Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.mft
File: oQIHcvYouPtR80dRNrd_60smmL4.mft (raw, json)
Hash identifier: 3l7OhnvDOiENRoHEc1MAADqpw1nYA6C28ZeSvdYGoxw=
Subject key identifier: 74:CF:25:84:2B:2A:58:C5:E5:A8:D4:7B:79:65:89:5A:30:30:03:2D
Authority key identifier: A1:02:07:72:F6:28:B8:FB:51:F3:47:51:36:B7:7F:EB:4B:26:98:BE
Certificate issuer: /CN=a1020772f628b8fb51f3475136b77feb4b2698be
Certificate serial: 0194BB970540395D766CE238A6A070A26E84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQIHcvYouPtR80dRNrd_60smmL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.mft
Manifest number: 1072
Signing time: Fri 31 Jan 2025 09:00:24 +0000
Manifest this update: Fri 31 Jan 2025 09:00:24 +0000
Manifest next update: Sat 01 Feb 2025 09:00:24 +0000
Files and hashes: 1: Xn7HlAmazqZObEY4Svfv4ZbMChM.roa (hash: 900LVbegyuqsxm1Su/VFGub5Wi1DlW68cWbr8g1USwo=)
2: oQIHcvYouPtR80dRNrd_60smmL4.crl (hash: mM/di0Pnd+sZLMMb7Xt5AjEkoG8mjjMUVHnJesY6aQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oQIHcvYouPtR80dRNrd_60smmL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:05:40:39:5d:76:6c:e2:38:a6:a0:70:a2:6e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1020772f628b8fb51f3475136b77feb4b2698be
Validity
Not Before: Jan 31 09:00:24 2025 GMT
Not After : Feb 1 09:00:24 2025 GMT
Subject: CN=74cf25842b2a58c5e5a8d47b7965895a3030032d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9c:aa:34:00:db:d3:0a:66:a8:c5:fa:d5:f0:
ba:0d:29:aa:d0:f6:61:b4:84:c0:12:dc:14:83:7f:
a3:94:c9:1c:3f:26:80:25:ce:0d:79:85:ff:51:cd:
a8:5b:9a:b0:96:20:d8:0c:f4:48:ad:bd:d5:6c:39:
3d:e4:9e:f0:79:75:6a:34:e9:46:e0:5e:4d:ca:42:
57:95:8f:43:27:7c:0d:c9:6d:98:3e:2d:12:ed:29:
60:58:db:9c:27:72:42:1f:26:6c:2e:b8:3b:d3:84:
01:4f:56:80:0e:ab:14:85:21:d1:f7:da:30:d7:82:
09:9c:93:96:64:9b:92:54:eb:55:f4:cb:fe:fe:25:
f8:ee:1b:a1:7e:e4:9f:bd:d5:53:c4:12:9b:58:00:
98:3e:09:d5:89:77:ba:49:6f:a8:39:94:91:a2:a7:
45:4d:bd:e2:cf:55:94:00:72:1d:08:dc:c1:d0:50:
6e:2d:19:80:53:37:02:76:9c:ac:ef:46:4d:7b:ca:
e7:dd:b0:ae:b0:a1:a5:e7:c8:b1:1a:43:9f:5a:5b:
d7:d7:2a:1d:02:09:fc:e6:5b:22:b8:d4:a6:c1:ae:
5b:f3:ab:52:6f:88:cb:7c:d0:08:53:0a:64:e7:34:
21:67:b8:1c:4e:61:73:0d:07:46:bf:70:3e:fe:ed:
a3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CF:25:84:2B:2A:58:C5:E5:A8:D4:7B:79:65:89:5A:30:30:03:2D
X509v3 Authority Key Identifier:
keyid:A1:02:07:72:F6:28:B8:FB:51:F3:47:51:36:B7:7F:EB:4B:26:98:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQIHcvYouPtR80dRNrd_60smmL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:ef:12:3c:05:fc:b2:e2:93:e9:8d:28:a7:fd:c0:2b:8d:e1:
