificate issuer: /CN=926b9336fcaf3657cedeba53c47e948010877e20
Certificate serial: 0194BC04AD912A200AFB973CD7CECCD071B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:10 +0000
Manifest this update: Fri 31 Jan 2025 11:00:10 +0000
Manifest next update: Sat 01 Feb 2025 11:00:10 +0000
Files and hashes: 1: kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl (hash: fbO9lOZ2Tze+FqeiK7slYBkTds8c7EASKsmGnT4xtdI=)
2: leB_64ybrz6UnuQ8ONDuXBRfKSQ.roa (hash: YpGN6vj+lQckfcrcDFagKzWYTJIRBq12KtLk9dWRtqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ad:91:2a:20:0a:fb:97:3c:d7:ce:cc:d0:71:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926b9336fcaf3657cedeba53c47e948010877e20
Validity
Not Before: Jan 31 11:00:10 2025 GMT
Not After : Feb 1 11:00:10 2025 GMT
Subject: CN=154c1e0db4b67cb21d54d8dfe88fcd94df82dc5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ed:1d:02:d8:d5:52:20:1a:31:ee:7b:3d:82:
d9:4f:d2:88:1f:13:cb:d4:bb:8c:20:0c:92:86:d1:
07:77:c3:f6:0a:98:c6:fc:75:fd:53:8f:3c:6b:14:
f6:54:ea:7d:b1:a8:a4:51:af:88:e7:af:be:68:2f:
47:d6:00:f7:ba:15:17:e2:36:6b:23:a1:fe:a1:f6:
5d:93:3f:b9:fc:ea:46:ba:20:cb:bf:da:67:bb:af:
9c:98:92:5d:a8:8d:a1:a7:7b:e0:e4:26:03:a2:ed:
7b:05:b7:81:b9:17:8f:3e:4e:70:3a:a7:17:c9:2f:
2b:8f:89:c5:9c:11:b9:f8:5a:73:17:72:b0:4e:2a:
62:75:34:79:cb:42:3a:04:d7:d1:a7:56:5d:86:70:
09:bd:74:c1:8d:b8:32:2b:de:73:0f:ea:74:9a:b6:
35:d8:e9:84:fc:27:98:e4:44:22:98:5d:5f:a9:68:
b3:f7:f1:c9:e9:fd:31:db:19:dd:b8:40:ea:65:36:
c8:f9:ef:ba:e1:8a:f1:4b:ba:3a:d3:f5:7c:79:c4:
a9:77:91:45:d9:06:5e:73:9a:43:12:e6:84:e2:5a:
a2:32:87:b7:a3:ab:b0:3f:31:57:2a:bd:5f:91:0d:
af:e0:be:b6:13:e6:e7:bf:ff:28:da:68:fa:78:32:
53:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4C:1E:0D:B4:B6:7C:B2:1D:54:D8:DF:E8:8F:CD:94:DF:82:DC:5F
X509v3 Authority Key Identifier:
keyid:92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:5d:4c:9f:a8:f7:93:69:fb:be:16:88:14:17:fd:91:98:21:
41:a3:d2:d9:96:e9:9a:49:a4:9f:03:0e:69:a5:db:eb:9f:ed:
ba:5a:fe:4a:8e:56:aa:6a:86:88:9a:49:84:44:3b:2c:31:2c:
ee:0c:49:d4:06:9c:dd:e1:ee:2c:85:a9:62:dc:60:07:95:c3:
95:aa:c4:f0:4e:5e:f7:27:65:0b:4b:ca:18:40:47:19:f9:86:
52:d0:fc:a4:8d:ad:2d:b3:c3:f3:bd:78:72:07:df:56:97:9c:
ce:18:a4:1f:a9:de:29:21:55:30:cc:4c:7b:2c:87:21:34:f9:
e6:0e:9b:db:d1:1e:3d:69:e2:fa:c6:bc:52:6e:6a:78:4d:b6:
01:3e:e4:67:73:56:a7:06:96:6e:07:c5:54:07:b8:e5:6b:7e:
c2:50:8b:8a:68:28:26:b6:36:fa:bb:e3:8e:4d:8f:65:cc:9d:
09:e0:a9:dc:aa:eb:64:b2:0c:19:44:6f:9e:f0:25:71:fd:69:
f0:63:a1:df:d7:a5:38:36:94:4e:d9:f8:ec:12:90:79:b7:ca:
19:2d:02:ec:8a:d4:9f:2a:3a:35:ee:82:10:66:41:42:e5:37:
7e:bf:35:54:ce:25:ae:12:0b:9c:e4:a9:82:03:2d:43:92:52:
f9:78:c5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:14 2025 by rpki-client on console-fra.rpki-client.org