Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.mft
File: oixSeMS7sCbhL_12C-rFn8FV_CU.mft (raw, json)
Hash identifier: nihKNk4kojwlWCgkN0JHMsPV+UwMSjdsxnl9A2cpASE=
Subject key identifier: B3:C6:51:EC:29:64:8E:EE:6D:BE:74:A3:0D:DC:EF:19:2C:9D:AE:37
Authority key identifier: A2:2C:52:78:C4:BB:B0:26:E1:2F:FD:76:0B:EA:C5:9F:C1:55:FC:25
Certificate issuer: /CN=a22c5278c4bbb026e12ffd760beac59fc155fc25
Certificate serial: 0194BB9753EE9123EFC663376B50CD6A13DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oixSeMS7sCbhL_12C-rFn8FV_CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.mft
Manifest number: 0896
Signing time: Fri 31 Jan 2025 09:00:44 +0000
Manifest this update: Fri 31 Jan 2025 09:00:44 +0000
Manifest next update: Sat 01 Feb 2025 09:00:44 +0000
Files and hashes: 1: P8h8nlnz4dD4fkTghoS9unFyKig.roa (hash: MYpmJNo5HIfucuzKcNdlv0aQadbbtMqL8vbh/XHclWY=)
2: oixSeMS7sCbhL_12C-rFn8FV_CU.crl (hash: 3rsyRMqqYaaJGUmln7amkrDDJNtMxqzxjhfO4AAqL4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oixSeMS7sCbhL_12C-rFn8FV_CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:53:ee:91:23:ef:c6:63:37:6b:50:cd:6a:13:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22c5278c4bbb026e12ffd760beac59fc155fc25
Validity
Not Before: Jan 31 09:00:44 2025 GMT
Not After : Feb 1 09:00:44 2025 GMT
Subject: CN=b3c651ec29648eee6dbe74a30ddcef192c9dae37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9f:12:8f:e6:1b:fc:b8:b4:bb:ab:8a:e8:1a:
f4:68:3b:72:3e:7e:ce:74:28:a7:74:22:20:b6:f2:
c7:de:f8:b6:18:30:50:6a:f4:f2:10:1d:90:7f:26:
d7:ea:cc:36:01:9f:40:9a:16:f9:c7:20:b0:1d:80:
06:a7:ee:eb:00:c9:3d:6b:bd:62:4d:85:76:33:de:
44:fd:11:2f:89:5e:a2:09:c3:d5:8b:13:ef:15:74:
d1:95:53:d1:91:24:68:67:b0:01:8f:95:3a:c7:6f:
ba:65:51:81:d2:1d:8c:30:42:22:f1:47:f1:ca:df:
da:02:d2:9a:0d:48:d9:da:88:d3:af:63:6c:f6:87:
7f:b8:5d:6f:4c:05:00:79:32:c3:be:e4:6e:c2:f9:
3f:89:fd:85:55:37:f9:96:8d:b1:0d:73:fc:e3:a1:
5d:26:17:2d:4e:13:f5:2d:04:46:da:0f:ee:c8:27:
4e:59:69:9b:54:d3:17:8e:b2:7a:b9:f6:0b:4b:20:
54:52:2d:e3:4e:ba:df:83:77:98:27:2c:a1:70:22:
c5:e3:a4:3f:1b:0f:fc:fa:a1:ed:3f:3c:97:5a:6e:
ed:25:57:1d:8b:36:64:8a:c5:76:28:2e:9d:a4:ae:
a8:17:35:c1:7c:36:c6:72:af:ae:37:df:55:68:a5:
87:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C6:51:EC:29:64:8E:EE:6D:BE:74:A3:0D:DC:EF:19:2C:9D:AE:37
X509v3 Authority Key Identifier:
keyid:A2:2C:52:78:C4:BB:B0:26:E1:2F:FD:76:0B:EA:C5:9F:C1:55:FC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oixSeMS7sCbhL_12C-rFn8FV_CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c5:a6:1e:48:1c:04:fc:8f:49:bc:f9:7f:8c:d2:bf:24:e0:
2a:47:ed:f9:fd:58:92:43:75:a2:73:eb:4c:cb:b9:b8:ad:04:
09:ce:21:60:ca:0d:1c:95:d7:d1:74:e6:52:f9:07:eb:7b:c7:
ee:d9:4e:75:be:4c:59:98:27:6b:00:8e:6b:20:bd:df:6d:86:
c6:99:64:8f:53:78:56:64:4c:f1:ee:6e:49:83:67:d4:5d:c4:
34:b7:c7:48:35:35:db:26:64:0d:e3:c8:ee:dc:ae:ed:87:fb:
d5:4f:bf:da:e3:0c:f7:00:ab:49:fc:88:c4:e1:dc:4e:70:e8:
40:7a:95:38:2e:aa:ca:b5:16:52:6f:57:0c:8d:b3:09:bb:10:
f6:c8:e3:65:18:ad:df:08:df:88:92:d2:b2:f7:78:43:c8:bc:
b4:64:19:d3:3d:a9:57:90:5d:df:10:07:bc:a5:90:1c:d2:e1:
7b:9e:34:f4:f9:3a:59:f8:6c:80:93:7f:0a:9f:04:ac:f2:ae:
98:65:85:f2:10:dd:a4:12:e1:3f:0d:c6:e4:4d:b7:a0:3d:b0:
af:e0:ec:d9:4e:fc:47:d1:ef:d4:cc:30:8d:44:c1:7e:70:67:
8d:88:fd:22:db:4f:a4:13:0c:53:aa:cc:6e:f8:65:ae:0c:9b:
08:15:e3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:20 2025 by rpki-client on console-fra.rpki-client.org