Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
File: OX2fPb_DZTMuKCvRdqaAdURtHRs.mft (raw, json)
Hash identifier: olUFH/fu9HOUva9EsH0I1UrnhULWLtg0K43l+Dqxgng=
Subject key identifier: 03:11:0F:03:22:00:7A:FC:E1:7A:DC:57:41:15:33:19:47:BF:C7:6D
Authority key identifier: 39:7D:9F:3D:BF:C3:65:33:2E:28:2B:D1:76:A6:80:75:44:6D:1D:1B
Certificate issuer: /CN=397d9f3dbfc365332e282bd176a68075446d1d1b
Certificate serial: 0194BB605DD71837293D8A266D3F76EA78B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
Manifest number: 0E4E
Signing time: Fri 31 Jan 2025 08:00:42 +0000
Manifest this update: Fri 31 Jan 2025 08:00:42 +0000
Manifest next update: Sat 01 Feb 2025 08:00:42 +0000
Files and hashes: 1: OX2fPb_DZTMuKCvRdqaAdURtHRs.crl (hash: hXYnSqRcttl6lgHui8DTiTM0054IKuGWFvHogh4X+50=)
2: PKmiIVXi-5ieWf281G2v09ZDGMA.roa (hash: 6UbdjRvfhwNfGfOQcI0HpEZ2pxwE+yP96jeW3uJG9VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:5d:d7:18:37:29:3d:8a:26:6d:3f:76:ea:78:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397d9f3dbfc365332e282bd176a68075446d1d1b
Validity
Not Before: Jan 31 08:00:42 2025 GMT
Not After : Feb 1 08:00:42 2025 GMT
Subject: CN=03110f0322007afce17adc574115331947bfc76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e5:27:b4:fb:9b:c8:48:dc:cd:f2:4e:1f:74:
00:08:2c:4e:94:99:27:60:9b:49:d2:95:11:03:d4:
12:d5:41:8f:f5:e0:57:3c:1f:5a:c1:0b:e5:b5:4d:
81:15:b4:2f:fd:9b:19:49:8f:f7:33:89:a2:f8:30:
cc:14:71:97:22:1c:f4:2e:46:fb:21:e4:02:f5:65:
51:e9:67:27:e0:a5:54:6c:b6:3a:f2:81:2e:df:ed:
c1:59:8e:d6:a3:8c:b6:66:51:32:01:ff:eb:f9:f9:
c1:ee:2f:2f:5e:c5:e1:15:0e:40:45:ab:db:47:6c:
38:99:57:4b:7c:f5:26:17:8d:42:6e:2a:fb:06:7b:
4c:e7:29:1b:91:73:9e:57:f3:75:bc:3d:84:3e:41:
17:c8:ff:93:03:48:23:ee:37:3c:ec:65:83:84:39:
2e:55:09:a8:bb:59:af:05:f3:00:21:bd:73:46:d3:
fa:5a:32:f9:ae:ee:a7:52:87:20:93:9f:1f:41:f3:
9a:ea:30:5a:1b:db:84:c6:0f:0c:ce:bc:6a:67:e9:
74:2c:e0:e3:dc:f0:55:ce:16:6a:18:18:d1:82:92:
8b:6c:3f:1a:b7:27:5f:0c:db:1c:0e:b2:9e:c5:5c:
ca:1c:5e:fe:bd:7a:72:28:aa:a5:03:65:55:08:59:
b4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:11:0F:03:22:00:7A:FC:E1:7A:DC:57:41:15:33:19:47:BF:C7:6D
X509v3 Authority Key Identifier:
keyid:39:7D:9F:3D:BF:C3:65:33:2E:28:2B:D1:76:A6:80:75:44:6D:1D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2c:78:89:b3:3f:c7:06:01:1c:96:19:a1:ed:84:17:7f:f3:
58:e7:6e:ed:5f:6c:ed:44:bc:3d:3c:60:98:39:e1:ee:ae:e4:
b6:4f:47:d1:e4:47:ad:0b:52:26:95:0d:9d:0d:f2:7f:e5:0b:
fc:72:e4:31:48:4b:bf:15:c9:71:de:a8:cb:13:a2:ed:80:0d:
f3:e7:6e:f5:8a:25:8f:eb:c5:8a:74:7b:41:0b:15:83:a1:09:
82:23:10:25:df:ad:11:b9:80:3d:0a:02:24:97:d8:f9:90:2d:
69:81:b1:59:6d:fe:40:dc:81:f9:d0:66:12:d0:4c:89:f9:c1:
9b:4f:10:9d:70:0e:27:64:50:cf:6b:d2:84:15:5b:32:38:50:
62:b3:e9:17:3d:d7:ed:03:84:98:7c:ee:3f:a3:d8:31:6f:3c:
e9:37:06:95:68:79:9d:63:ae:19:16:24:28:73:83:8a:01:1d:
39:d6:3c:76:84:ad:5e:e9:b7:25:b0:6b:e9:0b:5a:b5:68:7d:
69:20:a6:4e:b8:82:1e:5a:4b:a4:b4:65:5e:26:d7:1e:97:f6:
eb:9d:e9:89:3b:94:a0:ba:cb:cf:93:f3:83:ae:f6:25:85:be:
08:f0:8d:6b:2f:62:fd:80:8d:e0:a6:2a:07:d0:3f:dc:7e:14:
d9:45:88:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:10 2025 by rpki-client on console-fra.rpki-client.org