Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
File: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft (raw, json)
Hash identifier: 3/AOiJYd4lea8huYzXL/W+zG6XI8Z74p3ArbWwpApYg=
Subject key identifier: 8C:FA:36:D7:ED:8F:CF:98:BE:CF:D8:48:40:82:B4:EC:8B:9F:6A:46
Authority key identifier: 02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
Certificate issuer: /CN=02807e0863103f0912e7e0247811d167797d8107
Certificate serial: 0194BB9712FC0C01D3CB5AD25FAD2B7A6134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
Manifest number: 07E9
Signing time: Fri 31 Jan 2025 09:00:27 +0000
Manifest this update: Fri 31 Jan 2025 09:00:27 +0000
Manifest next update: Sat 01 Feb 2025 09:00:27 +0000
Files and hashes: 1: 1-Oc-5i1yyq11robM4onOto0qtew.roa (hash: k/9TNuFsVCQ/WuYJYH9Qe3QLWgW1naRjiSPb+eOEI+0=)
2: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl (hash: W5OHdZioSmhe0JvmqiUQXtkIuMoH748dpkKgYtEjJ04=)
3: C1SZKKCkY7SbLFevNwXtaHd2whI.roa (hash: qLK2DqN3/ycXpzvuQLbdz4SdUDAqvfLR7qE4BXoJD04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:12:fc:0c:01:d3:cb:5a:d2:5f:ad:2b:7a:61:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02807e0863103f0912e7e0247811d167797d8107
Validity
Not Before: Jan 31 09:00:27 2025 GMT
Not After : Feb 1 09:00:27 2025 GMT
Subject: CN=8cfa36d7ed8fcf98becfd8484082b4ec8b9f6a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:09:47:c8:9e:ed:4d:01:d5:73:3a:e0:2f:e2:
d3:27:a0:bf:fb:8e:fd:95:2a:d4:47:c6:b1:57:46:
13:1b:f7:78:5c:49:e7:f7:b5:30:7d:aa:c0:ab:b4:
52:dc:3b:c2:02:6d:75:e7:89:31:51:7f:56:ff:bb:
9c:bd:c8:bb:e5:28:2a:d3:4f:5a:ab:08:63:44:3e:
74:09:83:98:b2:ca:3b:da:d1:c1:6d:36:10:b5:de:
51:93:0c:58:59:cb:22:27:b5:e7:a3:9d:54:8f:08:
eb:b3:a9:4f:c6:05:74:90:b6:95:4a:2c:c5:a4:9b:
a3:7b:3b:4a:86:24:41:2e:87:10:82:d2:37:d0:04:
77:15:cf:ab:00:00:bf:8c:ef:38:97:ad:35:3d:27:
ad:25:34:ed:d8:2f:e7:a6:48:24:56:3d:52:b8:4d:
67:c3:85:ab:80:57:d0:71:17:73:e0:4f:5d:cb:cc:
38:f5:b9:03:12:47:35:75:9f:9a:c9:64:2d:d4:95:
64:db:09:4d:58:51:c0:2d:a8:37:5f:90:9d:de:c8:
9a:6f:7f:01:ca:d2:be:11:28:5a:65:23:f6:50:f0:
14:c6:36:3d:8b:7e:7a:2f:8a:f3:00:68:f6:ab:72:
71:78:48:03:b0:26:c2:f3:59:0a:17:df:e6:55:70:
df:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FA:36:D7:ED:8F:CF:98:BE:CF:D8:48:40:82:B4:EC:8B:9F:6A:46
X509v3 Authority Key Identifier:
keyid:02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c6:5f:b9:9e:28:07:d5:0a:b0:e4:f8:af:16:ba:cd:21:83:
c8:58:6c:77:28:9a:04:43:3a:8b:0e:dc:29:d4:14:19:d6:26:
46:8f:8f:7b:8b:80:b5:82:e1:7b:cc:4a:ce:5a:4a:ba:89:06:
e1:8c:f4:cd:04:6c:32:d6:fd:dc:e5:3e:58:6a:53:1c:7f:9d:
0f:31:b7:47:2f:38:df:03:65:8f:0f:bc:07:9d:46:5e:94:69:
12:19:eb:4a:36:82:6c:0e:2e:27:99:ca:b2:d0:fe:ea:91:a3:
d6:2c:ac:87:9d:38:41:17:ac:d2:e7:17:db:ae:5d:0d:95:b9:
52:4a:9a:d6:54:dc:8f:32:a9:1d:16:5e:56:05:87:37:76:6a:
ba:0f:f1:0f:78:8f:18:ad:d2:97:4f:f7:f9:a8:73:68:c1:f9:
b2:89:e6:bb:e2:38:0c:f9:d5:33:de:30:31:6b:91:d7:85:f5:
36:c2:64:d3:76:9d:a6:e3:37:48:28:a1:e9:1e:8a:3a:ee:52:
4f:cf:20:bb:4c:d4:22:c4:c8:ab:be:a5:ea:17:73:47:01:7b:
6f:55:9c:68:c3:c9:2d:7c:20:a5:dc:4a:08:fc:ed:31:ac:84:
92:19:75:d4:ae:6c:d6:ba:45:f6:54:98:d7:f5:4e:19:97:7f:
50:9d:d7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:20 2025 by rpki-client on console-fra.rpki-client.org