Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
File: o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft (raw, json)
Hash identifier: +Pei7H2lEPpgGGbugRudC4za8bkTIW1AYVr2TqeLutA=
Subject key identifier: E4:CF:5A:39:20:3C:A0:02:98:38:89:06:54:9C:BE:69:49:D7:33:8B
Authority key identifier: A3:C5:6E:C1:30:D9:8A:F2:D0:D2:94:59:F2:0F:A7:9B:D6:35:90:15
Certificate issuer: /CN=a3c56ec130d98af2d0d29459f20fa79bd6359015
Certificate serial: 0194BA84669AEFA863DF9946FE191EC720A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
Manifest number: 03AD
Signing time: Fri 31 Jan 2025 04:00:26 +0000
Manifest this update: Fri 31 Jan 2025 04:00:26 +0000
Manifest next update: Sat 01 Feb 2025 04:00:26 +0000
Files and hashes: 1: o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl (hash: WrY3NkNv9fVn0RsOIHc8Ra/X+Necfr5K+FxQn5EIuVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:66:9a:ef:a8:63:df:99:46:fe:19:1e:c7:20:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c56ec130d98af2d0d29459f20fa79bd6359015
Validity
Not Before: Jan 31 04:00:26 2025 GMT
Not After : Feb 1 04:00:26 2025 GMT
Subject: CN=e4cf5a39203ca00298388906549cbe6949d7338b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:59:68:9b:af:de:0e:a8:9d:23:10:7e:5c:02:
c3:5d:b8:14:be:9c:c0:34:47:5c:84:20:b4:10:2e:
22:7a:66:8e:a5:d9:7f:60:f4:6f:e7:91:aa:dc:d0:
a1:35:ee:7f:db:d2:59:e3:e4:cc:cf:c6:e1:24:be:
6c:19:96:67:d6:d3:0b:7b:f9:c4:e9:38:17:cc:10:
2c:7c:9e:35:fc:57:c3:ee:e7:1c:da:75:a6:79:51:
a0:9d:56:21:bf:cf:be:7a:62:46:d1:b7:ee:27:c3:
59:03:fa:1b:7a:37:0f:67:87:52:80:4a:e0:bf:ae:
22:27:ca:79:20:e3:eb:ce:cf:6d:26:38:b6:60:9c:
94:1c:ad:36:69:8d:5c:72:34:ae:68:94:7b:87:eb:
ac:f2:ca:a6:1b:75:43:06:17:0c:cb:dd:ea:e7:64:
3f:7a:c6:d0:c0:28:32:3d:76:bc:b8:a1:3a:6b:38:
9b:c5:69:17:ec:b4:13:76:f2:ec:6d:08:cc:c4:5a:
b1:6f:25:98:20:a7:4b:f7:9b:11:b6:49:c7:9f:35:
06:01:f6:43:89:f8:18:11:ec:72:b2:b9:29:0a:39:
43:5a:5b:5e:5e:71:8e:9b:06:8c:e0:01:52:f0:df:
70:83:1c:d6:a6:c8:ee:fc:f6:82:50:78:6e:18:cc:
2c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CF:5A:39:20:3C:A0:02:98:38:89:06:54:9C:BE:69:49:D7:33:8B
X509v3 Authority Key Identifier:
keyid:A3:C5:6E:C1:30:D9:8A:F2:D0:D2:94:59:F2:0F:A7:9B:D6:35:90:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d4:8d:b3:ee:6b:d8:69:24:80:23:99:5a:1d:47:b7:91:e7:
6a:e1:fc:24:6d:43:08:45:a4:87:9b:d8:62:ec:77:19:b8:f2:
b2:3a:75:1b:8b:27:dc:76:b4:03:fe:17:c6:5b:d2:fa:3f:73:
17:0a:e2:bf:07:31:c8:cc:9e:69:ee:0e:6b:8a:df:c2:37:33:
f9:ee:34:ad:43:31:05:54:80:e6:7f:ce:af:af:74:40:34:7b:
76:d9:b5:0a:db:55:4f:26:27:49:a1:75:67:5c:8f:4b:fa:37:
20:98:c2:36:14:54:8d:63:0b:fe:66:28:78:1d:4b:b1:80:cf:
7b:4d:6d:32:8b:c8:ed:e5:fd:9f:aa:38:c4:6d:25:7e:56:93:
46:35:15:59:98:fc:2b:07:01:88:cf:de:d9:a1:14:c9:c5:61:
d4:30:59:c5:c2:93:9c:44:84:67:ea:47:75:ef:80:29:b4:b2:
02:bf:5d:74:52:bb:d9:34:df:9e:a2:4f:35:de:af:2e:54:e6:
5e:39:cd:f5:62:e2:49:d2:ee:1d:a4:de:80:bf:eb:10:b9:9c:
9e:72:c6:58:5f:16:06:39:9e:a6:4f:d0:00:ca:3e:f8:f0:f1:
74:8e:71:5d:ee:b1:5a:c0:df:b2:85:08:0a:e0:11:c2:66:3f:
ee:dc:a8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:48 2025 by rpki-client on console-fra.rpki-client.org