Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.mft
File: O_Ro0VFa1vFMppz5x3Lly1fSd9Y.mft (raw, json)
Hash identifier: wS2JGyfLFDnIanOZMeL2b886WObYBbeH+6kSIDBMtYU=
Subject key identifier: 8E:5E:A0:87:68:E7:32:79:DD:64:A7:25:F2:EC:BB:B0:7A:4F:17:FA
Authority key identifier: 3B:F4:68:D1:51:5A:D6:F1:4C:A6:9C:F9:C7:72:E5:CB:57:D2:77:D6
Certificate issuer: /CN=3bf468d1515ad6f14ca69cf9c772e5cb57d277d6
Certificate serial: 0194BB291766A8C2F612DB58D27FABCBF1B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.mft
Manifest number: 08F7
Signing time: Fri 31 Jan 2025 07:00:19 +0000
Manifest this update: Fri 31 Jan 2025 07:00:19 +0000
Manifest next update: Sat 01 Feb 2025 07:00:19 +0000
Files and hashes: 1: F3oEv0QBT7ejRZnF2aTKoyEK5cI.roa (hash: MTTLBQPL1aOScQOGtAiCwXpSCEzlrz60TWKC9wTFgO4=)
2: O_Ro0VFa1vFMppz5x3Lly1fSd9Y.crl (hash: LSCh2Eq1gjjhwrdPYTsd9/FdORtzRR31sgWHvEZwZeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:17:66:a8:c2:f6:12:db:58:d2:7f:ab:cb:f1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bf468d1515ad6f14ca69cf9c772e5cb57d277d6
Validity
Not Before: Jan 31 07:00:19 2025 GMT
Not After : Feb 1 07:00:19 2025 GMT
Subject: CN=8e5ea08768e73279dd64a725f2ecbbb07a4f17fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:61:06:3f:17:fc:97:95:b9:21:3a:d2:15:11:
77:5c:cb:42:b4:d6:89:36:78:0a:6d:45:fa:20:7a:
9e:44:d4:d2:22:75:5f:25:91:db:7c:d1:99:6f:48:
4a:8d:b0:5a:d1:c0:99:ef:fb:af:4c:a2:c0:81:de:
3c:fe:75:1b:6c:ef:30:e4:33:18:17:85:45:a4:81:
63:5f:f3:00:d7:90:00:d1:3d:96:22:49:29:e3:33:
3a:76:1f:ff:71:82:e2:29:c5:36:e7:c9:63:4e:ad:
80:cc:aa:5c:a8:4e:f9:e7:d2:f7:ad:b5:6c:b1:05:
d9:df:64:2d:0f:26:79:a1:0e:e0:64:39:53:b7:e3:
8a:de:2c:bf:07:36:2a:ea:dc:c1:f8:2a:6e:4f:3f:
95:e7:89:85:db:b0:bf:70:6d:c1:2f:92:d6:eb:3b:
13:85:07:b5:42:5f:b3:90:06:da:7b:d1:f3:1e:a0:
c3:aa:b8:fc:b1:3a:e6:22:93:44:63:1c:9b:60:30:
15:94:76:dc:78:ee:6c:b4:08:e3:77:7a:90:12:1d:
fb:f4:01:cb:bf:1b:49:2a:90:33:e7:41:0d:89:92:
0a:83:ea:65:d7:26:18:ed:37:48:42:ee:0c:1e:ed:
cf:90:0f:cd:08:d7:6b:21:d5:5d:c7:aa:cd:d1:56:
ec:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5E:A0:87:68:E7:32:79:DD:64:A7:25:F2:EC:BB:B0:7A:4F:17:FA
X509v3 Authority Key Identifier:
keyid:3B:F4:68:D1:51:5A:D6:F1:4C:A6:9C:F9:C7:72:E5:CB:57:D2:77:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:31:0f:1e:79:5a:42:48:0f:4f:1b:96:bc:b5:60:e0:33:a9:
3a:ef:88:97:32:d6:c1:67:3c:69:b1:22:0c:6d:ad:02:d4:7a:
13:6b:4a:ee:b4:62:1b:92:7b:64:60:ee:8e:21:76:b9:27:1c:
b2:f3:66:8a:f8:b9:8e:d0:9f:db:ba:be:03:28:8d:52:c6:9b:
3b:ad:28:f2:4e:4c:ed:35:27:d2:7b:82:00:17:d4:3d:b9:0d:
1d:4f:b3:72:f6:8b:91:a6:75:3a:fd:24:18:03:d8:64:06:4d:
f0:ca:ad:23:65:e5:8a:e3:ab:51:25:e1:17:32:dd:f6:25:5d:
b3:8b:a8:43:25:cb:fb:10:6d:70:0b:da:48:b4:56:9a:6d:dd:
ae:54:a5:d1:67:4f:0b:d0:08:3d:ba:15:d4:b6:75:b9:dd:61:
86:c6:8e:f6:c3:c1:81:57:e8:a2:35:8a:1a:24:0b:14:ae:eb:
c7:0d:2d:e3:12:53:54:e0:00:7e:6c:99:03:52:5f:37:1f:09:
6c:7c:55:dc:c7:f3:75:f5:02:e5:21:e4:6e:be:d4:f4:94:46:
59:b9:b4:cc:56:c6:7e:99:4e:cc:97:87:b4:2c:e5:29:e1:ff:
cc:7b:66:96:14:d8:4a:c9:92:47:0a:e8:f1:c8:be:bf:b9:97:
c1:55:12:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:06 2025 by rpki-client on console-fra.rpki-client.org