Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft
File: O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft (raw, json)
Hash identifier: hF3j6XystvkO12rIg6P/LBIAkILS74OYH2Y6rpgivCw=
Subject key identifier: 3C:88:6B:66:E6:D0:EE:E8:2B:71:40:8F:28:32:23:7D:3B:11:57:C7
Authority key identifier: 3B:77:8C:7E:0E:59:83:25:27:34:7C:2E:21:1F:C4:8C:54:71:08:CF
Certificate issuer: /CN=3b778c7e0e59832527347c2e211fc48c547108cf
Certificate serial: 0194BA848C6FEE678D74E006707121895057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft
Manifest number: 040B
Signing time: Fri 31 Jan 2025 04:00:36 +0000
Manifest this update: Fri 31 Jan 2025 04:00:36 +0000
Manifest next update: Sat 01 Feb 2025 04:00:36 +0000
Files and hashes: 1: O3eMfg5ZgyUnNHwuIR_EjFRxCM8.crl (hash: ytyS3Kt0R7O8CrbCvJuZAkENVCxiFAtnc2DV/LhH8kQ=)
2: o2x3XOFjpyXp0a8ZF3YUMEZhNmk.roa (hash: EInA3F+cdzhiSEh4Cbcxk6l2zqAf00tJgnQUKeSBqLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:8c:6f:ee:67:8d:74:e0:06:70:71:21:89:50:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b778c7e0e59832527347c2e211fc48c547108cf
Validity
Not Before: Jan 31 04:00:36 2025 GMT
Not After : Feb 1 04:00:36 2025 GMT
Subject: CN=3c886b66e6d0eee82b71408f2832237d3b1157c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3f:97:b7:a6:68:61:b6:c5:48:bb:f0:c2:c1:
d5:9b:93:a2:0a:8a:2e:f8:e6:d9:a8:bb:4c:de:b2:
20:cb:43:cb:e7:d2:d5:95:4b:a7:98:fd:9c:6b:99:
e9:21:02:7e:45:43:d8:d3:eb:0a:20:3c:ea:6b:7e:
30:c1:cf:f8:80:bc:53:e3:d4:cb:c0:56:d6:28:32:
a1:8f:42:84:2f:63:83:9d:e4:6a:38:58:db:84:ca:
47:46:6d:4e:57:59:74:3e:57:11:96:37:e6:b5:f2:
5a:e6:c9:5d:f7:17:04:85:b1:a2:63:e8:3d:0d:ce:
33:d8:97:ee:97:ba:f6:61:ec:d4:67:48:42:0c:a1:
9e:ca:57:ab:84:1b:73:32:2d:db:95:1e:37:77:ef:
80:79:a6:ec:b3:47:d9:5d:89:6c:33:50:98:24:b2:
42:a3:50:6d:b6:d6:b7:1a:c2:96:a6:cc:0d:fa:75:
f5:d0:ba:3d:e6:e2:89:85:48:77:a3:b5:4a:66:62:
3a:5e:fe:c2:04:22:94:10:73:ef:08:95:8f:63:c3:
77:ef:58:67:bc:64:13:78:66:a5:ac:3a:7c:87:62:
03:a1:36:00:ff:ad:22:75:1e:b4:e1:c3:33:9b:1d:
aa:d9:97:81:3f:3b:2b:1e:c8:64:c6:ed:ec:89:fa:
e0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:88:6B:66:E6:D0:EE:E8:2B:71:40:8F:28:32:23:7D:3B:11:57:C7
X509v3 Authority Key Identifier:
keyid:3B:77:8C:7E:0E:59:83:25:27:34:7C:2E:21:1F:C4:8C:54:71:08:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2b:4b:bb:24:57:eb:2a:4f:4b:ed:ae:f8:06:41:cd:74:6b:
43:3c:2a:68:f7:c9:cf:29:85:47:78:84:7a:0f:30:c4:1e:43:
20:7c:32:c5:cb:d4:22:d5:59:a5:87:50:e1:65:7b:92:97:18:
f2:43:ed:ac:34:c4:63:5d:f0:b3:ff:0a:1f:68:bd:4d:46:b5:
52:59:32:b3:29:0b:63:21:8a:22:b6:6e:5c:c8:31:89:9d:66:
d7:21:4e:8c:73:ae:a2:47:2c:83:0e:0e:dc:aa:22:7c:ac:dc:
39:14:4d:ba:44:c3:bc:e0:76:d8:0b:e9:3a:3c:30:a6:d6:33:
36:8f:d7:cb:a9:51:44:3d:06:d1:83:49:7b:47:a9:92:9b:17:
82:7a:0e:22:d8:28:93:e6:19:98:d9:0b:7c:49:e0:f5:d1:3a:
58:b9:b3:32:79:66:16:af:0a:8c:51:0f:ca:fc:79:95:df:9c:
57:33:62:b6:2e:a3:b5:bc:4c:2d:29:96:d4:3d:8e:af:53:29:
5e:1e:61:50:06:1f:7e:94:40:2c:7d:e0:e2:ac:df:b4:b5:df:
4d:58:34:39:79:b9:b5:d5:03:2f:86:53:a0:e7:98:6e:35:a2:
7f:12:05:c2:38:13:5c:e8:46:85:70:33:d0:04:59:a9:66:e1:
a2:54:ae:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:18 2025 by rpki-client on console-fra.rpki-client.org