Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
File: 5ozobUCegkN2Vg_jsaFo8roAguM.mft (raw, json)
Hash identifier: bwvryNcEstmgGv4dYOZ5IsWCHEYY7A1fy0RGSFdYYRE=
Subject key identifier: 2D:E2:D2:42:D3:26:D9:FE:43:01:A7:0D:FC:17:BE:3E:40:08:80:D1
Authority key identifier: E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
Certificate issuer: /CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Certificate serial: 0194BB96DCDDBD2EF5DF4B278E1971027B65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 09:00:13 +0000
Manifest this update: Fri 31 Jan 2025 09:00:13 +0000
Manifest next update: Sat 01 Feb 2025 09:00:13 +0000
Files and hashes: 1: 5ozobUCegkN2Vg_jsaFo8roAguM.crl (hash: 7qdGZuIjpcQ8tSx1jwowct0UKJzmGM53YWAq54DXyGY=)
2: LVNoSuA7vvTmvNpxT00E4lAvcp4.roa (hash: pPgdCp65TG7QIX5Sq2MoRLP/ea4UDwFHNBTpNrAcJN4=)
3: v3gPT9ihCRL0ZeNIouhjQbTxtd0.roa (hash: yHjYFG2kFwOSEQcA6CVX+o9if+OsdxgeiHLnGMf3Fqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:dc:dd:bd:2e:f5:df:4b:27:8e:19:71:02:7b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Validity
Not Before: Jan 31 09:00:13 2025 GMT
Not After : Feb 1 09:00:13 2025 GMT
Subject: CN=2de2d242d326d9fe4301a70dfc17be3e400880d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:db:7b:14:05:f1:63:a9:d9:16:5e:4f:50:b8:
bd:7b:3b:bd:65:bd:0e:17:aa:22:11:22:bd:eb:fd:
89:49:6b:c1:2f:51:33:d6:9d:36:4e:e8:8b:fb:1a:
d5:08:c7:01:3b:7f:38:21:11:d0:42:99:c7:88:e0:
00:3b:9d:7b:13:be:43:f9:c2:ee:44:fc:cd:c1:55:
f1:1d:5f:35:21:52:62:19:6c:0b:62:0a:db:47:61:
ee:20:23:69:c7:e0:f8:12:05:3c:f3:67:4f:24:f2:
91:91:f1:3a:99:c4:81:50:06:cc:5a:69:9a:81:0d:
3d:f5:c3:4a:fa:b5:ab:8d:6d:e3:7e:a1:06:48:55:
a0:69:71:2f:c2:02:6f:c0:46:b9:f7:62:49:e1:dd:
ba:2f:8c:62:eb:89:32:75:60:93:b6:c0:3e:9c:39:
80:19:e3:3a:32:54:11:c4:88:9f:60:bc:7b:ee:09:
89:7d:a8:ca:3c:4f:b7:2a:fe:bb:05:5d:50:52:c5:
1c:24:ff:f7:f0:65:be:61:a5:5e:ae:7f:55:e7:14:
e2:4d:8d:5f:0d:46:57:98:d8:f3:ea:d5:9f:4e:c5:
16:bb:f3:46:fd:a1:09:69:8e:33:09:7c:93:9f:2c:
fd:3b:85:17:24:99:30:3a:0e:7e:a4:8e:1d:1c:8c:
1b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E2:D2:42:D3:26:D9:FE:43:01:A7:0D:FC:17:BE:3E:40:08:80:D1
X509v3 Authority Key Identifier:
keyid:E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:80:2b:62:9b:74:46:a8:56:2f:2b:9c:ba:f2:3e:4c:42:59:
74:16:94:97:a1:7f:64:2d:93:c9:05:17:db:42:6f:87:02:89:
01:90:2f:5f:d3:bd:2f:17:ad:42:7e:ad:9a:bd:10:98:47:09:
60:83:ed:18:bf:f8:4b:b3:dd:95:07:4d:0d:96:7e:1d:2c:d4:
a6:2b:38:b0:d1:12:8e:af:84:be:36:1f:2b:38:ac:ee:f2:d7:
29:19:c8:34:19:24:ca:64:db:93:4a:72:f5:af:e6:b6:21:43:
e6:ad:d6:97:2f:81:6e:16:62:d8:16:b6:6c:3d:b1:75:ad:a2:
96:6a:18:e7:ef:94:58:b1:b5:24:02:33:b9:99:1e:58:7c:bd:
95:13:d6:a2:18:4c:b1:8d:8f:78:9c:49:03:6f:67:6b:ff:1e:
79:9d:7f:41:f0:05:86:32:e9:f7:eb:7a:5e:f7:dd:df:cc:5a:
91:34:33:9a:62:8f:15:23:00:f6:83:38:83:4e:53:46:87:c0:
4e:b5:35:86:2c:a0:15:fc:bc:2d:d9:6e:16:bd:06:85:1c:c5:
08:62:86:09:b9:22:39:98:95:69:9a:ed:c1:47:4e:68:96:8f:
dc:40:a2:28:30:c8:b1:51:8a:9d:e8:2d:4d:33:6d:14:c7:0e:
56:02:9e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:48 2025 by rpki-client on console-fra.rpki-client.org