Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
File: oU6-xYG-93sycD2LRtMnjBkaKz0.mft (raw, json)
Hash identifier: MbyJSF3R8EmS+sqh6CGh5Gow8lxgUGZKj1mkEItmV6o=
Subject key identifier: C0:55:06:5D:25:A7:38:3D:3D:0F:BF:A5:DA:13:AC:E4:47:79:FD:18
Authority key identifier: A1:4E:BE:C5:81:BE:F7:7B:32:70:3D:8B:46:D3:27:8C:19:1A:2B:3D
Certificate issuer: /CN=a14ebec581bef77b32703d8b46d3278c191a2b3d
Certificate serial: 0194BB2922A8121919B9078C10D544C768A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 07:00:22 +0000
Manifest this update: Fri 31 Jan 2025 07:00:22 +0000
Manifest next update: Sat 01 Feb 2025 07:00:22 +0000
Files and hashes: 1: oU6-xYG-93sycD2LRtMnjBkaKz0.crl (hash: rYD53L8am500bpBndtT5l1TCRUeFjjlidX2j4il+IjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:22:a8:12:19:19:b9:07:8c:10:d5:44:c7:68:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14ebec581bef77b32703d8b46d3278c191a2b3d
Validity
Not Before: Jan 31 07:00:22 2025 GMT
Not After : Feb 1 07:00:22 2025 GMT
Subject: CN=c055065d25a7383d3d0fbfa5da13ace44779fd18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:74:d6:bc:81:69:8d:20:69:21:aa:e9:a4:73:
55:42:08:29:07:77:44:79:35:35:5b:7d:0a:b7:4e:
69:8f:a6:3b:8c:7a:49:0f:ce:8f:32:f8:a2:20:44:
f9:fa:41:c1:e9:dc:4d:fa:2f:59:03:7c:3c:91:14:
2a:1f:8d:bb:85:5b:00:3d:eb:10:fe:5a:2f:ad:ee:
19:67:94:f7:c0:5d:8c:60:0f:bb:96:2a:80:74:e8:
2f:ac:3f:a1:03:42:83:30:27:60:f4:bf:f6:66:af:
76:b3:ef:b2:73:14:da:e7:19:9b:26:c0:ac:3d:59:
52:0d:72:72:9c:bf:3b:c3:86:c3:3a:da:ea:fa:fb:
0f:74:f7:9d:f9:d8:e3:67:ea:7a:7d:90:a4:11:71:
34:67:d4:cd:71:47:36:a0:14:36:7f:80:da:45:c8:
f0:cc:c3:c5:e6:44:19:be:2e:cf:d1:fe:04:fd:ca:
96:97:53:d1:d8:cc:5c:c9:16:9f:7a:af:aa:78:d4:
98:d2:45:57:29:84:ac:ca:f8:0f:0f:96:d7:7a:e7:
73:9d:85:02:dd:cf:df:41:5a:95:72:30:eb:a4:77:
6a:55:0f:48:8b:fa:a5:8a:c4:c7:d8:c8:9f:7c:cc:
a4:d0:cb:57:fe:c8:c5:6a:ff:3d:32:19:94:a0:2b:
4d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:55:06:5D:25:A7:38:3D:3D:0F:BF:A5:DA:13:AC:E4:47:79:FD:18
X509v3 Authority Key Identifier:
keyid:A1:4E:BE:C5:81:BE:F7:7B:32:70:3D:8B:46:D3:27:8C:19:1A:2B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:08:1b:ca:cc:37:4e:c6:2c:02:f8:22:7c:f8:56:4f:0d:b5:
17:e1:f2:f3:2b:b3:74:b6:ff:d1:9b:16:cc:5d:15:4f:ea:cb:
20:6c:dc:5c:97:c1:fa:19:ce:ba:de:1c:d9:5b:a4:b7:45:2c:
00:77:2e:bc:a7:05:a7:92:77:72:a9:5f:4f:04:28:01:e8:96:
3e:2d:3f:96:ab:30:80:c4:f5:c7:25:95:fd:51:e4:9f:ee:a0:
c2:07:f5:aa:a7:40:4f:26:dd:f2:cf:fe:3d:80:bb:56:2b:9c:
35:8b:d2:d4:e1:8c:02:80:f4:31:cb:e1:25:d3:8f:ea:be:1f:
b7:26:72:e5:8b:73:4a:cd:18:e0:5f:d9:44:a6:8a:97:7f:b5:
ab:5f:d4:69:8d:93:f2:c0:ef:cf:41:9f:ad:c2:37:56:f7:10:
81:15:b6:f3:83:72:0e:7e:ec:d5:82:f7:90:be:eb:c2:06:c1:
d6:20:ac:d7:3c:df:33:87:30:5f:ba:f1:44:e9:db:8e:09:23:
81:f9:f0:c2:75:ad:3b:1a:69:21:09:cc:49:17:a5:b0:9c:b1:
b5:f9:0c:2b:a4:a5:6b:bb:03:6e:01:e9:e6:d7:d0:d5:7d:72:
d8:88:c8:f1:42:d1:c7:bd:9e:e4:b3:9f:62:ba:db:e2:15:bc:
73:f0:72:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:20 2025 by rpki-client on console-fra.rpki-client.org