Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
File: Ol086BmggVBQCo9KLfeetwFF0Vg.mft (raw, json)
Hash identifier: huFS2WeNJFwSTe1envSE/C17WepYtVim9Ra6+ygEqqo=
Subject key identifier: DB:76:95:9B:4F:CF:F3:EA:9E:29:0C:3B:1E:1B:E8:20:3B:2F:6A:DF
Authority key identifier: 3A:5D:3C:E8:19:A0:81:50:50:0A:8F:4A:2D:F7:9E:B7:01:45:D1:58
Certificate issuer: /CN=3a5d3ce819a08150500a8f4a2df79eb70145d158
Certificate serial: 0194BAF23D70F974E5B0456AEE5389AE1AF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
Manifest number: C2
Signing time: Fri 31 Jan 2025 06:00:24 +0000
Manifest this update: Fri 31 Jan 2025 06:00:24 +0000
Manifest next update: Sat 01 Feb 2025 06:00:24 +0000
Files and hashes: 1: Ol086BmggVBQCo9KLfeetwFF0Vg.crl (hash: POEnwkrF0ol92V8uhXJ2RJHjPEqn+RuUTXJivniKPSg=)
2: P3-nPoLf6HLtGOJXHpnrHiB8Jz0.roa (hash: NsK0jdZLa6rjFdLKaavEViba3zz6REVt2o8Sgd0Ns2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:3d:70:f9:74:e5:b0:45:6a:ee:53:89:ae:1a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d3ce819a08150500a8f4a2df79eb70145d158
Validity
Not Before: Jan 31 06:00:24 2025 GMT
Not After : Feb 1 06:00:24 2025 GMT
Subject: CN=db76959b4fcff3ea9e290c3b1e1be8203b2f6adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:82:d3:ae:97:93:c9:86:c3:17:12:96:d3:ad:
41:c9:b0:39:2b:dd:47:7a:35:43:8e:60:bf:31:8b:
d7:b2:8f:22:ae:56:dd:1a:cb:30:7e:2e:9a:b2:f5:
4c:48:ef:b3:de:83:3f:86:26:e3:ba:b5:eb:08:16:
d0:9f:33:bf:6f:64:9d:e0:bd:a3:a4:9c:61:da:f0:
89:e0:5e:3d:5b:e2:9f:e9:a9:ef:c7:42:e5:12:fc:
3f:cc:53:76:47:bd:d7:56:f2:b0:e7:87:13:82:c9:
d2:b3:7e:f2:7e:f2:eb:0d:0f:9b:e5:01:ca:51:2d:
e9:af:9b:11:84:ad:8e:af:45:30:0a:e9:e2:f0:d2:
d8:5d:98:c6:d6:97:ad:1e:45:e3:a4:a9:3a:e4:b6:
6d:c4:d3:d7:34:6e:20:48:66:19:10:61:37:5e:0f:
b6:58:ba:2e:33:ff:97:a9:eb:6d:53:b9:91:f3:03:
fc:b1:7c:83:cc:9f:2b:a8:cf:55:0c:d9:71:2c:9b:
e8:b9:f0:9f:83:fb:d8:5d:d2:bb:2d:74:91:e1:2f:
20:84:3e:c8:77:1d:d3:bc:18:32:56:a6:3d:49:ff:
de:40:93:e1:1c:ac:09:83:db:57:ec:89:b9:26:f4:
67:81:66:9e:d1:81:75:b6:42:14:d1:5c:52:06:a1:
b5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:76:95:9B:4F:CF:F3:EA:9E:29:0C:3B:1E:1B:E8:20:3B:2F:6A:DF
X509v3 Authority Key Identifier:
keyid:3A:5D:3C:E8:19:A0:81:50:50:0A:8F:4A:2D:F7:9E:B7:01:45:D1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:d2:c0:b4:1c:93:ef:d9:a1:31:fb:ee:a2:f9:b6:cc:8a:c7:
7b:94:72:91:20:6f:92:3d:20:a5:3c:ae:95:8e:4d:c4:a5:1a:
09:ce:d7:09:8e:42:a5:75:06:ac:65:2f:84:7f:ec:ef:07:1a:
95:ea:83:6a:16:5f:4e:0b:e3:da:04:71:19:0d:eb:51:5a:c6:
c3:bd:e0:96:bd:9e:fe:7d:a1:34:60:f1:bc:68:ff:53:10:50:
00:18:e6:c8:36:52:98:95:ec:8c:bc:7f:0a:69:8b:24:4d:9d:
e4:75:ce:50:51:b5:27:74:53:1c:9d:5e:79:c5:b2:a9:3c:a4:
74:41:7b:b4:4b:42:1c:8b:f2:f2:b5:07:24:8f:cc:8b:37:5d:
1a:2d:0e:e0:fe:bc:f6:5a:29:c7:4b:af:4b:6e:26:3e:15:72:
b2:12:9c:5a:5e:2a:bc:f8:46:fe:cf:67:e0:c7:d6:68:a8:e7:
e3:df:bb:65:39:af:e8:f3:a6:74:98:19:3d:9d:e9:73:38:4d:
d5:40:af:40:e8:91:25:db:3f:67:c3:f5:15:c5:4a:96:b5:18:
51:8a:53:81:fd:6e:b2:8b:c4:3c:06:ec:20:e7:10:14:9c:f6:
94:cc:b1:cc:b8:99:f9:3e:98:c4:aa:64:12:7b:4e:6a:ac:aa:
37:7e:e7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:15 2025 by rpki-client on console-fra.rpki-client.org