Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
File: o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft (raw, json)
Hash identifier: CyUKFChK4vQm+J60iZp2YIkui8Jb6zoQfI0OVueQ+wQ=
Subject key identifier: 6A:EA:84:F3:C6:11:76:A2:86:FB:A7:B6:9D:DC:5A:40:47:51:10:81
Authority key identifier: A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
Certificate issuer: /CN=a37a126d7854ecd565ae82970c693f3359f85f37
Certificate serial: 0194BB2942EA2DDEE2DC032573197C91605F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 07:00:31 +0000
Manifest this update: Fri 31 Jan 2025 07:00:31 +0000
Manifest next update: Sat 01 Feb 2025 07:00:31 +0000
Files and hashes: 1: mCmdogU3kH7W3vnMnxNLVbtvTa4.roa (hash: gDJzKrp4zR1sht7C5P/Tek0HKRIcYsUf9kyhRMAnCbI=)
2: o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl (hash: F1Ko0YGF674zPUuWls/25aMVIunZSgwwzPuC4AYfWtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:42:ea:2d:de:e2:dc:03:25:73:19:7c:91:60:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37a126d7854ecd565ae82970c693f3359f85f37
Validity
Not Before: Jan 31 07:00:31 2025 GMT
Not After : Feb 1 07:00:31 2025 GMT
Subject: CN=6aea84f3c61176a286fba7b69ddc5a4047511081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:26:d5:65:58:a5:1f:8c:f7:fd:6d:a1:40:b9:
e2:59:e0:87:41:2d:e5:09:d3:e7:fd:1c:01:d5:05:
7a:51:02:32:34:3a:32:a0:3f:42:6a:4d:d1:11:53:
59:59:1a:b3:8f:5d:f0:b6:4c:66:2e:53:89:2d:d3:
48:31:cc:e0:37:49:29:9b:cd:27:ea:52:4c:8b:26:
17:08:d3:03:3b:18:35:8c:6d:3e:ef:f3:47:1f:57:
a5:50:0b:d4:bc:a9:18:ed:7b:1d:96:d3:48:7c:ef:
41:3c:b9:84:5d:d1:8a:65:27:fa:7a:d7:7b:cf:6e:
da:ca:ad:f4:03:dd:50:5c:76:93:e8:26:fe:00:18:
7f:c4:fa:4f:82:3e:14:c6:b5:6c:7c:40:3e:9b:03:
ab:d2:5e:07:87:4a:22:46:c9:50:1f:57:64:81:dc:
9f:fe:72:89:01:6c:3f:f7:58:0d:26:4b:85:17:9d:
d8:c4:28:1b:e3:0b:a0:6f:8c:a3:81:ca:8d:ce:86:
1a:fd:bf:d8:8b:9c:d8:2f:1e:8e:a7:6a:bf:92:74:
0f:98:8c:5b:b5:b7:cb:a3:27:fc:8f:ec:fe:57:64:
81:b1:4d:92:2f:d0:3b:e1:cd:75:2d:87:d0:f6:43:
5f:c9:d1:50:93:f8:09:91:f2:17:02:79:19:c3:fa:
28:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EA:84:F3:C6:11:76:A2:86:FB:A7:B6:9D:DC:5A:40:47:51:10:81
X509v3 Authority Key Identifier:
keyid:A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:39:13:b9:bd:91:90:f6:32:62:da:98:3d:40:a5:bd:50:d5:
d1:ed:a9:94:ef:a7:b9:98:67:ed:4a:61:e9:c8:a2:4b:8b:b4:
b2:e5:3f:05:74:2a:a5:12:8d:57:38:75:48:b7:ea:02:62:71:
1e:89:d8:b4:4e:c6:b8:32:dc:c2:1c:15:48:1e:89:7e:3f:c3:
8c:b1:c4:24:a8:fd:54:00:17:2d:5f:71:9c:bd:79:e0:d1:55:
6d:5c:5a:7c:09:34:8c:a4:dc:29:b4:84:67:3e:01:d0:b8:69:
1b:60:90:3e:78:02:d2:04:79:b8:2f:34:4d:9e:03:24:de:28:
57:59:31:1b:d9:f6:c9:f3:4d:89:40:b3:18:d3:e8:29:a8:38:
5f:fc:ca:4a:04:09:d2:c4:c8:ee:b3:3c:54:db:ba:7e:c4:b0:
1c:c1:8d:ac:8d:82:0a:33:a4:8b:f5:b3:7f:32:eb:71:31:de:
7f:6c:1f:e7:f9:80:8b:89:d2:1f:32:ba:e5:bd:db:ce:bb:fb:
f7:c8:d9:e6:b5:a6:4e:b8:a5:94:4e:93:0a:60:e2:b2:c4:21:
fb:79:3d:cb:61:7d:ad:80:9f:4e:cd:bc:b1:c7:65:d5:b1:55:
39:1c:93:be:af:3d:a4:28:92:cc:a9:64:cf:ed:4f:02:53:1b:
69:2a:2d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:03 2025 by rpki-client on console-fra.rpki-client.org