Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
File: K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft (raw, json)
Hash identifier: 7M4uK+6Sb7Ap4Ni2Hk+ToFgT35HIeo1OcApoj6YzPUo=
Subject key identifier: 09:B4:E4:A4:6D:FE:A0:4B:D4:67:11:1D:22:CF:32:64:B5:9D:F9:6E
Authority key identifier: 2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
Certificate issuer: /CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Certificate serial: 0194BA841CA50534F2C9DF832A75775992E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 04:00:07 +0000
Manifest this update: Fri 31 Jan 2025 04:00:07 +0000
Manifest next update: Sat 01 Feb 2025 04:00:07 +0000
Files and hashes: 1: K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl (hash: HUluY2B9kfta+fw0IozHCyusAb9/S39C/rLz1rUPVbs=)
2: ltvzPx25u1h6KtyLg3u0jcOaPlk.roa (hash: 2f6Jvjn6F1N/MtDAOcMnV3ci6bmbSvFKgzVpnpXVDh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:1c:a5:05:34:f2:c9:df:83:2a:75:77:59:92:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Validity
Not Before: Jan 31 04:00:07 2025 GMT
Not After : Feb 1 04:00:07 2025 GMT
Subject: CN=09b4e4a46dfea04bd467111d22cf3264b59df96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2e:ec:ff:4c:87:f1:b8:58:95:27:32:10:c9:
28:9b:b3:a2:d2:f7:4e:2c:83:6d:6f:1b:ba:08:2f:
29:45:4f:1a:13:f3:18:0f:bf:93:af:20:23:a7:9c:
d0:bc:26:d3:08:fa:b7:13:08:63:e6:9e:bf:6e:fb:
8e:45:31:cc:20:d2:83:d2:1c:f4:73:83:6d:a8:29:
18:99:6d:ce:9c:93:6e:31:4a:d1:ac:06:3d:33:82:
e3:d9:fb:86:93:ba:c3:a9:f0:e8:38:2a:7c:0f:1e:
d8:c6:d4:04:3f:0e:74:c8:33:d4:1e:8d:19:ce:fa:
a7:2c:48:e8:64:b5:b8:78:32:31:95:4f:c7:53:99:
ed:cc:ff:65:65:b0:35:91:67:d1:c3:e2:f3:da:0b:
20:08:99:5d:97:02:31:77:ff:1a:90:ac:46:9b:ed:
da:ca:03:3f:2c:2f:29:e1:72:f8:17:ba:67:51:9f:
9c:c9:4d:ec:a8:5d:29:7c:cc:e6:a1:9b:f3:b5:b9:
09:95:72:30:81:79:f0:de:ec:86:5b:88:01:70:b4:
df:31:d6:4f:16:6a:b2:88:d5:0e:a3:40:fc:1b:99:
ed:1d:4e:87:d9:e5:c7:ee:29:53:2d:29:62:46:57:
80:3b:70:7a:18:81:a6:de:31:e5:de:fe:24:6b:6a:
60:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B4:E4:A4:6D:FE:A0:4B:D4:67:11:1D:22:CF:32:64:B5:9D:F9:6E
X509v3 Authority Key Identifier:
keyid:2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:ec:1f:b0:91:21:50:85:04:c6:22:c1:eb:44:b4:43:c8:63:
bb:c0:41:a5:06:21:a4:a6:ef:92:16:2a:9c:c5:5c:c0:70:cb:
cd:8d:c9:91:4f:8e:fe:52:3d:75:d6:02:3a:d9:6b:d2:5b:07:
ba:09:3a:7d:91:f7:8b:7e:35:b8:58:53:f3:a4:14:be:e2:ff:
19:6e:3f:03:f0:07:ee:f5:ee:94:47:cc:11:13:0e:18:4c:38:
7e:ca:58:6e:a1:34:32:5f:4f:c3:59:d9:37:aa:4c:bc:ee:1c:
81:cd:fe:d3:9b:bf:79:9e:09:f9:29:ee:7e:01:2e:48:29:81:
20:b3:b0:80:d1:5a:5d:6c:e4:8b:97:67:d5:b8:d0:73:a5:8b:
db:bd:3a:9f:64:04:47:c3:c5:a5:cd:66:10:00:a6:60:1b:7e:
06:f2:c0:6a:81:f5:27:d8:dd:d2:7a:c3:af:43:57:39:da:09:
e1:88:40:24:7b:54:74:74:33:3c:39:2b:19:a7:00:7f:3b:1e:
5c:cd:cb:ab:33:34:c6:f8:48:03:85:5c:55:1c:6a:26:95:04:
cb:c9:52:f1:d6:af:9a:de:53:27:11:1b:46:6d:10:fc:9d:3b:
ad:e9:8d:9a:26:4e:38:8c:15:36:03:da:b5:7b:22:48:6d:7d:
94:73:c7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:43 2025 by rpki-client on console-fra.rpki-client.org