Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft
File: ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft (raw, json)
Hash identifier: FYAfmvZT4LBk4fOhvnOjUlMxNILRnQ4kd6un9Ly7YiI=
Subject key identifier: 65:84:90:AC:07:7E:8D:50:18:3B:48:BF:CB:E6:9B:F8:CF:AA:8D:77
Authority key identifier: A1:C1:30:07:2D:2C:E9:CF:56:2B:83:19:8E:DA:AD:AF:A4:8F:6D:B4
Certificate issuer: /CN=a1c130072d2ce9cf562b83198edaadafa48f6db4
Certificate serial: 0194BA842ADF9A3A4AC0A7CCC3DD6E854942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft
Manifest number: 0CFA
Signing time: Fri 31 Jan 2025 04:00:11 +0000
Manifest this update: Fri 31 Jan 2025 04:00:11 +0000
Manifest next update: Sat 01 Feb 2025 04:00:11 +0000
Files and hashes: 1: JyWi5BFZcLnbfEzmECOIrpo9WqY.roa (hash: BGeaCEXgvEq5NNxKl+Ag2+yFWkLD9Y1n05TPe3xR8kw=)
2: ocEwBy0s6c9WK4MZjtqtr6SPbbQ.crl (hash: udHH2Rwa0zAdHwmvhvDZl8Y0/ewhRxljIQmW2CBfFPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:2a:df:9a:3a:4a:c0:a7:cc:c3:dd:6e:85:49:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1c130072d2ce9cf562b83198edaadafa48f6db4
Validity
Not Before: Jan 31 04:00:11 2025 GMT
Not After : Feb 1 04:00:11 2025 GMT
Subject: CN=658490ac077e8d50183b48bfcbe69bf8cfaa8d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:53:f2:ac:36:02:1d:9b:9f:ca:50:56:9d:75:
b9:4b:7b:8c:1a:44:d4:7f:ef:77:dd:b6:0d:7c:0e:
66:83:60:2f:9e:72:b3:46:63:3c:6b:3c:49:2f:4b:
d7:06:d2:4b:12:b5:fd:2f:ae:cb:65:5b:44:dd:09:
d8:a2:c0:c1:60:51:34:82:b8:be:74:12:99:ad:cc:
3b:8e:90:78:b6:da:4f:45:f0:6b:70:ee:65:94:5d:
59:b6:c6:0b:61:ee:d2:e0:15:8a:e3:66:28:a8:6c:
48:ea:1e:3c:e8:f4:96:4c:53:a6:43:42:7e:4d:02:
59:ab:e7:e2:c8:21:f9:dc:0e:33:32:53:58:7d:d9:
f1:e5:1c:77:3e:74:e3:3a:79:ee:f3:2a:8f:24:94:
e7:10:6e:d5:0f:66:e6:a8:bd:7a:4e:f5:2b:cc:1b:
be:bd:5e:7f:af:b2:dd:c3:d9:aa:b4:f9:8a:1b:c6:
c5:da:cf:f1:dd:11:9e:85:7f:9e:3a:fa:72:c8:32:
45:16:30:5c:5a:db:88:be:e3:f6:5f:23:6b:82:28:
3e:fc:b2:47:08:69:49:2a:3c:7f:75:13:0f:43:2d:
e8:4c:6f:7e:cc:8c:3d:77:77:da:68:2f:6d:59:01:
8f:c7:c1:a3:5e:09:8f:c7:e4:f5:55:06:82:23:4a:
e0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:84:90:AC:07:7E:8D:50:18:3B:48:BF:CB:E6:9B:F8:CF:AA:8D:77
X509v3 Authority Key Identifier:
keyid:A1:C1:30:07:2D:2C:E9:CF:56:2B:83:19:8E:DA:AD:AF:A4:8F:6D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:fe:b0:43:26:f0:ac:41:11:94:b1:19:79:8f:73:48:25:19:
ad:f3:33:9e:b4:82:83:e2:43:6a:b0:c6:e3:1f:79:95:95:27:
44:39:11:f2:16:73:53:3c:1d:7a:dc:79:31:c0:66:9a:d6:5e:
b7:d7:37:c7:7c:82:c8:f7:df:88:8a:c8:35:56:55:78:d3:d6:
11:f4:74:8a:eb:84:51:77:57:06:a0:d2:97:fc:11:df:01:cc:
6f:50:c8:63:32:38:5b:a7:14:c5:cf:cc:0c:ef:ce:8e:74:93:
53:2c:eb:9f:48:48:91:35:9c:60:29:f0:b3:78:f0:74:b0:44:
03:bf:86:e9:eb:29:d7:df:23:66:23:ad:ab:62:29:fc:10:6d:
cf:78:df:3b:cd:7a:5b:d3:8e:35:e0:2c:d1:3c:90:aa:c8:60:
7e:95:60:c3:2a:22:ca:f3:dd:37:18:dc:54:2e:eb:ec:ff:7d:
05:be:47:8f:05:7d:a0:b1:d1:92:1a:8a:1e:50:74:4a:52:29:
a7:ac:5e:03:66:9f:2d:37:99:94:81:24:a4:9a:3d:cb:17:18:
fd:d4:30:77:df:09:25:71:ee:6d:3e:4f:04:78:29:ed:8a:17:
f1:13:a1:c2:89:ea:54:1b:ee:48:7a:e4:96:a6:64:f6:09:bf:
9c:42:cf:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:29 2025 by rpki-client on console-fra.rpki-client.org