Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft
File: O849R0p3XOR3Y3FjK8GWyh9Owjs.mft (raw, json)
Hash identifier: fHEq/V6dKrJ05TuMwsOJqqCBo+Bz7qs0K2v/hkUDouY=
Subject key identifier: 2C:6A:86:8C:52:B6:A5:E8:47:50:CF:D5:40:D2:08:8E:2F:03:E8:03
Authority key identifier: 3B:CE:3D:47:4A:77:5C:E4:77:63:71:63:2B:C1:96:CA:1F:4E:C2:3B
Certificate issuer: /CN=3bce3d474a775ce4776371632bc196ca1f4ec23b
Certificate serial: 0194BB29083A94A8BA27D36ABC08B4569D58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft
Manifest number: C4
Signing time: Fri 31 Jan 2025 07:00:15 +0000
Manifest this update: Fri 31 Jan 2025 07:00:15 +0000
Manifest next update: Sat 01 Feb 2025 07:00:15 +0000
Files and hashes: 1: O849R0p3XOR3Y3FjK8GWyh9Owjs.crl (hash: QWB6TQbD/L3evh1573oYIuo5L+8F1L3mUU6/St0U48o=)
2: aqZglDYGnEsB53FUZu6hOgHFRNI.roa (hash: PiTo1HXxs70zjyTF54PbMNKhREuF1Fd5QySzyhgibes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:08:3a:94:a8:ba:27:d3:6a:bc:08:b4:56:9d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bce3d474a775ce4776371632bc196ca1f4ec23b
Validity
Not Before: Jan 31 07:00:15 2025 GMT
Not After : Feb 1 07:00:15 2025 GMT
Subject: CN=2c6a868c52b6a5e84750cfd540d2088e2f03e803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cd:00:1e:1c:af:ae:f8:80:9a:ca:86:c1:0a:
75:c9:0d:1c:59:8c:ea:64:de:d4:24:5e:bd:d8:e2:
7f:2f:06:7b:a9:a1:f4:40:b5:47:07:e4:1f:d0:96:
d7:e0:10:36:15:9b:d9:3e:de:df:67:da:cf:8f:71:
a7:86:fc:f1:21:8e:e0:42:3c:ba:f3:b8:09:51:f2:
44:b9:f7:17:16:65:61:6d:05:bd:33:00:af:5a:39:
92:bc:cb:d0:1e:7d:2e:ef:4a:ff:ae:e7:93:78:5a:
7a:e7:82:22:d1:7e:be:5d:f2:f1:1e:c7:6c:55:3e:
a5:34:c2:be:8d:7f:24:79:6f:64:ce:4d:5f:0a:57:
ce:95:11:b7:9f:78:51:00:62:6d:2e:62:8d:73:4c:
a9:74:45:53:1e:29:d5:18:7b:83:45:2d:ca:24:e0:
74:11:e5:c8:f9:b6:05:53:22:89:ed:91:ad:0b:eb:
91:9c:15:73:b7:1f:c0:e7:5d:52:e0:14:dd:a3:6f:
a0:71:6b:4c:5f:99:69:40:e0:9f:6a:0b:69:77:37:
e5:df:48:7f:18:7e:25:e2:ee:5b:95:4c:a6:bc:99:
00:87:1e:33:ef:1e:a4:12:8a:1e:40:33:98:24:a8:
15:a5:3e:71:be:e8:20:4a:30:7b:49:cf:e3:c7:dd:
71:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6A:86:8C:52:B6:A5:E8:47:50:CF:D5:40:D2:08:8E:2F:03:E8:03
X509v3 Authority Key Identifier:
keyid:3B:CE:3D:47:4A:77:5C:E4:77:63:71:63:2B:C1:96:CA:1F:4E:C2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0a:4b:7e:45:ab:c8:31:88:3d:75:22:37:77:f5:fb:08:8c:
5c:2e:31:3e:ac:83:98:83:f1:be:e1:92:a3:1a:4e:48:b8:a4:
88:3d:72:bd:07:3d:ae:fe:32:0f:16:2d:c5:70:47:c9:c2:84:
1d:94:df:60:e7:c9:cd:ef:fb:7e:1f:3c:d3:0f:d8:8a:de:f1:
09:f5:c4:9c:fa:29:13:4f:46:36:52:c0:40:ef:9c:ee:9a:c6:
7f:d1:94:61:ce:1e:ba:8d:53:51:f6:39:64:92:8e:ef:fc:26:
07:9c:a5:3e:eb:ff:f8:90:6c:76:42:6b:8c:ac:a1:6a:8b:b5:
a8:d1:76:a1:b4:a5:13:bc:89:d2:dd:40:c6:84:a5:76:df:b0:
85:57:29:e2:cd:32:1a:4f:44:fb:a8:d6:e5:5f:41:c0:24:33:
da:12:7f:8c:99:eb:f6:0e:41:c8:cf:20:30:1e:82:87:b6:a7:
6b:bc:d3:d9:eb:9a:97:0c:dd:a6:68:7d:52:b4:e2:ae:9b:a8:
3f:e6:7e:07:b0:2a:77:a7:32:74:c0:28:ba:1a:cf:1a:78:d5:
17:06:9f:ff:13:31:95:35:f6:b9:2b:26:02:4b:33:42:e8:43:
b4:e7:44:f5:b2:06:78:69:2d:94:41:f9:8d:e8:ab:6d:88:b1:
4b:ed:a6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:36 2025 by rpki-client on console-fra.rpki-client.org