Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
File: CuGlto7Kdo8hGkjoVtf1g_kOdec.mft (raw, json)
Hash identifier: juhDSnOzfaYznHkTG80viUiU9EklihAJ3+w97NEsfGk=
Subject key identifier: 5B:F6:DE:AA:2E:99:3B:97:00:4F:47:35:A4:F9:FE:FE:06:91:82:5B
Authority key identifier: 0A:E1:A5:B6:8E:CA:76:8F:21:1A:48:E8:56:D7:F5:83:F9:0E:75:E7
Certificate issuer: /CN=0ae1a5b68eca768f211a48e856d7f583f90e75e7
Certificate serial: 0194BB28FA59192E4E5D0D59F3CE46524C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
Manifest number: 11D4
Signing time: Fri 31 Jan 2025 07:00:12 +0000
Manifest this update: Fri 31 Jan 2025 07:00:12 +0000
Manifest next update: Sat 01 Feb 2025 07:00:12 +0000
Files and hashes: 1: CuGlto7Kdo8hGkjoVtf1g_kOdec.crl (hash: qEVYBo8wYD5M+RIm2T84Wzr+o00Dsqqqs2xyX4N0l/k=)
2: fxLB2UJLDSaxPyWV2-cdEb8R5e8.roa (hash: qTbDhlkyoNs8mOWo2CnjkxjvNByWkkbKi24V6XgdMB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:28:fa:59:19:2e:4e:5d:0d:59:f3:ce:46:52:4c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae1a5b68eca768f211a48e856d7f583f90e75e7
Validity
Not Before: Jan 31 07:00:12 2025 GMT
Not After : Feb 1 07:00:12 2025 GMT
Subject: CN=5bf6deaa2e993b97004f4735a4f9fefe0691825b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6b:09:22:3a:75:29:9d:40:13:99:37:77:d4:
cc:a6:62:ac:f0:59:e8:29:51:07:20:4f:ef:34:eb:
7a:2c:0b:7a:de:fe:e0:c7:73:c5:3a:81:0e:76:4e:
04:a7:52:22:e9:d1:08:f1:95:24:79:b3:e0:f0:fe:
06:fc:c2:92:64:d5:7d:40:11:5b:72:b3:22:10:3a:
e7:4d:c5:fd:c4:15:d4:4b:56:75:00:7c:ac:bd:be:
8a:bb:f5:98:58:0a:19:37:58:47:e6:28:70:00:01:
f2:9f:b5:97:ed:bb:a5:c9:fe:de:43:00:15:2c:4a:
eb:72:81:04:8b:cb:60:29:04:74:8a:05:5c:d8:22:
b7:cb:e8:df:f5:e3:a5:26:5b:cd:72:3a:5e:85:0f:
3f:1f:6e:bf:5d:b7:a2:88:7a:a4:5f:ea:ca:50:f1:
4f:0d:65:5a:9a:5b:33:5c:ad:8e:0e:4f:44:4a:28:
ad:63:b4:72:40:3a:04:a5:e8:39:c8:a5:d7:2f:5e:
ac:ff:33:a9:35:44:ff:e4:3c:71:b0:b6:bd:05:8e:
66:0d:5e:52:f7:f6:a8:d8:13:83:9e:f7:74:b3:1d:
f2:2f:1d:c8:b6:0d:2e:c1:b7:20:0b:0c:fa:4f:18:
8b:42:93:1d:30:30:30:25:dd:ac:f3:e5:71:37:98:
7c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F6:DE:AA:2E:99:3B:97:00:4F:47:35:A4:F9:FE:FE:06:91:82:5B
X509v3 Authority Key Identifier:
keyid:0A:E1:A5:B6:8E:CA:76:8F:21:1A:48:E8:56:D7:F5:83:F9:0E:75:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:be:b1:bf:a4:d7:c5:47:5d:c1:f7:53:a2:6c:ea:aa:79:40:
f5:9b:a2:f2:9c:2e:67:bb:26:43:6a:27:6c:57:b9:25:eb:ba:
74:02:2c:48:2d:35:bf:be:68:da:a5:ff:d2:66:d0:ea:27:41:
6c:ac:92:97:e3:dc:a5:92:93:d3:0a:81:1c:33:a7:a4:da:3a:
49:08:be:df:6f:0f:21:1b:31:6e:de:18:c6:5e:32:7d:99:81:
92:f1:75:ee:54:d7:3d:ec:b4:58:72:2d:d1:c7:ee:4b:c0:ea:
de:9e:fa:00:50:53:7e:a8:7c:6d:78:9d:10:73:2d:3e:21:fe:
c7:d7:46:32:09:d9:b5:e3:db:a0:28:af:c1:01:9f:d8:4e:bb:
2d:3a:38:e4:85:28:93:71:99:7c:78:6e:b4:6d:48:28:d3:8a:
57:a9:7b:16:5d:ec:a4:f9:74:0b:1c:fa:de:01:a3:66:63:75:
32:d4:b3:39:0c:e9:12:51:b7:55:0f:0c:a2:b3:2b:31:91:8b:
f8:93:98:35:c2:d5:21:6c:55:43:17:23:13:02:39:b5:c5:b1:
98:d5:01:95:ab:c8:22:11:55:82:ac:2f:d5:5b:b5:6d:16:83:
dc:12:3f:c6:1f:bc:01:a2:dc:df:94:07:af:4e:d9:4b:5a:d6:
52:d3:f8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:09 2025 by rpki-client on console-fra.rpki-client.org