Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
File: u5O3SkaFwcFKueGSF6qxQWNBEdY.mft (raw, json)
Hash identifier: l5qX9IqlwSU3nHsyfUZDVPcNHRdKdiLStoucUeAjxGQ=
Subject key identifier: C9:D1:8A:93:52:09:1F:4A:46:E3:1F:D6:4D:56:A9:4F:F7:B2:93:4C
Authority key identifier: BB:93:B7:4A:46:85:C1:C1:4A:B9:E1:92:17:AA:B1:41:63:41:11:D6
Certificate issuer: /CN=bb93b74a4685c1c14ab9e19217aab141634111d6
Certificate serial: 0194BB295A10FB28B9E3446902E82AFF15D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
Manifest number: 0DD1
Signing time: Fri 31 Jan 2025 07:00:36 +0000
Manifest this update: Fri 31 Jan 2025 07:00:36 +0000
Manifest next update: Sat 01 Feb 2025 07:00:36 +0000
Files and hashes: 1: u5O3SkaFwcFKueGSF6qxQWNBEdY.crl (hash: xSBfIc7Dur4hcosvFDcolIx1p6MXlrd2APtMK4gdHjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:5a:10:fb:28:b9:e3:44:69:02:e8:2a:ff:15:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb93b74a4685c1c14ab9e19217aab141634111d6
Validity
Not Before: Jan 31 07:00:36 2025 GMT
Not After : Feb 1 07:00:36 2025 GMT
Subject: CN=c9d18a9352091f4a46e31fd64d56a94ff7b2934c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:98:6d:11:a4:ca:96:fe:86:25:e5:d2:95:
3f:87:b5:35:2e:65:9b:0a:b5:fd:82:4f:ab:5a:fc:
94:81:7f:85:af:a2:38:fa:72:28:e9:b2:6f:67:b8:
55:8f:6c:03:b9:09:3a:5d:ac:26:4a:e3:9a:fe:81:
9a:ba:cd:d4:12:4a:1c:81:9d:e5:d5:65:92:4d:82:
55:40:75:2b:96:7c:4e:81:7d:98:1a:44:2e:dc:d2:
05:33:dd:39:d7:19:77:68:90:32:d2:6c:e8:5b:de:
c3:26:1d:18:99:99:57:94:05:4d:99:7a:fe:7e:72:
0d:c5:28:53:c2:e9:52:ae:c1:f2:41:89:dc:76:b8:
39:74:62:f7:4c:7b:cd:f5:bb:17:f1:3e:8d:fc:50:
37:7c:a8:2f:12:d9:af:73:35:45:df:68:9d:0d:7d:
cf:00:ce:cf:5a:1c:b7:cf:7d:eb:14:92:96:2f:1a:
7a:9a:86:14:50:75:51:d3:9d:df:4d:a3:8f:33:14:
8d:ae:d6:55:9f:3c:16:c7:b1:0f:b5:f0:e5:34:91:
1a:b5:92:b1:13:9b:61:dd:9d:fd:69:4f:1c:0f:63:
7f:80:16:b5:20:38:0e:bf:e4:39:d8:85:f0:8c:d1:
3c:5c:05:b6:8e:51:ca:19:b8:ff:90:00:10:4b:0b:
09:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D1:8A:93:52:09:1F:4A:46:E3:1F:D6:4D:56:A9:4F:F7:B2:93:4C
X509v3 Authority Key Identifier:
keyid:BB:93:B7:4A:46:85:C1:C1:4A:B9:E1:92:17:AA:B1:41:63:41:11:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:8c:cc:e7:6b:63:a5:df:f1:26:2b:6d:aa:40:24:11:5f:1a:
32:5b:a5:61:34:09:0d:a3:2b:bf:4f:fd:50:e9:fc:85:cf:38:
df:55:5c:b2:57:d9:fa:5b:88:54:a8:f5:b0:ac:7f:de:db:07:
c8:75:f3:fc:ea:f3:bb:64:72:86:b0:40:5f:9b:21:e7:9f:80:
ca:d7:e9:56:6b:98:9e:7d:7e:84:7e:53:be:a8:b0:12:12:29:
25:ad:94:a2:ac:78:dc:b4:e2:2e:2d:ec:c4:f5:52:3b:93:31:
28:be:cd:9a:29:24:44:e6:dc:24:5e:41:7e:d3:ed:2a:42:0c:
69:86:7a:59:0a:d8:bb:b0:b8:c2:13:b5:ae:f3:af:65:af:ef:
53:e8:6e:23:30:c2:f3:00:53:bc:b2:33:77:8b:ca:ce:9a:f4:
b1:b0:c5:6a:5c:81:af:26:3f:0e:2a:f9:d9:05:97:8c:78:b3:
76:5d:25:74:bb:39:e7:e3:19:17:28:02:a2:29:0a:b4:be:7b:
f4:7c:df:d9:7b:aa:d6:5c:ec:6d:82:8f:79:6a:87:c1:2e:ed:
3c:a1:86:dd:69:90:bb:f5:4f:8b:2b:8a:98:bc:d2:ce:3b:95:
d7:a1:e7:15:39:b6:27:fe:f3:ac:47:bc:23:19:cb:85:cf:79:
e7:fc:7d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:37 2025 by rpki-client on console-fra.rpki-client.org