9c:01:ff:32:8e:35:36:eb:b1:e9:e5:1c:99:48:af:96:be:71:
0b:d5:75:00:cc:79:14:61:ee:ff:07:9c:04:ca:ad:97:7e:4e:
23:79:34:62:a4:40:77:6f:23:ef:45:4d:30:6d:aa:bf:c2:45:
2d:2d:29:e7:f9:2a:16:0d:94:b4:d5:ec:40:1f:0e:95:5b:11:
d9:df:b2:a6:56:f6:9b:3a:57:9a:ee:0e:2e:a4:aa:a2:57:b6:
95:d5:a9:c0:16:73:68:da:79:84:b9:22:5d:c3:eb:6b:72:c2:
2a:2d:e8:0d:c1:8b:8d:14:1e:22:1a:73:66:b8:69:4f:20:57:
b6:39:0a:53:54:6a:1d:1d:d7:78:eb:18:0c:da:6b:95:74:10:
34:5a:51:ee:56:fc:0b:f4:22:47:c8:4d:ac:8c:89:be:2b:24:
4f:3c:21:68:60:f4:13:c4:fb:98:23:f7:da:88:8b:39:4c:2f:
f2:ce:2b:a3:3a:77:5a:8e:00:96:d1:4e:26:11:b1:ab:a0:8f:
8f:9b:65:94:5f:3d:61:cd:27:e4:0e:44:c1:2a:a4:9c:62:e4:
0c:08:dd:72:25:5f:7d:b4:7e:dd:80:76:66:4f:3b:33:12:86:
96:17:e9:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7lwVAOV12bOI4pqBwom6EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMDIwNzcyZjYyOGI4ZmI1MWYzNDc1MTM2Yjc3ZmViNGIy
Njk4YmUwHhcNMjUwMTMxMDkwMDI0WhcNMjUwMjAxMDkwMDI0WjAzMTEwLwYDVQQD
Eyg3NGNmMjU4NDJiMmE1OGM1ZTVhOGQ0N2I3OTY1ODk1YTMwMzAwMzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpyqNADb0wpmqMX61fC6DSmq0PZh
tITAEtwUg3+jlMkcPyaAJc4NeYX/Uc2oW5qwliDYDPRIrb3VbDk95J7weXVqNOlG
4F5NykJXlY9DJ3wNyW2YPi0S7SlgWNucJ3JCHyZsLrg704QBT1aADqsUhSHR99ow
14IJnJOWZJuSVOtV9Mv+/iX47huhfuSfvdVTxBKbWACYPgnViXe6SW+oOZSRoqdF
Tb3iz1WUAHIdCNzB0FBuLRmAUzcCdpys70ZNe8rn3bCusKGl58ixGkOfWlvX1yod
Agn85lsiuNSmwa5b86tSb4jLfNAIUwpk5zQhZ7gcTmFzDQdGv3A+/u2jbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTPJYQrKljF5ajUe3lliVowMAMtMB8GA1UdIwQY
MBaAFKECB3L2KLj7UfNHUTa3f+tLJpi+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1FJSGN2WW91UHRSODBkUk5yZF82MHNtbUw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS81NTA0MzEtNjE3NC00N2QyLThiYWIt
NTFhZjgyOTY1ZTMzLzEvb1FJSGN2WW91UHRSODBkUk5yZF82MHNtbUw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS81NTA0MzEtNjE3NC00N2QyLThiYWItNTFhZjgyOTY1ZTMz
LzEvb1FJSGN2WW91UHRSODBkUk5yZF82MHNtbUw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvO8SPAX8
suKT6Y0op/3AK43hnAH/Mo41Nuux6eUcmUivlr5xC9V1AMx5FGHu/wecBMqtl35O
I3k0YqRAd28j70VNMG2qv8JFLS0p5/kqFg2UtNXsQB8OlVsR2d+yplb2mzpXmu4O
LqSqole2ldWpwBZzaNp5hLkiXcPra3LCKi3oDcGLjRQeIhpzZrhpTyBXtjkKU1Rq
HR3XeOsYDNprlXQQNFpR7lb8C/QiR8hNrIyJviskTzwhaGD0E8T7mCP32oiLOUwv
8s4rozp3Wo4AltFOJhGxq6CPj5tllF89Yc0n5A5EwSqknGLkDAjdciVffbR+3YB2
Zk87MxKGlhfpJw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:15 2025 by rpki-client on console-fra.rpki-client.org