Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
File: oBocfbuaFXGlv0kkqz_FBJMUX08.mft (raw, json)
Hash identifier: dweFFH143wLseihBep5L0XRigFHsgQ5V3Lf+INZAo8E=
Subject key identifier: 6D:76:FC:5B:0B:77:57:7B:51:69:A9:78:33:84:0D:3B:E9:42:43:67
Authority key identifier: A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F
Certificate issuer: /CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
Certificate serial: 0194C5083E56ACCD8C65E881D929E54C0E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
Manifest number: 0528
Signing time: Sun 02 Feb 2025 05:00:39 +0000
Manifest this update: Sun 02 Feb 2025 05:00:39 +0000
Manifest next update: Mon 03 Feb 2025 05:00:39 +0000
Files and hashes: 1: oBocfbuaFXGlv0kkqz_FBJMUX08.crl (hash: YWHBvvXGRCDUzORGHYIXebJGkT2keIwwk5q+r4afpaM=)
2: tpA0Rm1FAiRRJ_o4IXCI2w9XuPk.roa (hash: zwhvufu3pCnK7pPMp4eZFrdISltUdwm1mGEs0/GHH0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:08:3e:56:ac:cd:8c:65:e8:81:d9:29:e5:4c:0e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
Validity
Not Before: Feb 2 05:00:39 2025 GMT
Not After : Feb 3 05:00:39 2025 GMT
Subject: CN=6d76fc5b0b77577b5169a97833840d3be9424367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6f:fe:bc:d7:db:5c:99:12:19:cd:d2:35:8f:
ec:de:fc:aa:35:ad:40:ca:91:58:1d:ff:e7:60:21:
6a:6d:fe:67:df:0b:3f:a6:46:36:e6:ed:28:6d:9e:
08:05:58:8c:71:2b:39:25:32:7f:fd:90:75:a9:be:
71:27:39:ad:fb:ee:4a:f2:25:86:c9:81:98:ec:f6:
1b:3f:08:b5:5b:fe:2e:2b:7c:fc:96:65:cf:74:71:
99:70:45:ba:d4:b9:c8:72:3c:16:45:cf:f7:8f:c5:
4e:83:51:47:30:92:0b:9d:8d:a5:94:7a:41:70:a3:
d4:2e:55:96:90:ff:99:a5:7e:da:c5:49:06:ac:17:
84:23:01:77:f5:bf:57:50:5a:41:5f:a9:9b:ae:7b:
c9:04:5b:10:f4:52:66:49:0d:ad:bd:58:74:ba:78:
58:8b:13:fa:d4:76:3f:2c:46:5a:9f:6a:e0:f2:20:
12:ac:12:0a:ae:7a:43:27:2f:23:24:b4:86:c7:bf:
22:f8:0f:3a:14:f2:33:00:48:e7:d2:7e:31:7a:9d:
01:92:b8:ea:42:bf:58:e2:67:50:36:ab:1a:63:75:
0e:a6:c4:a6:01:0a:f7:14:e1:c4:26:2d:54:e4:da:
ae:cb:24:64:5e:00:9c:d4:df:ea:41:a6:d9:f4:e8:
c8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:76:FC:5B:0B:77:57:7B:51:69:A9:78:33:84:0D:3B:E9:42:43:67
X509v3 Authority Key Identifier:
keyid:A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e9:90:54:63:18:ba:b0:be:d0:1e:4b:fa:f9:47:bd:73:ad:
19:3f:65:19:6a:18:48:08:2f:9d:49:19:d6:ef:00:4b:45:c1:
5c:b7:e0:0d:88:13:60:93:b5:77:a9:95:8a:1c:1f:07:24:ab:
f2:7d:20:1e:30:98:35:4f:a0:83:6f:cf:c1:62:55:72:a7:ff:
81:fb:fe:71:ad:06:78:0d:65:44:20:e3:25:be:e8:93:fb:54:
b9:28:29:a5:53:52:37:05:90:67:4c:ab:bc:9f:d5:0b:39:30:
51:c9:69:b6:52:06:80:e7:00:85:c6:48:38:88:d3:71:29:43:
b9:76:57:90:ce:27:1e:a4:ac:23:a5:0c:b7:e8:dc:b3:21:f8:
71:fc:75:17:cf:8c:dc:51:d6:42:d8:0b:aa:1f:0a:81:b3:b3:
8e:e3:4c:65:96:47:ff:2c:c3:e2:9b:29:a2:d1:c9:07:f7:f0:
96:36:09:10:f2:87:2c:1a:1a:bc:41:88:bf:00:25:7e:35:da:
59:c6:e8:1a:98:97:52:f7:7f:d0:fb:de:25:be:20:fc:be:ca:
f8:3b:70:87:c4:a7:52:2d:eb:45:a5:07:30:66:4c:95:6e:9d:
bb:22:ac:97:d6:0f:6b:06:6c:78:7b:8f:eb:d0:b7:44:c5:64:
8a:03:c7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:03:47 2025 by rpki-client