Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
File: OACZqBs0b5q8ryYFb1t3CU0c8RM.mft (raw, json)
Hash identifier: tsnYVep5ONNa3eZ42bqwMMDCuoiND5BZY4c8c4hYKrI=
Subject key identifier: 44:6C:AB:84:8E:6B:FF:22:FA:11:53:05:5D:CD:F4:CE:41:2A:52:53
Authority key identifier: 38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
Certificate issuer: /CN=380099a81b346f9abcaf26056f5b77094d1cf113
Certificate serial: 0194BB60144338E1A5AC7CDA770F251C5E2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 08:00:23 +0000
Manifest this update: Fri 31 Jan 2025 08:00:23 +0000
Manifest next update: Sat 01 Feb 2025 08:00:23 +0000
Files and hashes: 1: 8uKSKM8TVx970yK_aHmjajWuHlo.roa (hash: Kv8ysTx9zq+WIfK6VNPlttN4b3mr4mqd5LylYbnznig=)
2: 9pCmbwuWDKFww6JalPNjMXiQ2uc.roa (hash: crRW/IaBwcSVgY89PTYbAz61UCGYjtm5jlog0eAP9F0=)
3: DfJAzf9Q3L4tEmWPS7qqKDmlgK0.roa (hash: fuVQXP2ZqWav/yCgsPsm3fiqqB9eYt0wXu73N33zIys=)
4: F-WM6V0pDS_ngxIgpNgM_SOKzXs.roa (hash: YycRdDyGTbaVD3BQBXWfEPp9cD6S80QfheVTwZQO9zE=)
5: OACZqBs0b5q8ryYFb1t3CU0c8RM.crl (hash: bqr8v+NypyhdGUjeSZ9BmhsEhTvyEeO8DGr0wE4hssQ=)
6: Ox8NDyO7Lu2pVppSpwPpBrklgoc.roa (hash: cdngPKwKptE72CQ/axAKXaUmzgT1mhIjk6pmelzFUgg=)
7: drQvOj9TpOHRytlyOo6kxATgZOw.roa (hash: 4wVUz15BtyiS24LCP9jZgWAlCIUKAL3+afNKe8X1w18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:14:43:38:e1:a5:ac:7c:da:77:0f:25:1c:5e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380099a81b346f9abcaf26056f5b77094d1cf113
Validity
Not Before: Jan 31 08:00:23 2025 GMT
Not After : Feb 1 08:00:23 2025 GMT
Subject: CN=446cab848e6bff22fa1153055dcdf4ce412a5253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4e:71:b5:b8:9e:18:b3:5f:2e:5b:e2:8f:aa:
36:0c:21:31:39:e5:1f:88:2f:ad:23:c3:b8:76:2d:
f3:3e:e1:f0:39:5b:bd:87:99:50:de:0d:c4:81:51:
b8:9e:9c:dd:9c:50:86:c8:28:c1:fc:43:75:17:29:
8d:3c:66:24:13:f0:0a:b1:78:88:6d:84:fc:ad:30:
f6:4c:e6:bd:ff:b4:40:d1:e0:39:f2:24:64:ba:f7:
4e:87:00:e8:b1:a1:c3:a9:66:2c:5c:77:06:e0:ed:
77:a5:12:50:c8:be:a3:b0:2d:77:be:7e:c8:be:46:
70:d2:9f:96:c4:5a:b3:4b:69:4a:94:84:7b:48:2d:
7f:54:6e:1e:7d:75:97:35:d3:5f:83:c3:a8:10:41:
c5:f8:6c:cb:ef:20:31:d8:09:85:33:8a:a7:25:4c:
22:c2:5a:b6:a1:15:0b:d8:06:9c:95:25:b9:a5:65:
55:d0:e6:90:10:03:da:4d:e7:fa:61:f4:ef:e9:8b:
fd:e7:1b:cf:bf:cc:12:f4:9b:bb:ca:79:83:24:e7:
71:f7:e6:67:41:d8:c5:bc:9e:a2:7c:fb:7d:4e:33:
3e:e5:e9:e9:2c:01:47:aa:4a:d1:9e:a5:fe:28:bb:
c6:cd:f0:7d:48:5a:bd:72:ae:ec:4c:3d:7d:6c:84:
50:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6C:AB:84:8E:6B:FF:22:FA:11:53:05:5D:CD:F4:CE:41:2A:52:53
X509v3 Authority Key Identifier:
keyid:38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:5a:fc:e3:72:90:8c:8b:9f:a6:5d:ea:8a:6f:30:0b:62:f6:
39:f7:2d:99:b4:59:97:b2:1b:f8:55:89:33:aa:f6:9e:fa:42:
96:b8:e1:5f:10:50:43:6a:4b:f8:2e:4e:8d:13:60:30:69:c4:
7e:d3:4a:54:5a:b7:56:f8:c1:ed:08:9b:27:f4:a7:f1:ef:57:
ec:88:e6:51:a9:64:88:36:14:93:8d:5f:5b:91:1e:77:3a:ca:
6e:45:e2:1a:37:a1:88:15:92:09:cd:e5:1f:91:8a:59:23:6b:
86:fb:e5:0f:2b:f2:86:e8:94:29:37:b2:2c:4f:43:ed:fb:79:
9a:f8:9a:38:f5:e6:9e:77:d0:97:4b:52:dc:e6:5a:a1:94:f4:
29:fe:bf:81:6d:96:5e:60:61:28:43:62:d0:2e:5b:ac:09:5d:
0d:81:59:01:59:15:a4:60:c4:ac:ef:67:95:c6:e6:83:94:3b:
ae:f5:80:48:bf:d1:42:71:48:d6:dd:16:dd:49:ba:dd:c5:a9:
fc:06:b7:43:5a:f5:72:49:a6:df:5b:82:78:77:a9:32:f4:ac:
f8:08:b2:8f:1a:75:9e:f7:d2:b5:58:5b:c7:09:b2:ff:d4:bc:
fd:94:77:21:7e:66:91:13:57:12:ea:cc:f6:47:fe:d7:48:ea:
1f:66:0d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:48 2025 by rpki-client on console-fra.rpki-client.org