Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
File: oLsXGJY93ZEot2_T2CE6FWXvhW0.mft (raw, json)
Hash identifier: Zwrybjn7Q3qOOT1PSHKa6Ednpm/CJYFTvPZ1VDvWLyA=
Subject key identifier: F0:8B:9A:96:1A:6A:99:3C:9A:0A:E5:30:86:14:91:46:A9:CB:65:24
Authority key identifier: A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
Certificate issuer: /CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Certificate serial: 0194BABB8435759102861ECD51A7CBE63AF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 05:00:38 +0000
Manifest this update: Fri 31 Jan 2025 05:00:38 +0000
Manifest next update: Sat 01 Feb 2025 05:00:38 +0000
Files and hashes: 1: 3AKmduEBocJ2JnN0jXYWS-8GbOY.roa (hash: iBJD1wTxS+O8/2QNKHhH8F14y6hfViRbWeFBsKe3/pI=)
2: kIIfJ-bgIB8FEHmlLuoBBuJNtKA.roa (hash: d5x0f5Yxm3xcFQXy2bPoyZU9c7+8Vyq9PQskQziwEEU=)
3: oLsXGJY93ZEot2_T2CE6FWXvhW0.crl (hash: FVcJ+INeipylQvq1TFDfU8R8j+nnmKsRCQvGMHYtEIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:84:35:75:91:02:86:1e:cd:51:a7:cb:e6:3a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Validity
Not Before: Jan 31 05:00:38 2025 GMT
Not After : Feb 1 05:00:38 2025 GMT
Subject: CN=f08b9a961a6a993c9a0ae53086149146a9cb6524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a1:d4:99:72:ac:c3:ae:1d:79:67:48:2f:f7:
43:bb:b4:cc:89:bf:6a:ea:7f:70:21:49:9d:75:65:
98:bd:4e:b8:ac:0e:ef:33:d7:2c:ce:4d:87:80:97:
cc:bb:bf:2c:36:e5:30:3d:38:ec:7e:48:d0:be:01:
17:0c:ad:ba:bf:03:f0:51:ba:02:6a:55:b9:93:30:
cb:a2:55:cd:40:fd:f2:e9:98:3c:3c:97:34:e1:8f:
2c:fd:81:d1:78:4f:5d:99:a0:ed:dd:12:6e:58:96:
17:14:92:0f:61:b2:91:32:16:bb:87:c0:98:94:60:
f4:3b:b3:c4:04:28:2f:b6:1a:57:d5:43:4f:f6:86:
10:cd:93:5f:ce:4e:61:b1:52:5f:44:cb:42:f9:27:
80:27:c3:ce:51:44:c0:6a:6e:6a:52:a1:76:e4:51:
84:0c:1f:97:a7:f7:47:96:5c:60:95:5f:c4:be:b9:
82:b9:4a:e8:0f:13:b9:67:f4:3e:0f:f0:86:66:2e:
c6:ab:71:68:c2:a0:5a:0a:81:d9:8c:6d:63:60:be:
66:cd:e0:4d:75:90:94:e2:d9:db:71:bd:30:64:33:
e0:0e:03:21:93:58:17:93:54:99:0a:b3:8b:7d:08:
aa:fd:b2:c1:c6:2d:03:db:46:34:50:99:ab:d9:4e:
8a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8B:9A:96:1A:6A:99:3C:9A:0A:E5:30:86:14:91:46:A9:CB:65:24
X509v3 Authority Key Identifier:
keyid:A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:fd:61:03:92:f9:ed:f0:c5:22:eb:1d:0a:d3:be:2b:6a:69:
8f:cf:b7:89:76:d1:3a:f0:36:10:94:6a:e4:f5:6c:67:fe:f1:
d9:b7:bf:01:07:f8:71:9f:c9:20:7e:34:d9:86:aa:c2:47:48:
c7:f1:d7:e5:bf:82:6f:9e:db:99:11:b4:1c:b3:81:aa:9f:72:
4a:10:8b:d8:8c:ea:48:46:57:68:c7:69:e4:da:d9:ad:b7:39:
46:28:34:a2:1f:d1:37:2b:9f:cc:eb:17:8a:48:b7:d2:bb:d2:
79:b7:15:10:f9:2a:da:df:d4:9d:b5:f1:f6:14:1e:88:28:68:
a9:eb:0a:cf:bf:e8:38:07:12:5f:6c:e0:55:df:ea:52:9e:dd:
21:3f:e4:d6:00:2a:e1:28:20:8a:79:eb:7b:c5:68:82:90:00:
84:bd:21:4c:0a:12:ee:74:e0:59:00:06:96:2e:06:11:db:e2:
85:3b:35:6c:91:19:1e:68:0b:ac:d1:1c:2c:21:67:1a:ea:ac:
8e:ee:37:cc:61:b1:55:6f:d3:4e:2f:bb:4b:35:8a:dd:b8:1f:
25:f6:38:30:8c:a8:94:e8:6a:4f:7e:40:44:32:8e:02:66:24:
d5:80:0d:df:63:68:4a:27:8b:3d:ab:b1:10:c8:b6:bb:83:14:
32:00:ac:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:32 2025 by rpki-client on console-fra.rpki-client.org