Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft
File: ORnyrZFYS6_wRnRHusj7l40fndM.mft (raw, json)
Hash identifier: AGps6EjxNB1oOW+1EQFS+SpwKWNn5GGzn0trBAhLmQ0=
Subject key identifier: D0:77:3C:A4:F0:3C:89:0F:DB:0D:C6:E3:3C:EF:8A:5B:F0:6A:E0:E5
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial: 0194BC05138D5152D198843324296B96652C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft
Manifest number: 144E
Signing time: Fri 31 Jan 2025 11:00:36 +0000
Manifest this update: Fri 31 Jan 2025 11:00:36 +0000
Manifest next update: Sat 01 Feb 2025 11:00:36 +0000
Files and hashes: 1: 3Xkfgsy5F0IowNcy1PedAB3Q6w0.roa (hash: iyJL5cuUJjZvE75tBtKfcWvyK2dmPiVKM7BX3wZGQos=)
2: 4EDvDSCIPe0YYvYx7Str0IpAPeM.roa (hash: A9xeZgyOfSqqIMRvaPEIhp5b1RhtdrlitB+v147UkT4=)
3: 5pue0s9j8lhdVuO6m6E92d4GwDU.roa (hash: CSkd5pFYexGISl0uc2qVJpocMMmmGw3Zguf0ypv5Owk=)
4: LtJ_LtRSezQcIAEEGoKqG_m3JYg.roa (hash: u5sfrMRw1iPxmO8/zQOOPqRHD6mVSiL8/ijDSEaY3UQ=)
5: ORnyrZFYS6_wRnRHusj7l40fndM.crl (hash: dXKZlR/aUtZYaNSADO2DlMSfPV1L2fsx0LfOXdrn28A=)
6: WBerlCoyvzWnSx7AM9uVxy9XUro.roa (hash: FyOYZU8Lcu6m3tCIEh8spxjddiJiAmITHkAJjSq/GW0=)
7: hWosbOoApl7V_Bhpe5UlA20sERA.roa (hash: PkJmNJ/LtXuQwtW6f6gFggLl9YMZJgAspupTTJw2DD0=)
8: m-oD5AGGiKc-qI8F9BHOsqfUhwQ.roa (hash: ZivLa2r1rkIhgA7nnzvSrie3rkSLQvNS6UhWQpi2o50=)
9: r4CnQQx_zbdBDGpIsGGdqEuowRg.roa (hash: Cf3KdUglzAXq3AND0kUcTnVm0D52NG4w3f87gIFdSQg=)
10: uot90FkBP8Y3Y-x6-7brjjoB-rU.roa (hash: 0JXXSAl/uFfrD7KxeCsCoDWgeiNKlIuga4IDFWQXH2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:13:8d:51:52:d1:98:84:33:24:29:6b:96:65:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Validity
Not Before: Jan 31 11:00:36 2025 GMT
Not After : Feb 1 11:00:36 2025 GMT
Subject: CN=d0773ca4f03c890fdb0dc6e33cef8a5bf06ae0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:be:7d:55:33:79:4a:b4:05:b6:ce:3b:26:8d:
93:6b:31:3c:05:2c:d9:3c:15:96:64:1a:5f:f7:38:
6e:df:64:cf:89:3f:08:41:82:4e:9f:8d:37:f2:47:
7a:c4:0c:44:78:52:0d:64:6e:e4:cd:e9:5e:70:c7:
5e:65:67:48:97:a2:c7:4a:b7:bc:f7:f6:b9:8e:5e:
76:39:d9:94:ee:8b:db:d8:f3:fe:b6:b8:2c:1e:2d:
53:4f:d8:44:7d:8a:1d:6f:2e:ba:b1:a0:f8:5b:69:
6d:41:43:13:5b:f7:d7:79:22:32:ab:e9:14:51:f6:
be:29:8b:d6:2a:d2:78:e4:d2:94:b6:fa:0b:fd:fb:
37:30:ff:e1:54:97:47:c1:bb:5d:f9:34:f1:70:92:
8d:83:54:56:01:3e:59:97:89:4c:0d:15:1d:58:91:
74:2b:a1:f3:49:b2:5a:97:94:3a:c3:42:02:06:7e:
75:35:b7:02:81:42:82:ff:6b:3e:c5:2a:4e:24:64:
f7:fe:94:4b:21:98:79:29:17:db:5e:da:2a:ab:a1:
59:6a:49:46:5e:2c:ae:3f:93:32:2e:49:38:b1:70:
6b:56:5b:9e:28:00:0f:0b:90:a4:55:fe:92:44:57:
29:e0:29:70:85:f1:fd:a6:dc:fa:5c:ab:2c:bb:b4:
52:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:77:3C:A4:F0:3C:89:0F:DB:0D:C6:E3:3C:EF:8A:5B:F0:6A:E0:E5
X509v3 Authority Key Identifier:
keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:93:b5:ce:8e:e8:d1:21:80:1e:b8:66:ec:19:6f:09:50:a4:
49:dd:b7:8c:37:7d:f7:af:36:1c:ad:72:05:02:aa:d1:b6:95:
c1:53:2f:be:c8:be:b8:98:5a:20:e5:d8:a7:cf:a6:e9:a6:20:
e0:5c:e5:31:0f:d7:28:84:95:50:5d:06:de:17:a6:a8:48:96:
2c:4a:17:dd:1c:83:d8:99:f6:8f:2d:f8:cd:d1:0d:ec:de:92:
ff:f2:e7:54:7f:6b:9a:11:17:26:23:b5:d6:b1:52:71:de:cd:
e7:90:0a:3f:7c:a4:71:c7:01:19:70:27:f3:db:00:9f:14:03:
fb:34:a3:1d:27:82:94:bb:93:33:8d:3f:85:dd:a1:4e:9b:4b:
af:7c:f1:8b:26:39:fd:ec:1e:f3:84:b0:dd:da:4c:32:b1:3e:
da:c0:aa:2d:fa:71:9d:40:29:64:13:c2:2c:8f:ea:a0:26:45:
97:41:78:ca:a7:21:21:95:50:c3:42:9b:54:66:5f:44:a9:cd:
e7:e9:18:d0:23:22:46:6c:5e:b4:1d:0a:e0:c8:a2:11:b1:7b:
80:6f:fe:5e:ea:20:09:86:5b:c0:44:1e:12:a6:8c:2a:e6:4f:
60:73:ea:61:76:a8:43:15:2e:8a:18:8a:96:8a:c2:c3:a8:2c:
7e:ed:26:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:23 2025 by rpki-client on console-fra.rpki-client.org