Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
File: oaLRWp2N_ezej-awwYBNCp7i5ig.mft (raw, json)
Hash identifier: Nry0nAvO76vj64+4evdJydRQgNX3O2o7KVrfZ6C/ZG8=
Subject key identifier: 4C:79:0C:EC:F4:A7:F3:08:64:E6:F9:17:B9:2E:3B:9D:56:D0:63:DB
Authority key identifier: A1:A2:D1:5A:9D:8D:FD:EC:DE:8F:E6:B0:C1:80:4D:0A:9E:E2:E6:28
Certificate issuer: /CN=a1a2d15a9d8dfdecde8fe6b0c1804d0a9ee2e628
Certificate serial: 0194BB5FF39AEDE1DC9A295F1575D61CFDD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
Manifest number: 0EC4
Signing time: Fri 31 Jan 2025 08:00:15 +0000
Manifest this update: Fri 31 Jan 2025 08:00:15 +0000
Manifest next update: Sat 01 Feb 2025 08:00:15 +0000
Files and hashes: 1: g8PGSyPYHcwtTKtN52pgkwL2VLw.roa (hash: d/0R1T8TL/elS7S9V2dPYN7wq40xN73ObdYQKEckxT4=)
2: oaLRWp2N_ezej-awwYBNCp7i5ig.crl (hash: rZaR321QKvU188MGHa1aiOvBoq/iKIlcz00srYx4daI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:f3:9a:ed:e1:dc:9a:29:5f:15:75:d6:1c:fd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a2d15a9d8dfdecde8fe6b0c1804d0a9ee2e628
Validity
Not Before: Jan 31 08:00:15 2025 GMT
Not After : Feb 1 08:00:15 2025 GMT
Subject: CN=4c790cecf4a7f30864e6f917b92e3b9d56d063db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d1:ec:f5:9b:e5:68:06:d6:90:83:1a:2e:78:
b6:e4:cf:a2:95:51:f0:cc:99:fd:df:ad:09:c7:57:
00:80:13:0f:a4:39:a8:59:6d:94:43:30:f1:d1:e0:
a8:88:5e:aa:a5:19:41:e2:52:d9:af:0d:29:59:56:
99:1d:33:e9:f0:bf:e4:7c:3e:ea:5f:01:4d:c5:52:
c6:a0:4f:61:01:33:51:f5:b0:e4:2a:99:9e:19:b4:
49:f9:8e:9c:92:dc:67:81:28:5c:af:ff:b0:65:38:
9f:21:d1:b7:5e:77:f2:da:74:1e:96:23:f5:11:1c:
9f:36:7e:fb:c1:a1:47:de:c8:ad:15:06:86:24:72:
fb:00:65:38:53:bf:56:eb:75:f9:15:25:9f:9f:a1:
04:dc:eb:23:c8:5d:0e:82:ac:93:39:5e:95:e8:73:
43:43:f7:89:09:31:95:be:3f:13:17:46:4b:34:55:
b6:4e:20:31:43:92:53:8d:4a:b3:a1:1e:ea:81:7a:
12:c1:be:14:95:0c:cf:81:61:f7:95:31:00:65:cb:
32:85:a7:2a:e9:19:29:69:96:3c:5a:0e:2b:25:6f:
d7:11:3f:de:33:09:ae:69:b7:ec:48:6f:a3:1b:6b:
72:c8:81:a5:1c:b9:28:5f:4b:69:17:15:32:b5:50:
5b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:79:0C:EC:F4:A7:F3:08:64:E6:F9:17:B9:2E:3B:9D:56:D0:63:DB
X509v3 Authority Key Identifier:
keyid:A1:A2:D1:5A:9D:8D:FD:EC:DE:8F:E6:B0:C1:80:4D:0A:9E:E2:E6:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:30:93:d7:81:d9:b1:3d:32:4e:89:fa:5e:be:7c:9a:3a:7c:
b3:4e:56:cd:dc:2d:f4:76:e8:f0:bd:57:59:cc:64:f6:06:4c:
18:d5:98:4a:1b:cd:13:ee:4a:7f:51:c4:80:c3:89:ba:04:85:
d0:53:e8:13:6b:a7:93:b6:06:02:3b:08:9b:a1:9d:5f:7f:b0:
ab:71:bd:ca:49:a7:7d:a7:40:dd:55:df:dd:f3:7e:e3:32:1e:
dd:83:8f:f2:47:33:37:0f:ce:8a:7a:2f:9b:ef:00:dd:7e:2c:
9e:3c:bf:68:4b:b3:be:0f:af:2a:90:37:28:2e:bd:60:0d:73:
01:61:d3:3d:b8:e1:0a:89:10:e3:35:46:d1:de:9b:1d:1b:91:
59:70:25:8a:89:3f:52:0d:50:64:c1:18:87:2d:8e:ac:69:76:
a5:b9:20:61:7f:56:bf:d0:65:09:19:53:89:6e:60:ff:5b:43:
d8:2d:3c:bf:1a:be:e9:a3:bc:76:c0:c2:51:5e:a9:61:17:9c:
4e:22:40:90:da:83:0f:8f:92:02:b4:bc:fc:38:c3:2c:cb:ad:
fb:97:d9:67:16:e1:13:57:90:57:0c:30:d6:28:59:09:64:7f:
1a:16:44:0a:0f:ec:f1:bb:02:36:67:d6:62:32:df:4c:93:52:
b7:e9:81:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:26 2025 by rpki-client on console-fra.rpki-client.org