Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
File: kJrEshegjDSPstyft0IuHekY9Rc.mft (raw, json)
Hash identifier: JUm4eDQUB+6ATbfxTRimrYrFPNP5zSaZw7Imvy9uu2E=
Subject key identifier: 9D:18:C6:24:05:E3:AB:C9:A8:17:33:84:25:82:3E:96:67:EF:ED:89
Authority key identifier: 90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
Certificate issuer: /CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Certificate serial: 0194BB97017B6AF03F07E65D1947A6BC9B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
Manifest number: 071F
Signing time: Fri 31 Jan 2025 09:00:23 +0000
Manifest this update: Fri 31 Jan 2025 09:00:23 +0000
Manifest next update: Sat 01 Feb 2025 09:00:23 +0000
Files and hashes: 1: 68fsEjYkrgR4by_fTbemVJ74S4g.roa (hash: llyOhetb8mMlkTVijjj2HRYaNacwV37b8WoQhej4dKA=)
2: 6GUg_eGgnlwGaZPq01uGg5LgvFA.roa (hash: aAq0jIcn0dtcVSjsOoB6mFGUamTJv2Ofxf6NLQamzvw=)
3: kJrEshegjDSPstyft0IuHekY9Rc.crl (hash: CvfabIoEPk4o0Bl2giq2tEZll9Dg6vWO/wTsP49qFRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:01:7b:6a:f0:3f:07:e6:5d:19:47:a6:bc:9b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Validity
Not Before: Jan 31 09:00:23 2025 GMT
Not After : Feb 1 09:00:23 2025 GMT
Subject: CN=9d18c62405e3abc9a817338425823e9667efed89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f8:a0:27:55:f6:ed:b0:91:fa:32:89:6b:0b:
a4:f9:9f:bc:0e:05:5f:d8:cd:64:91:de:3c:b4:d3:
3f:41:82:87:2e:93:0e:39:dc:a4:8f:e5:29:dd:a4:
bc:d3:09:ed:06:72:c7:12:db:74:19:e1:3c:59:80:
4c:81:24:9f:54:53:15:3c:08:ff:f5:ad:ce:97:72:
28:7f:e9:83:54:ae:07:bd:92:05:54:12:c9:a5:4c:
53:c3:25:9f:f5:c3:64:fc:9e:62:4b:72:6d:c3:3c:
a1:52:e6:81:98:a0:8f:ad:3c:24:dd:34:39:23:69:
a2:bc:cd:91:fa:db:10:be:89:71:37:16:a5:8b:f5:
1e:81:52:6a:2c:86:f7:e1:9f:81:7c:0a:41:87:7d:
3e:aa:5a:b9:84:35:82:ce:8e:f4:80:84:29:a8:6b:
e0:0a:6b:74:49:01:0a:d6:5b:db:e1:ce:de:b7:5f:
15:e9:1f:38:c4:91:5e:c4:d1:6c:55:db:21:1c:95:
10:ab:d6:74:a8:f7:0d:81:85:fe:d7:30:45:5b:1b:
7a:54:f0:b8:68:b4:36:73:73:47:ab:13:f0:4c:a5:
ed:ee:f6:39:37:06:6c:58:c0:e5:0c:b3:4d:4e:f9:
89:b6:01:da:73:6e:19:4a:fe:3e:3f:c9:e1:2a:23:
4d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:18:C6:24:05:E3:AB:C9:A8:17:33:84:25:82:3E:96:67:EF:ED:89
X509v3 Authority Key Identifier:
keyid:90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:09:d5:de:81:49:d0:5b:e2:84:b8:61:71:2f:89:ab:d7:a2:
ee:fe:fc:1b:2a:ca:1c:17:62:f1:52:9d:bb:55:48:3f:f4:67:
42:b9:9e:cb:44:46:47:d1:f7:91:f4:53:13:df:3b:ea:54:3f:
d5:bb:00:cc:f2:5c:09:18:6b:84:ec:3c:a3:2d:bf:2d:dd:19:
70:89:c9:f1:e8:d0:ab:6f:1d:c5:d4:0c:d2:cb:0e:62:eb:fd:
43:60:dc:ad:0c:89:d1:40:e8:84:f4:a6:5c:92:af:9a:e2:d4:
d3:0c:57:50:87:5b:4d:9b:a1:a0:12:ac:7a:cd:05:5e:05:8d:
9c:3f:c1:4a:03:1e:19:a6:34:05:1a:e1:4d:39:0f:96:09:de:
27:84:49:f4:b5:f2:05:c8:96:6f:1f:d4:f7:8a:a4:ab:64:d6:
70:66:42:1e:b0:82:40:f6:25:d0:71:69:39:e9:15:95:d3:cf:
90:ec:49:a9:31:e3:20:5a:fc:17:b7:35:6a:8a:5c:8e:d1:02:
0e:a6:26:af:67:b3:e0:97:9c:90:cc:70:0b:a4:47:65:ba:40:
f7:b9:77:9c:d4:5e:c2:47:90:2d:0b:e4:7b:12:dc:02:ef:75:
37:26:f8:7c:b1:9e:22:45:af:8b:76:a7:70:e2:f3:3b:60:cd:
ec:ee:f0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:55 2025 by rpki-client on console-fra.rpki-client.org