Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
File: oktI7cejJdfxrg8lfA4oNRcbya4.mft (raw, json)
Hash identifier: mEL+nJc1ljfQ0JZOki6xLYEKa4qNvxWxDQELSi0qPXM=
Subject key identifier: 8E:0C:0D:86:B3:D7:1D:80:CE:6E:A8:1F:40:72:3B:61:57:67:5D:42
Authority key identifier: A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
Certificate issuer: /CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Certificate serial: 0194BB5FF63219C293A5E38D115F5962499C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 08:00:15 +0000
Manifest this update: Fri 31 Jan 2025 08:00:15 +0000
Manifest next update: Sat 01 Feb 2025 08:00:15 +0000
Files and hashes: 1: B0JGrIFbhcfZ9k0gLZbKOC7BRts.roa (hash: uan7Xlr3tx5QNJHwIPILAsu/3eaM2Ksrcs3oBa0JKWg=)
2: B6qJHXpeC3IEJy34_URs46RdWiA.roa (hash: toHD5hhCltD6s8AbgpGot0TJcoWUl/7kkl/+KkMGZ/I=)
3: X5BI_4m66OA1gTOSPBNCsDRd-Pw.roa (hash: 3oZT1fDyGLqNouLkyRSol/W9I5a1RPKZknAigOCTTYM=)
4: oktI7cejJdfxrg8lfA4oNRcbya4.crl (hash: IUXwSh4oCgo8IOI2o08jSaGN5qPLm8946vjsoknyDJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:f6:32:19:c2:93:a5:e3:8d:11:5f:59:62:49:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Validity
Not Before: Jan 31 08:00:15 2025 GMT
Not After : Feb 1 08:00:15 2025 GMT
Subject: CN=8e0c0d86b3d71d80ce6ea81f40723b6157675d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:70:3b:09:9b:43:d0:b8:78:22:96:cd:9f:03:
87:98:1a:64:8c:6e:d6:13:6e:bf:f2:b6:bc:31:49:
1a:20:a3:58:29:3d:e5:9b:e5:7c:a2:ff:ec:fe:3d:
5f:b3:32:e4:ff:ee:34:48:fd:35:fd:10:25:52:42:
71:39:b5:96:d0:6a:a2:4f:3b:27:6e:09:2e:3e:d5:
d4:c1:10:a1:f6:9f:91:e5:fc:5d:93:01:50:eb:e5:
11:69:50:44:72:dc:60:42:06:5d:50:61:16:b3:c4:
85:73:6b:60:89:ed:4e:d9:d1:75:65:31:8f:e1:c0:
d1:d3:a0:62:72:ca:c6:1a:6b:09:94:c1:be:db:3b:
29:74:d4:98:7a:ed:e0:6d:75:8d:38:c9:4c:56:dc:
bd:af:71:c6:99:4e:61:69:5c:d9:2a:d9:e5:1d:94:
27:6c:fb:29:b4:f5:11:08:38:3a:48:f5:e0:ed:7a:
7d:df:02:da:14:3b:39:71:95:15:22:73:6a:0c:ce:
78:6c:36:2d:a2:f2:8c:95:1f:57:b1:b1:55:a2:dd:
25:e4:19:c9:ff:2d:4d:df:fa:4c:16:b3:08:d6:f4:
84:9e:6a:84:73:40:4a:99:b3:1f:6e:b1:d6:2a:04:
ed:f0:73:93:c2:a7:cd:8c:2b:0d:65:71:d8:ff:06:
79:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0C:0D:86:B3:D7:1D:80:CE:6E:A8:1F:40:72:3B:61:57:67:5D:42
X509v3 Authority Key Identifier:
keyid:A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:99:28:74:d4:7d:cb:90:c8:09:bd:2c:56:59:23:08:2f:dc:
ba:3d:7c:74:71:d5:8f:98:ea:95:e8:73:b2:a8:f9:fb:e4:ae:
93:55:cc:11:a7:8e:fb:03:60:64:cb:e6:36:92:3c:dc:07:94:
73:41:29:44:87:1a:07:37:e3:0e:e3:e4:1b:3d:1b:a4:9a:ad:
a8:0a:9f:2a:5c:00:59:10:7f:0c:50:4d:c3:45:5f:f4:33:97:
75:ee:c3:c2:ce:e1:1a:2e:bf:12:73:e7:7a:52:e5:79:c4:43:
4d:f4:d2:32:e2:83:83:87:25:2c:5e:74:48:21:d4:6e:5d:0d:
b7:45:93:e7:f8:3b:dc:25:cf:6a:71:4b:ed:51:97:6b:10:6a:
6b:f8:b3:e4:2e:44:32:ad:37:c6:4e:37:25:7f:b1:7b:50:0c:
3e:5e:0e:61:1b:f6:01:0c:6a:ff:ba:de:31:dc:b0:36:23:2a:
64:f3:18:e7:d8:86:4c:09:97:45:3f:5b:83:6b:21:72:18:cb:
17:2f:8b:a8:11:f9:40:39:7a:ad:b1:a0:3c:f3:aa:be:7e:89:
c7:48:9b:df:1d:29:69:41:9b:6b:6d:95:d2:9c:c6:f2:ad:55:
aa:25:d2:10:e6:e8:21:81:a8:82:f7:9b:0c:d2:81:9e:8a:e3:
22:46:6e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:37 2025 by rpki-client on console-fra.rpki-client.org