Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
File: oxkPbv156nMz-bzNhaBDUtkVsjk.mft (raw, json)
Hash identifier: kXeKLbWIr7kg5FDAVuZkd+LsltVgBZeIxZ9rWaYWhnU=
Subject key identifier: DC:06:70:3D:D0:23:59:66:7F:F7:0E:42:A6:8D:29:11:A3:67:44:81
Authority key identifier: A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
Certificate issuer: /CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Certificate serial: 0194BA84BDF791FA0054E04BB1073323CB88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
Manifest number: 132C
Signing time: Fri 31 Jan 2025 04:00:48 +0000
Manifest this update: Fri 31 Jan 2025 04:00:48 +0000
Manifest next update: Sat 01 Feb 2025 04:00:48 +0000
Files and hashes: 1: KExUk0ZqXQL8EgosDUsfpJpTUyg.roa (hash: Sz5tU52c4zqN1bHM/ntPj4qPbpRJB4wKgoKZm0ClNu8=)
2: aIdDcKIPSrdTWAm8Itr83nsLcD0.roa (hash: UkSPTJ6SY0So9wqyoQ355LtxgU1FlK7CRcCejA7q0Vc=)
3: oxkPbv156nMz-bzNhaBDUtkVsjk.crl (hash: 12jJ8JN5ZvhjtQtkDuD1PEpcSEJaR06+03nhNPKTMBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:bd:f7:91:fa:00:54:e0:4b:b1:07:33:23:cb:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Validity
Not Before: Jan 31 04:00:48 2025 GMT
Not After : Feb 1 04:00:48 2025 GMT
Subject: CN=dc06703dd02359667ff70e42a68d2911a3674481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:20:84:d1:ab:03:25:8f:8e:83:21:4c:30:17:
35:b5:92:fc:94:f2:35:26:4f:ee:71:de:f9:0c:0f:
ff:72:57:a2:4e:b9:fd:2c:85:19:86:fc:5c:83:54:
5d:96:4b:64:eb:6b:fb:45:86:7f:0d:cd:b4:a1:9b:
2f:e3:ec:6b:cf:c5:08:80:cc:83:94:c1:18:0a:78:
47:3e:07:94:89:a0:4d:48:91:86:2f:16:38:f9:da:
55:02:80:3a:89:b0:bf:63:86:7d:4d:b8:82:ab:63:
65:f9:9f:b9:4b:20:59:2b:28:86:41:83:6b:4e:c3:
9f:ac:55:e5:93:34:b3:22:ff:52:de:29:28:08:9d:
0b:45:58:58:f2:28:7c:e9:45:d6:72:a4:bc:ac:42:
eb:11:29:a2:22:b7:cb:bf:93:9f:d4:99:9a:c8:cb:
83:89:e6:11:79:d4:c2:ce:cb:d1:d3:86:89:22:e8:
8f:87:bf:fc:19:be:8f:41:4a:90:57:d3:c5:d0:9c:
5e:9f:bf:e6:e5:38:b1:99:0a:e2:85:5c:88:04:45:
fc:aa:6c:c1:60:25:20:43:00:90:da:12:fd:93:1b:
ed:ad:50:2a:04:b5:87:9b:9c:f1:99:47:15:91:f4:
5e:cb:37:7b:87:11:7e:a8:ab:bc:41:72:e6:47:6f:
f0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:06:70:3D:D0:23:59:66:7F:F7:0E:42:A6:8D:29:11:A3:67:44:81
X509v3 Authority Key Identifier:
keyid:A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:7f:87:10:ef:02:c3:3d:5b:74:ac:99:86:f0:05:d1:6b:47:
85:33:76:f2:7d:2a:25:f3:c6:90:c8:25:12:2e:8e:ee:b4:0d:
b3:f2:72:0e:b4:14:7b:4f:dd:a3:65:6c:47:4e:da:e6:4a:41:
9c:03:8c:1c:76:57:1b:24:9c:50:1d:fb:04:df:5b:a4:50:46:
85:7d:31:9b:2c:d5:9c:24:55:ee:be:7a:90:80:03:6a:4e:30:
f3:df:8b:ac:dd:c0:32:4a:c7:df:43:2a:a1:ca:81:29:68:e6:
61:0d:bb:95:51:41:c6:32:86:e9:3c:3f:89:b9:ea:47:df:bd:
e4:fa:f3:ec:b4:44:10:09:3f:53:90:0a:9b:06:9e:c5:8f:ac:
6c:5d:2d:91:09:c7:5d:84:c3:0a:3a:30:60:9c:50:07:a7:b5:
a1:87:d3:59:bd:0c:cd:47:76:c8:ab:6e:1f:5b:fa:98:64:3e:
c8:fa:a3:1c:6b:25:cb:0e:df:58:4c:bf:07:ed:c0:62:04:75:
1f:e5:e9:73:28:12:2a:27:92:5f:e1:51:7c:d8:a8:bd:68:97:
b2:eb:0a:b4:95:d7:1f:44:01:d0:87:90:5b:79:e8:fe:e9:0a:
d7:3e:5b:f2:20:98:1d:64:cb:f8:b3:fc:2b:90:a7:58:fa:f9:
46:2e:ac:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:45 2025 by rpki-client on console-fra.rpki-client.org