Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft
File: ozMRTL_Gv2aDccVofumKRC_Y6jY.mft (raw, json)
Hash identifier: 3rBLDfXXJ6/WniODREQhK/9tereF2qPxA6vozpjcTEw=
Subject key identifier: FB:AF:79:59:C2:B5:B5:58:7E:0E:F8:21:EB:1D:2C:FB:47:80:40:37
Authority key identifier: A3:33:11:4C:BF:C6:BF:66:83:71:C5:68:7E:E9:8A:44:2F:D8:EA:36
Certificate issuer: /CN=a333114cbfc6bf668371c5687ee98a442fd8ea36
Certificate serial: 0194BA842392431021D64DAF86AC994D4811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 04:00:09 +0000
Manifest this update: Fri 31 Jan 2025 04:00:09 +0000
Manifest next update: Sat 01 Feb 2025 04:00:09 +0000
Files and hashes: 1: TfTonluQfmH78OzaVxkJLWOPrQc.roa (hash: o/+GwvpVj7XMHL42Lw0eZWO0sJVLD6s9aZvEqCfH3Ic=)
2: ozMRTL_Gv2aDccVofumKRC_Y6jY.crl (hash: +7Iox73MMdUxpXtA/xQ6TZ6S5bTX0fy6zuVGWYyEdpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:23:92:43:10:21:d6:4d:af:86:ac:99:4d:48:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a333114cbfc6bf668371c5687ee98a442fd8ea36
Validity
Not Before: Jan 31 04:00:09 2025 GMT
Not After : Feb 1 04:00:09 2025 GMT
Subject: CN=fbaf7959c2b5b5587e0ef821eb1d2cfb47804037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0e:a0:43:f7:53:b2:05:16:c9:4e:d9:8d:9b:
46:05:1e:f1:90:1c:4d:d9:8d:34:32:f9:d3:07:f0:
80:a3:f6:8d:64:2d:96:eb:5d:fc:7d:d2:db:4b:28:
b1:cf:95:a6:71:9c:a6:51:11:31:bc:c0:ea:fe:15:
b7:3a:de:31:c2:97:67:56:2a:c5:c3:1e:24:12:c9:
7e:5f:cc:e6:8a:b3:34:39:4a:96:bb:a4:54:3a:02:
1b:d0:19:f6:3a:cd:35:0d:72:33:fe:2e:26:06:b2:
86:fa:d0:b4:4f:bb:1c:49:4d:8f:51:fb:fc:ae:8b:
82:66:73:eb:b5:34:3a:28:f4:44:5e:d5:b1:5c:1b:
f3:16:6a:c8:09:a7:51:b5:71:7b:14:88:57:73:56:
2b:5b:a4:72:bb:7f:0b:cb:5a:c6:05:75:6c:37:92:
2c:27:1f:c6:53:d8:38:e5:bd:80:52:de:e2:8a:fc:
a8:49:05:8c:b4:63:ab:68:99:75:ed:fd:5e:ef:cd:
be:29:18:73:02:58:ad:1a:b6:45:7c:c2:63:46:b1:
57:0b:8d:90:34:94:84:01:aa:bf:92:6e:60:4c:77:
aa:3f:97:2c:75:05:ab:6a:9d:2b:14:9c:ef:00:0b:
e3:cf:f4:88:1f:24:1d:60:3c:70:d9:d0:56:b9:e3:
10:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AF:79:59:C2:B5:B5:58:7E:0E:F8:21:EB:1D:2C:FB:47:80:40:37
X509v3 Authority Key Identifier:
keyid:A3:33:11:4C:BF:C6:BF:66:83:71:C5:68:7E:E9:8A:44:2F:D8:EA:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:bb:be:65:9a:30:38:b3:af:71:a5:4f:26:5a:22:03:c3:a9:
2a:b7:bb:7b:ba:8a:d8:84:7b:1c:89:48:19:c8:1d:49:68:5e:
95:7d:8b:d0:58:f1:79:17:45:1b:c2:06:82:c3:a2:a9:4c:49:
b9:f0:ca:ba:08:9b:e4:ed:f8:84:c8:d6:0d:17:4d:c0:3a:24:
47:af:50:f5:42:67:4b:4a:32:94:0e:76:d6:e7:f8:d0:ac:03:
b6:ef:4d:47:48:9e:00:7c:9e:49:ef:17:6f:82:8b:9e:de:41:
60:d0:81:db:3b:01:72:ac:e8:ab:50:12:05:88:15:7b:6a:81:
ae:51:35:01:2d:cc:fa:0d:bb:05:16:bf:b6:df:80:6b:a8:d4:
d7:e7:a9:f2:f0:fe:be:43:e3:4b:dd:18:40:33:e5:78:e1:f9:
81:1a:2d:13:5c:2f:65:e1:9b:1c:0e:36:ca:e9:74:20:55:aa:
a9:90:cf:ba:ca:28:c2:16:9d:c4:65:37:6b:3d:c4:23:96:d1:
20:c7:25:1a:02:2c:fa:1d:c6:1c:77:7e:38:c8:92:4d:8f:90:
19:5b:f2:d0:19:8e:8e:ce:fb:d1:b5:63:69:49:8c:99:04:a9:
4d:f9:77:f5:1e:8d:0d:a8:9e:95:c3:3b:86:46:49:ce:5f:5b:
0b:71:5d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:52 2025 by rpki-client on console-fra.rpki-client.org