Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.mft
File: OcqgvSVNGof0uzDbO1E_25r2JfY.mft (raw, json)
Hash identifier: a0IFcDO6DL20aHKJU8a9HpsgJ8JKHsEIQChqnZoEukw=
Subject key identifier: F1:15:EA:22:03:27:4B:E1:E3:00:0A:9B:88:96:22:06:F9:E7:31:DE
Authority key identifier: 39:CA:A0:BD:25:4D:1A:87:F4:BB:30:DB:3B:51:3F:DB:9A:F6:25:F6
Certificate issuer: /CN=39caa0bd254d1a87f4bb30db3b513fdb9af625f6
Certificate serial: 0194BB2955C6629065095CF480B43A7C0F25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcqgvSVNGof0uzDbO1E_25r2JfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.mft
Manifest number: 063B
Signing time: Fri 31 Jan 2025 07:00:35 +0000
Manifest this update: Fri 31 Jan 2025 07:00:35 +0000
Manifest next update: Sat 01 Feb 2025 07:00:35 +0000
Files and hashes: 1: OcqgvSVNGof0uzDbO1E_25r2JfY.crl (hash: 2oLLc4ZaiYXCg3HYLe/1G4g/A65b6vwvl0KTpXLKSfo=)
2: _QTwS8nAMSFeKK0ZzzPsIxYgPqo.roa (hash: Q/O46iBV3y1aR3ABGTzdA2RTNwov3wLVP1w6lO4+h/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcqgvSVNGof0uzDbO1E_25r2JfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:55:c6:62:90:65:09:5c:f4:80:b4:3a:7c:0f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39caa0bd254d1a87f4bb30db3b513fdb9af625f6
Validity
Not Before: Jan 31 07:00:35 2025 GMT
Not After : Feb 1 07:00:35 2025 GMT
Subject: CN=f115ea2203274be1e3000a9b88962206f9e731de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bf:35:f3:ed:df:ec:98:c9:07:9f:1b:cc:a0:
45:71:c8:1a:06:98:12:74:0c:34:9e:f2:7b:85:a1:
da:9d:fa:ea:b3:c3:29:fb:a2:c7:df:21:96:f8:1f:
bf:f7:25:e7:0c:72:3e:d3:3f:c4:21:75:94:30:a7:
5e:14:2a:cb:9a:c9:1e:53:48:4d:d5:f1:68:1d:41:
46:4f:b9:63:47:d9:51:25:69:40:f0:0e:c3:8a:3c:
32:e4:32:80:a2:de:87:b7:38:62:52:4f:c3:56:64:
29:d6:68:45:24:9a:70:42:fe:35:02:31:c2:a9:f2:
9e:80:65:1b:9c:17:a0:5d:91:b7:49:0d:0a:64:c0:
7e:41:49:36:b6:54:a1:57:06:88:ed:c8:ed:e0:80:
0c:e7:c9:20:7d:4b:ca:f1:b0:ac:f7:f1:a4:90:db:
33:65:7e:9a:68:6b:08:26:05:92:51:26:c7:88:df:
aa:17:7d:05:c9:fa:39:08:19:a5:1b:78:43:99:c5:
5b:87:fe:6f:67:dd:46:63:64:50:ad:d2:4c:76:e5:
69:f8:da:97:66:60:00:dd:24:9e:33:bd:1a:ae:8f:
6c:aa:bc:e2:1f:bc:91:35:a2:18:51:87:b1:d4:cd:
39:db:af:b7:2a:0a:12:8c:4d:3c:91:30:6e:1f:86:
3b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:15:EA:22:03:27:4B:E1:E3:00:0A:9B:88:96:22:06:F9:E7:31:DE
X509v3 Authority Key Identifier:
keyid:39:CA:A0:BD:25:4D:1A:87:F4:BB:30:DB:3B:51:3F:DB:9A:F6:25:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcqgvSVNGof0uzDbO1E_25r2JfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c9:e1:12:23:1e:74:f4:d0:56:bd:b2:11:f7:35:12:a8:79:
2a:1a:c4:73:00:ba:99:3e:c4:6d:27:99:34:94:ff:c8:6d:c9:
34:dc:9a:b9:fa:d8:d8:cc:93:58:0c:1c:e8:76:57:c6:49:6b:
dd:f0:41:53:2b:81:84:5b:8e:6d:a4:a2:3c:a4:89:02:11:e7:
18:62:4b:4d:9d:af:e8:4a:1f:92:67:df:3b:40:2b:34:12:18:
80:c0:45:af:cb:7d:84:c8:7b:35:93:df:35:ec:5d:5b:50:77:
b6:ea:e2:3c:f3:08:f7:9c:f2:06:d3:e9:1b:9c:dc:b5:50:98:
97:d9:77:cc:d2:4c:24:29:32:42:9d:a2:5d:6f:ab:14:9d:c7:
4b:c5:01:5d:66:25:36:61:e1:0e:da:8e:76:8f:cc:28:81:25:
be:5e:2d:26:75:61:77:f8:57:3e:09:5f:02:de:8f:ba:59:49:
1b:4e:24:af:64:38:3a:25:a5:54:6b:2b:9d:c6:99:0b:ef:fa:
45:f6:e8:5b:3b:7b:62:91:0b:e2:9a:dd:ae:9d:03:e3:d0:14:
41:dd:5c:ca:35:03:3e:3e:6d:60:47:70:60:cb:54:60:c1:a3:
cf:ea:0a:a5:fd:d3:53:12:98:df:55:0b:82:77:41:ca:93:e4:
17:40:3b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:17 2025 by rpki-client on console-fra.rpki-client.org