Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
File: Okj-BwTkrJXjpw6VvrhEJcMWua0.mft (raw, json)
Hash identifier: Gq+gqSCF+7u+1KPRuJQX3EeSheMvSGf58slKtipH7v8=
Subject key identifier: 53:ED:01:AD:A6:68:B9:32:CB:C9:39:11:76:C4:EF:E5:B7:A6:C6:80
Authority key identifier: 3A:48:FE:07:04:E4:AC:95:E3:A7:0E:95:BE:B8:44:25:C3:16:B9:AD
Certificate issuer: /CN=3a48fe0704e4ac95e3a70e95beb84425c316b9ad
Certificate serial: 0194BABB2EC0F1247614680A17527840E18D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
Manifest number: 0F43
Signing time: Fri 31 Jan 2025 05:00:16 +0000
Manifest this update: Fri 31 Jan 2025 05:00:16 +0000
Manifest next update: Sat 01 Feb 2025 05:00:16 +0000
Files and hashes: 1: Okj-BwTkrJXjpw6VvrhEJcMWua0.crl (hash: PmF9i/2sp6G5ZZd+eEU09JtVOFMimNQEYuOa1u8fQeE=)
2: jBg4c1TddaMZ79OO2ACO6rgKQkE.roa (hash: vxMjeBuQHvoGxQ3EbvzgsnvZ7fj/adVRxxvAS0tcfsE=)
3: yN3-coe-yJTzFymhuWAPFUYAkF4.roa (hash: IPNSpgYWxN2jcOf0NhOGeg6e+K9d2+ZzIVVpZsFLZDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:2e:c0:f1:24:76:14:68:0a:17:52:78:40:e1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48fe0704e4ac95e3a70e95beb84425c316b9ad
Validity
Not Before: Jan 31 05:00:16 2025 GMT
Not After : Feb 1 05:00:16 2025 GMT
Subject: CN=53ed01ada668b932cbc9391176c4efe5b7a6c680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8d:5b:0c:1f:60:0a:54:f3:e9:49:44:6e:6a:
b0:54:be:4a:dd:92:08:77:77:3c:52:27:d6:e6:64:
ce:3b:c4:da:55:b3:ba:a9:da:6a:86:94:6e:9b:02:
04:0f:e2:7f:9b:81:c5:06:40:68:71:fb:08:c6:b1:
02:62:27:56:60:e4:82:a3:50:b4:86:7c:3d:2f:05:
02:5e:91:e6:97:6e:54:f7:84:23:cb:1b:d6:95:6a:
96:c6:59:ac:61:3a:f6:65:97:c1:a2:b8:08:b3:1a:
95:f4:3f:3f:2f:f7:7e:ca:03:8c:03:56:f7:13:12:
d3:b9:9d:e7:af:82:37:a2:64:3a:31:02:93:c5:76:
b2:c8:67:53:64:74:d1:84:77:ff:3a:a8:1e:a1:e0:
02:c7:7b:06:73:1c:cb:85:d4:cf:78:98:ca:67:8f:
44:80:69:68:fa:b4:ed:6b:c8:06:bf:99:c0:78:5c:
0f:af:e3:c5:c5:61:ce:00:3b:ad:25:8a:86:f7:2c:
d9:d8:ca:40:3d:10:24:d6:d5:13:ec:1d:43:dc:d4:
df:90:d5:0c:2c:09:f6:b9:8a:fd:7a:d5:40:e9:cc:
92:86:9d:e2:15:6d:ef:c3:f9:53:45:0d:42:5f:0a:
cc:aa:15:9f:9a:69:a1:66:7c:88:78:ad:57:73:aa:
04:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:ED:01:AD:A6:68:B9:32:CB:C9:39:11:76:C4:EF:E5:B7:A6:C6:80
X509v3 Authority Key Identifier:
keyid:3A:48:FE:07:04:E4:AC:95:E3:A7:0E:95:BE:B8:44:25:C3:16:B9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:84:b9:99:a4:46:29:72:ba:bc:87:7f:db:3b:0d:30:30:32:
9b:88:c2:5a:b5:fc:c9:29:8b:aa:6f:4a:77:71:f2:ae:2d:bd:
ce:83:9f:54:6e:68:54:25:f0:e2:d0:08:47:ee:7c:2d:df:a7:
d4:2f:67:0f:7d:29:51:ed:9b:71:fe:30:f7:c3:6b:a8:81:a4:
33:a9:1a:2b:18:a1:47:02:f4:56:ef:ed:6c:d5:38:86:cc:e9:
30:2a:3b:48:29:19:e7:67:8b:00:bb:2e:e4:da:f0:84:d9:c5:
3b:01:0b:90:ce:80:fb:94:ed:84:e1:a5:01:70:06:92:0e:61:
aa:7e:e6:4f:66:cc:75:59:6b:09:cc:60:c5:5c:50:07:89:44:
70:f3:dd:41:e2:e6:30:1c:5b:0c:03:5c:17:38:58:9b:d3:c0:
e9:4f:1b:51:d6:5e:be:3f:95:46:60:3b:b5:8c:89:ce:8e:92:
89:54:f5:9b:85:24:d8:1c:29:49:66:a9:bb:3e:8e:c4:91:98:
2d:5e:70:60:20:8f:b8:ad:2c:17:3f:02:b5:21:c8:87:41:3e:
74:df:2d:f1:21:49:30:f5:a5:41:a7:23:76:b7:e4:ef:65:ff:
e6:55:9a:a1:b7:a9:0f:43:28:85:83:8a:56:3f:da:2f:d1:65:
05:b7:0b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:26 2025 by rpki-client on console-fra.rpki-client.org