Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
File: dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft (raw, json)
Hash identifier: hLtAjg4OzZurIjY3hrudImTp/lrnaQAs5zNYWmfNo5I=
Subject key identifier: FE:68:F3:23:75:15:75:21:C5:D3:0C:9F:63:D2:B7:FD:18:BC:9A:D5
Authority key identifier: 76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F
Certificate issuer: /CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
Certificate serial: 0194BABB725066D9F5FFFD040CE414945515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
Manifest number: 0B85
Signing time: Fri 31 Jan 2025 05:00:34 +0000
Manifest this update: Fri 31 Jan 2025 05:00:34 +0000
Manifest next update: Sat 01 Feb 2025 05:00:34 +0000
Files and hashes: 1: AU4ugvV5IAEAhCk8GTQf9WBLDKg.roa (hash: g9W79I4Y+ZlSbr/hHfWCFarDN4OLUZ4qhEZ6t7xBiw0=)
2: dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl (hash: YJLFyOG5M8bOYjO1CB+wAzhc8r+zriNYK6xbiUxsG1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:72:50:66:d9:f5:ff:fd:04:0c:e4:14:94:55:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
Validity
Not Before: Jan 31 05:00:34 2025 GMT
Not After : Feb 1 05:00:34 2025 GMT
Subject: CN=fe68f32375157521c5d30c9f63d2b7fd18bc9ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e5:8a:f0:67:f7:15:d7:1b:7d:80:54:a7:03:
2d:46:d3:41:35:6d:1d:58:f2:9a:60:8f:0c:c2:8e:
57:c0:75:00:7d:c1:65:4f:2f:77:e7:fc:6f:1a:bd:
f9:b1:a9:b4:9c:3e:99:1b:34:83:e7:02:00:d5:cb:
03:57:cf:1d:25:c8:c4:32:40:7f:4f:05:29:b3:ba:
47:d2:3f:89:cd:18:35:e7:e6:a6:b0:41:1a:1f:86:
ad:b0:cf:72:27:8f:4f:3e:13:9a:38:ad:1c:76:f6:
99:b5:f2:ce:79:55:c5:c0:fc:f8:4a:8d:e0:bf:e9:
c9:03:3a:16:7f:0a:fd:52:a9:0c:2c:f8:6b:a4:69:
7d:94:4e:d8:5e:ce:11:cb:54:a0:3d:0e:d1:f3:20:
0a:63:3a:bc:3d:13:1f:65:4e:d8:e5:52:78:fa:31:
da:6a:7a:31:14:07:5f:8d:31:cf:d3:1d:5a:51:67:
58:8a:eb:43:d5:35:c8:f2:98:f2:87:bf:e8:21:03:
52:1a:47:58:82:60:94:3b:31:bf:7a:04:c6:b0:09:
1d:c0:6d:7c:51:d0:5a:54:f3:e4:03:36:76:dd:41:
35:d3:87:d7:b8:89:a7:8b:63:b7:1f:f2:23:38:46:
4c:51:81:54:7d:a3:67:74:6e:a1:e8:c9:16:6f:e3:
d6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:68:F3:23:75:15:75:21:C5:D3:0C:9F:63:D2:B7:FD:18:BC:9A:D5
X509v3 Authority Key Identifier:
keyid:76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7e:cd:e9:72:7a:79:26:a6:12:18:e4:10:ef:e3:3e:5b:5b:
ec:d3:e7:11:ca:09:8b:cb:51:eb:8a:ca:1b:58:82:3d:28:bd:
4d:ae:34:c0:2a:a1:e2:2f:cb:8d:a0:83:76:aa:cd:f2:69:a3:
92:d7:cf:05:81:d0:04:91:15:aa:05:85:74:fd:04:b7:b4:70:
cb:31:e8:7f:bc:87:b9:72:36:ad:10:b7:fb:61:c9:44:8c:d9:
36:a7:b1:2e:a9:c1:8e:a2:6b:e7:cc:59:38:b1:d3:51:0c:33:
a6:17:ca:5f:c5:28:3c:ba:06:21:f6:03:3e:37:e8:e6:dc:49:
37:b5:17:9f:af:1d:08:62:99:5a:d9:24:9e:60:8e:f6:bd:5d:
f4:db:39:20:d5:08:5b:59:20:a3:10:36:41:e3:c3:f8:f3:a7:
00:a1:1c:ab:d0:bc:8d:73:16:53:b9:e8:7d:72:5d:f3:41:2a:
fc:fd:12:6f:55:2a:3f:cd:8b:50:ba:b8:a5:d3:55:a8:e3:52:
a9:32:07:d3:8c:aa:88:6e:71:15:43:4a:18:31:ce:b3:11:74:
a9:5d:8c:99:d8:18:00:78:4c:fd:3c:19:1e:2e:80:e2:ef:0f:
94:4d:97:74:73:d6:cf:af:f6:76:1f:ad:1f:ba:62:fd:96:ae:
4b:37:a6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:56 2025 by rpki-client on console-fra.rpki-client.org