Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
File: U12xQ-kGqiDleCkH-EXUp2li_3s.mft (raw, json)
Hash identifier: e9c2i1y3Ko0NYJF6RlNNc7cSQMYbI0f/vrnZ43u1Sws=
Subject key identifier: 0E:62:E1:C4:4B:62:F0:79:7A:CE:71:DD:FE:44:87:54:9D:31:A5:AF
Authority key identifier: 53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B
Certificate issuer: /CN=535db143e906aa20e5782907f845d4a76962ff7b
Certificate serial: 0194BA843F0E9A308BC92C012AEA92DCDDA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
Manifest number: 116A
Signing time: Fri 31 Jan 2025 04:00:16 +0000
Manifest this update: Fri 31 Jan 2025 04:00:16 +0000
Manifest next update: Sat 01 Feb 2025 04:00:16 +0000
Files and hashes: 1: 3IHX9JIlfr3Dk5XlRdW-7lg4QY0.roa (hash: phVZ8bPQCWvi4f6XXfdBMOctC6oPETIwAjTgpAydR44=)
2: U12xQ-kGqiDleCkH-EXUp2li_3s.crl (hash: 1ThLaY9ixdV0XtK/9oAUHaG5DWITD3JryRCKdLXI6pU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:3f:0e:9a:30:8b:c9:2c:01:2a:ea:92:dc:dd:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535db143e906aa20e5782907f845d4a76962ff7b
Validity
Not Before: Jan 31 04:00:16 2025 GMT
Not After : Feb 1 04:00:16 2025 GMT
Subject: CN=0e62e1c44b62f0797ace71ddfe4487549d31a5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f1:89:1e:66:f9:b2:ce:0e:cb:cf:1d:9c:54:
a0:03:24:ba:e2:78:ae:92:4c:aa:a3:c4:ff:81:3c:
32:f8:e7:f4:c2:17:83:43:36:8a:9a:48:1c:d9:4f:
af:2b:87:bc:3f:12:a2:c6:ef:0c:06:56:c4:b1:40:
21:75:46:af:3e:21:e1:9a:ba:cf:cc:f1:68:a7:c4:
4f:ac:75:15:04:05:60:85:9b:12:5c:fa:bf:6f:43:
4a:4f:14:de:cc:03:bb:02:47:29:cc:ed:df:a2:a3:
28:ae:61:f8:ba:75:ca:07:ea:7e:b2:29:f4:91:a4:
5f:12:65:97:ff:68:16:34:da:93:cb:11:46:51:13:
e8:26:2e:44:fb:69:a9:6e:25:5b:2a:fe:43:b9:3c:
26:87:a8:8c:56:75:df:f5:57:05:ba:c4:82:3f:af:
ba:f6:50:a0:e1:bb:f6:9c:88:c7:3e:cc:6d:4d:e1:
4a:6b:ce:49:2e:cc:7e:b3:6a:19:bc:b3:e4:38:95:
91:7e:a8:05:2c:f9:13:d6:0c:d0:b6:05:95:13:26:
30:45:d1:66:15:92:01:89:1c:49:20:4b:b0:9c:4c:
2c:5a:80:cc:6e:82:a7:04:95:d4:df:dd:f0:83:e4:
f8:4a:6d:a0:69:72:ec:16:f7:a9:4f:ce:e0:18:d2:
83:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:62:E1:C4:4B:62:F0:79:7A:CE:71:DD:FE:44:87:54:9D:31:A5:AF
X509v3 Authority Key Identifier:
keyid:53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:36:4e:93:1b:f8:80:66:81:44:a0:3d:28:b9:95:e6:20:41:
9e:ee:4c:50:1a:fd:90:d0:fc:30:6a:d1:85:13:76:f0:c5:e9:
ca:cf:c6:6b:fc:f7:05:5a:de:72:93:09:2c:48:e2:3c:43:79:
9e:bd:44:01:d4:5f:39:7a:4b:0a:8e:d0:03:74:af:b6:11:d1:
4d:0e:30:b7:0f:5e:41:cd:42:9d:ca:b7:76:36:fb:f7:22:cd:
e8:84:c4:de:b2:a1:96:99:22:83:90:a9:68:83:5f:07:98:01:
4c:b3:98:f2:06:a9:a1:d5:ce:0f:ea:4d:e1:e1:62:79:6d:cf:
6b:9d:1f:cd:63:13:0c:02:1b:2d:a8:f9:f0:07:99:33:9f:3e:
8a:8d:c8:b5:18:0f:bd:c7:64:4e:62:a9:ac:52:52:b4:17:b7:
ec:62:d5:42:88:c2:be:5d:5c:f1:c6:74:04:d4:4c:ca:e7:4e:
f2:c2:c4:e2:79:d3:c5:e3:2c:2b:93:12:e0:16:23:3f:9b:23:
d1:1f:3e:ce:fe:53:1e:b4:f0:eb:92:d4:18:06:80:3b:a0:9c:
32:a0:81:44:49:ed:58:f2:1b:10:14:aa:3b:ee:03:91:da:08:
a7:42:db:5a:f1:23:0d:f9:2b:fb:2d:ef:18:08:04:0d:22:25:
f6:75:2e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:41 2025 by rpki-client on console-fra.rpki-client.org