Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8f73d4-560d-4193-a7bb-3e37bacdae0d/1/OmqMuD6zZTfKf_csW07WqNKtpMQ.mft
File: OmqMuD6zZTfKf_csW07WqNKtpMQ.mft (raw, json)
Hash identifier: Zv3gwu+5hGXuAgc0lm6OPI4eiMqf2LolRBHHS6CPCpY=
Subject key identifier: 4E:70:FB:7C:28:C1:8B:67:2C:29:2F:5C:9C:A6:B5:C8:0A:02:3C:3E
Authority key identifier: 3A:6A:8C:B8:3E:B3:65:37:CA:7F:F7:2C:5B:4E:D6:A8:D2:AD:A4:C4
Certificate issuer: /CN=3a6a8cb83eb36537ca7ff72c5b4ed6a8d2ada4c4
Certificate serial: 0194C4D10F760FC344FA3A5EA592E78E7DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmqMuD6zZTfKf_csW07WqNKtpMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8f73d4-560d-4193-a7bb-3e37bacdae0d/1/OmqMuD6zZTfKf_csW07WqNKtpMQ.mft
Manifest number: 0B8F
Signing time: Sun 02 Feb 2025 04:00:22 +0000
Manifest this update: Sun 02 Feb 2025 04:00:22 +0000
Manifest next update: Mon 03 Feb 2025 04:00:22 +0000
Files and hashes: 1: OmqMuD6zZTfKf_csW07WqNKtpMQ.crl (hash: bcmxHzh36bVLnx58phs6XNtNZggdzVI1UWgAu3h+M7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8f73d4-560d-4193-a7bb-3e37bacdae0d/1/OmqMuD6zZTfKf_csW07WqNKtpMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/8f73d4-560d-4193-a7bb-3e37bacdae0d/1/OmqMuD6zZTfKf_csW07WqNKtpMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OmqMuD6zZTfKf_csW07WqNKtpMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:0f:76:0f:c3:44:fa:3a:5e:a5:92:e7:8e:7d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a6a8cb83eb36537ca7ff72c5b4ed6a8d2ada4c4
Validity
Not Before: Feb 2 04:00:22 2025 GMT
Not After : Feb 3 04:00:22 2025 GMT
Subject: CN=4e70fb7c28c18b672c292f5c9ca6b5c80a023c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:25:3c:72:5e:2c:ed:e7:54:81:d9:ba:1f:33:
3b:5b:c4:4a:57:4e:b9:11:fa:cf:20:8f:28:ed:18:
a2:5a:cd:96:8c:07:3a:30:61:8a:f5:c6:fb:d3:b9:
9d:99:7a:f5:96:30:cc:4d:ba:42:04:1d:e4:22:da:
b5:34:e1:09:05:0c:81:14:f5:6b:cd:83:89:f0:4d:
15:70:e0:af:a2:7a:1d:81:f1:a5:c4:a8:74:d2:68:
99:4e:18:bb:91:6f:97:9f:6c:74:85:03:62:59:c3:
46:34:b7:60:0f:d9:e0:0c:3b:41:c9:80:19:e9:da:
97:5b:b9:06:e3:19:11:96:88:b9:94:f9:5f:18:95:
d6:57:f4:96:89:a1:c1:d9:f1:11:3c:6b:ed:f6:23:
be:8a:a7:e9:b5:4b:18:0d:64:2a:fb:ad:eb:4e:a3:
2b:8b:66:e2:95:19:e2:c5:fc:ba:bf:ce:d2:26:4c:
be:58:b9:e1:c9:eb:42:a2:75:fe:9e:2b:a3:05:68:
1a:d2:c2:b9:ba:d9:4a:c0:ff:ec:68:f4:eb:77:1e:
6d:d7:74:58:37:f3:ea:a4:10:74:fb:57:1d:71:7a:
c4:a1:b5:05:12:e3:48:5d:ce:e4:9c:08:15:1c:9b:
e5:f1:77:6f:4a:50:9f:fc:2b:f3:99:a2:6e:9a:41:
5c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:70:FB:7C:28:C1:8B:67:2C:29:2F:5C:9C:A6:B5:C8:0A:02:3C:3E
X509v3 Authority Key Identifier:
keyid:3A:6A:8C:B8:3E:B3:65:37:CA:7F:F7:2C:5B:4E:D6:A8:D2:AD:A4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmqMuD6zZTfKf_csW07WqNKtpMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8f73d4-560d-4193-a7bb-3e37bacdae0d/1/OmqMuD6zZTfKf_csW07WqNKtpMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8f73d4-560d-4193-a7bb-3e37bacdae0d/1/OmqMuD6zZTfKf_csW07WqNKtpMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9c:81:63:8c:ab:2b:d7:0b:7a:69:55:2e:a6:28:ae:b5:5d:
80:f3:bf:57:58:0a:f1:22:a9:a9:c5:99:c0:89:26:86:2c:b0:
9d:6b:34:98:7f:8f:14:f8:5e:f6:a7:92:aa:24:b6:63:e1:15:
7f:87:9a:67:42:61:3c:2a:ae:af:16:02:1c:e8:6d:be:45:12:
86:1f:6f:f5:aa:ff:58:35:2d:ce:5b:e0:16:a9:81:3f:fc:00:
bf:67:06:44:9f:2b:16:13:85:ad:f7:c1:da:1f:0a:87:25:e8:
67:53:37:cb:32:bd:d8:55:3e:31:ce:10:49:fc:65:de:56:ca:
89:b3:58:7d:96:ef:8f:70:ce:c4:92:a1:9e:e7:02:11:92:73:
3e:ab:38:5d:c6:21:ca:db:16:08:84:26:38:78:bb:5e:69:62:
70:69:20:98:23:27:60:29:1d:38:b8:11:b3:25:b4:8b:e3:77:
d6:eb:8f:f2:c8:7f:5c:97:37:08:e9:fe:3e:f2:08:b0:ca:6a:
9a:ac:63:b0:3f:cd:ff:34:96:1c:21:bb:11:2d:63:f6:69:ce:
17:b4:32:d2:7c:61:82:4c:83:f1:b8:17:58:68:32:48:dc:2a:
61:a3:a8:a3:f1:63:7d:f6:b5:85:7f:75:f9:8a:7a:23:e7:bd:
cf:ad:75:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:08:49 2025 by rpki-client