Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
File: KS-wn35or-lfI5ExFObApqpyb90.mft (raw, json)
Hash identifier: KuZh2WzJG2ZhIrngbTnR1h64MgygPBT50HZ56d+C2Vg=
Subject key identifier: 2B:9D:A7:3B:9D:94:3E:6E:2B:EA:9A:25:E9:F2:79:B8:ED:3C:7B:FE
Authority key identifier: 29:2F:B0:9F:7E:68:AF:E9:5F:23:91:31:14:E6:C0:A6:AA:72:6F:DD
Certificate issuer: /CN=292fb09f7e68afe95f23913114e6c0a6aa726fdd
Certificate serial: 0194BA848CD842BC2390CE42474069575ABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
Manifest number: 013F
Signing time: Fri 31 Jan 2025 04:00:36 +0000
Manifest this update: Fri 31 Jan 2025 04:00:36 +0000
Manifest next update: Sat 01 Feb 2025 04:00:36 +0000
Files and hashes: 1: JyTHeWPSw0N2vvDNyoUd8epHXA4.roa (hash: OacdQD8AGHB+uL8UAW3yHrwnc616k4RTRtDRnug3bmo=)
2: KS-wn35or-lfI5ExFObApqpyb90.crl (hash: a97lt27ROEL9QUCnE6ze2mvozJQuxqsuZDlK7XO2sHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:8c:d8:42:bc:23:90:ce:42:47:40:69:57:5a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292fb09f7e68afe95f23913114e6c0a6aa726fdd
Validity
Not Before: Jan 31 04:00:36 2025 GMT
Not After : Feb 1 04:00:36 2025 GMT
Subject: CN=2b9da73b9d943e6e2bea9a25e9f279b8ed3c7bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1f:b0:d6:e9:24:b2:c5:26:96:5b:3d:09:99:
74:82:18:56:d9:98:63:b5:af:ec:08:ed:dd:70:9d:
9f:a2:7b:06:45:03:4a:5f:0a:3f:63:56:e1:ed:f4:
c1:e7:84:89:26:17:08:26:e9:9e:63:22:9d:e8:3c:
89:6e:6a:93:03:68:ec:6d:32:fc:0d:6a:6e:d2:df:
33:dc:17:ef:12:de:22:60:0c:45:c3:d0:d6:4c:77:
44:1a:0c:61:28:36:cf:55:dc:26:07:a6:b4:05:51:
91:b6:c6:fd:a0:41:90:0f:62:5d:a1:8c:af:ef:4b:
3b:62:53:02:e9:ea:e2:8c:02:71:33:2d:bf:d4:c4:
98:37:e5:d7:c9:9a:49:bc:43:57:dd:0d:2d:f5:54:
60:4b:7c:d5:f3:63:4e:47:80:78:63:96:35:3e:e8:
74:2b:e4:bc:b1:5e:db:83:5a:30:db:df:36:25:54:
95:64:2a:cd:1c:ac:c4:8d:0e:8e:64:84:a4:18:73:
38:b5:d3:96:7b:cd:06:37:fe:ea:fb:bc:65:9e:9e:
e3:0e:dd:bd:c6:4b:30:70:43:9f:17:75:4b:92:f0:
20:14:fd:ea:b9:3a:9a:fb:07:25:b9:25:48:2d:21:
79:cc:d6:3a:d0:72:2a:80:62:d1:f9:8a:35:ba:17:
43:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9D:A7:3B:9D:94:3E:6E:2B:EA:9A:25:E9:F2:79:B8:ED:3C:7B:FE
X509v3 Authority Key Identifier:
keyid:29:2F:B0:9F:7E:68:AF:E9:5F:23:91:31:14:E6:C0:A6:AA:72:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:54:41:b1:15:f2:67:0c:ff:e6:04:0f:a9:60:36:84:9f:d9:
c1:3a:3e:50:65:6d:f4:96:23:4c:81:8a:61:33:89:07:fb:36:
94:14:d4:fc:32:37:94:f1:12:de:fe:90:ff:10:89:a0:2e:11:
18:04:45:11:54:68:32:13:8b:d5:b7:d6:42:f3:45:68:c5:4f:
b3:52:b9:0f:94:0c:81:27:59:95:a6:f1:5a:44:fe:3b:f6:c2:
4a:71:12:42:c9:0c:67:ef:89:9c:8c:33:3a:cc:2b:79:8e:79:
37:17:37:88:2a:cb:75:14:b5:51:46:93:50:68:b3:24:e1:09:
22:a9:12:ab:30:d5:ef:ce:ce:15:03:44:f1:d9:db:1d:c8:de:
d1:73:32:2f:22:2d:51:c3:e8:d4:7d:ea:e4:bf:4c:c5:36:bf:
c5:95:2d:b0:f0:6d:25:23:d8:87:ea:b1:da:ae:1d:60:06:13:
e9:77:b9:fc:fb:47:57:75:09:c9:d5:d6:cb:fe:99:93:a8:24:
d9:c2:f3:2b:ce:ee:f0:03:6a:38:32:ba:bf:d8:a7:be:01:ee:
72:fe:23:77:22:e2:72:81:38:d3:26:d0:81:b1:42:7f:e7:0f:
fa:bf:a5:34:26:60:ea:59:bf:4e:f0:2f:17:1b:f1:e9:38:88:
e8:3b:0a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:06 2025 by rpki-client on console-fra.rpki-client.org