Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
File: 1kOuwi-BnPAfLGNjA12X-ODjgjM.mft (raw, json)
Hash identifier: fe3Da7wERrKYuZVSPMJVCZ4sk+nfDwblhLsw+Zmd190=
Subject key identifier: CB:E3:2B:64:AB:36:5F:8D:70:51:E4:23:BB:03:CB:9D:1E:5C:CE:DD
Authority key identifier: D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33
Certificate issuer: /CN=d643aec22f819cf01f2c6363035d97f8e0e38233
Certificate serial: 0194BA84A3C0E63218223082DA8161CEBD4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 04:00:42 +0000
Manifest this update: Fri 31 Jan 2025 04:00:42 +0000
Manifest next update: Sat 01 Feb 2025 04:00:42 +0000
Files and hashes: 1: 1kOuwi-BnPAfLGNjA12X-ODjgjM.crl (hash: eGF7Lk/BKjMQrQT3ckStOBmNcdi3EBSmADKXvK5WChk=)
2: iq3ssvUo5bXZcIWEHzsdc8Eqg0c.roa (hash: Ra9VLNdMH1vgwJCIHGEFTa1hXj9TZ6bEeh1Cxv0m8Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:a3:c0:e6:32:18:22:30:82:da:81:61:ce:bd:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d643aec22f819cf01f2c6363035d97f8e0e38233
Validity
Not Before: Jan 31 04:00:42 2025 GMT
Not After : Feb 1 04:00:42 2025 GMT
Subject: CN=cbe32b64ab365f8d7051e423bb03cb9d1e5ccedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:14:0c:19:33:37:d1:1d:d6:1f:bf:2d:9a:1f:
21:9e:e8:b3:b4:b4:34:9e:f2:e9:20:2c:a8:40:c7:
eb:b1:c3:ea:97:2e:53:7d:e5:a3:75:0c:8d:67:cd:
f8:39:11:93:1f:3f:24:57:10:c0:bc:a9:1a:e5:a3:
f5:1c:80:b0:64:3f:be:34:ff:98:3e:9f:86:1a:8f:
05:0d:b1:ec:ca:5b:e1:aa:2e:c3:68:ee:25:14:e9:
a1:8c:a2:70:25:53:c2:8c:5a:72:df:81:2f:53:7b:
c3:fd:d2:cb:80:ff:c6:09:01:50:4e:fc:7a:fb:28:
81:3d:6c:34:f6:0f:20:40:bd:c5:b0:98:6c:c6:97:
b1:5c:c8:53:5c:18:ed:b4:2e:c8:97:eb:1a:f8:0b:
f2:6e:c2:be:c5:6b:b4:de:83:c3:4f:2d:3a:1d:c9:
7e:e3:65:4c:94:16:27:db:1b:49:32:13:b3:42:45:
3d:9f:53:fd:6d:d2:1b:c3:18:e0:2e:aa:80:db:32:
40:46:79:97:de:b1:ef:32:70:5c:e6:5f:73:3f:16:
1c:c8:2a:e8:60:fe:39:bb:b0:10:06:12:ac:82:d0:
97:76:38:59:0f:08:f7:fd:4d:10:a1:ed:88:40:6a:
48:22:7e:fa:19:31:cd:28:43:4e:f2:ed:51:b9:c4:
0d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E3:2B:64:AB:36:5F:8D:70:51:E4:23:BB:03:CB:9D:1E:5C:CE:DD
X509v3 Authority Key Identifier:
keyid:D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a2:82:95:df:ed:58:39:4a:2c:78:21:79:12:6a:1b:26:83:
bf:ef:24:fd:27:1b:7c:65:3d:91:13:77:63:ce:9d:ba:06:1f:
30:53:d4:2a:16:76:a5:1e:e8:90:4a:7b:34:57:57:6f:94:b4:
fd:2d:57:67:5a:95:0f:c8:20:7d:e3:a1:f3:d3:62:a2:16:58:
45:14:00:c1:26:8c:3e:12:5a:e9:11:f4:67:04:ae:4e:4b:63:
bb:10:6c:15:dd:4c:89:77:d6:44:68:b6:ac:cc:ab:30:5d:5d:
d4:31:7a:43:08:46:77:28:95:60:af:50:7b:00:11:01:c0:f6:
ae:46:57:e7:d2:bd:b4:f0:80:67:f2:99:43:9f:01:46:8d:5c:
28:86:61:68:cb:c0:d2:e8:90:bd:6c:c1:18:a3:8b:12:fc:4a:
4e:bd:96:49:e5:10:3d:27:ed:b4:78:59:f7:18:3d:23:c4:28:
0c:6e:b4:bb:bf:13:42:9b:cb:b2:a2:de:75:7e:03:39:1c:18:
90:94:8e:84:00:83:05:fc:d0:ea:72:b7:4c:8f:3b:db:90:2e:
75:9e:87:c4:ca:4d:18:9a:2c:56:53:c0:dd:5e:7a:1e:56:44:
90:3b:d5:a4:0e:2a:ab:ff:5c:14:2f:46:05:f6:8c:4f:eb:8b:
f7:5f:1e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:18 2025 by rpki-client on console-fra.rpki-client.org