Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
File: O9lDbSE1wISJe3TGrTbaFwCnqY0.mft (raw, json)
Hash identifier: cuHd9J2NKA+0HX/2ImzZJIyMssl4jgqE4nUqwb/AOtE=
Subject key identifier: 5A:C0:03:7F:D0:70:8B:61:D1:37:4C:C1:B3:6B:DA:61:58:E6:C2:C4
Authority key identifier: 3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D
Certificate issuer: /CN=3bd9436d2135c084897b74c6ad36da1700a7a98d
Certificate serial: 0194BB2968D893B73BB7E64DF942C9E4521E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
Manifest number: 1210
Signing time: Fri 31 Jan 2025 07:00:40 +0000
Manifest this update: Fri 31 Jan 2025 07:00:40 +0000
Manifest next update: Sat 01 Feb 2025 07:00:40 +0000
Files and hashes: 1: MkGUvFc5JSBVNeM_VILad8s5zXE.roa (hash: y7TqFtSF44B35KxghjCNu7WMj5pJpzLxmoZgRpNM7r8=)
2: O9lDbSE1wISJe3TGrTbaFwCnqY0.crl (hash: /n+nuJ2z06B67yccTFwFDF2GrMZQT8po+ZCCHy/M/DI=)
3: VekG2JeXHUDy0fRDzXtFdNU8lfE.roa (hash: S50KN9jOHHSMt2/wCQRFtxbSHAYvoJTEJC1VbDgG6ns=)
4: XlsfqVnPq85M-ZJSh02UMv7bAq8.roa (hash: RvxcNQlHBl5xgY24wu2zM7ZcwbvvsV992ncfxEdC62I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:68:d8:93:b7:3b:b7:e6:4d:f9:42:c9:e4:52:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9436d2135c084897b74c6ad36da1700a7a98d
Validity
Not Before: Jan 31 07:00:40 2025 GMT
Not After : Feb 1 07:00:40 2025 GMT
Subject: CN=5ac0037fd0708b61d1374cc1b36bda6158e6c2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:29:81:f1:a7:0a:ff:9f:e5:32:ee:88:ac:3d:
ad:b5:9d:a3:93:68:c5:5f:96:e8:7f:f9:28:e8:a5:
d7:d1:e2:1b:8d:db:2f:35:cb:d9:2b:21:b2:25:28:
9a:71:49:8e:a7:c1:18:8f:88:0c:d9:66:93:74:aa:
98:ea:de:6e:4c:20:f6:41:6b:45:46:de:ef:20:3f:
12:78:26:cd:e1:5f:52:fa:f5:91:8e:c6:1c:03:65:
26:d1:fe:a8:f8:0b:df:67:59:4b:7a:7f:e3:81:4b:
97:bb:8f:a0:4a:32:66:ca:ec:a0:17:bb:a8:0a:b4:
31:94:15:06:b2:0a:67:d9:95:f1:53:89:ad:5c:9a:
67:2d:ea:ca:5a:c5:04:4f:db:fb:ad:64:cb:e4:9c:
5a:b8:3a:ec:ab:0d:9c:39:56:c8:90:b2:b8:52:85:
36:2e:8d:f2:8b:49:91:64:da:3e:a9:b8:95:7b:94:
33:0a:5f:c4:b9:4d:a5:ab:93:f1:04:81:1a:93:ee:
ef:93:cf:cd:a9:c2:31:2e:33:50:8e:06:a7:c5:fc:
72:02:a2:ee:e5:44:e5:cb:74:16:17:6c:cb:24:a2:
1c:82:1f:23:9a:60:1b:c7:90:fa:2b:49:41:04:f7:
e0:16:32:09:c5:47:60:9c:4b:7b:8e:1c:5d:37:7e:
9a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C0:03:7F:D0:70:8B:61:D1:37:4C:C1:B3:6B:DA:61:58:E6:C2:C4
X509v3 Authority Key Identifier:
keyid:3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f6:04:76:51:93:b2:31:c0:5d:53:23:49:e2:0e:87:db:aa:
b7:3a:24:0f:f9:49:fb:12:24:e1:c7:18:cb:77:45:92:d1:a2:
14:fe:69:af:30:4c:43:ad:8e:83:8d:2e:5a:d5:93:47:e5:35:
8a:71:50:6c:e3:78:c2:eb:8f:f0:17:63:74:80:c0:b2:f9:5d:
eb:57:be:ac:ff:bd:8e:00:f9:f2:ca:2b:3a:29:9d:35:fa:aa:
ca:58:c7:8c:34:ef:f2:61:ec:d3:65:fb:b1:43:19:ce:33:a2:
68:de:49:3e:c1:7c:a0:10:83:52:76:5a:17:62:ec:e4:36:be:
3c:0c:ce:55:82:f7:45:f4:fa:18:98:58:22:c2:cc:75:0c:78:
2d:12:39:4d:9a:33:d8:0a:63:73:48:c1:55:df:07:06:1b:c2:
89:18:fc:fa:57:a9:ee:62:79:ac:53:44:9c:86:26:6b:7e:be:
ab:4c:71:c3:08:de:75:cd:5f:2b:77:aa:e9:27:fb:e3:1c:f8:
c2:e5:8d:0f:e2:c6:ec:3c:71:25:bc:3f:d0:82:fa:8a:37:63:
29:d5:ad:d9:dc:c4:a1:26:9c:f0:89:70:f1:69:b9:40:b1:88:
a3:27:5d:0c:91:62:bb:a2:fb:90:03:ba:89:ff:0a:63:02:c6:
de:ba:cf:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:13 2025 by rpki-client on console-fra.rpki-client.org