Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
File: Ol3CullC4E_di6mVFqG5Ox5PliQ.mft (raw, json)
Hash identifier: TxvlB06VXjFQCa+67EgKynr16JxbMVMUQs98MByRq6Q=
Subject key identifier: 9D:9D:CB:6B:EC:58:F4:80:F6:D1:5E:C1:78:2C:C9:46:13:9C:B1:3E
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial: 0194BB97492C6112C71D98E48434CCA23E06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
Manifest number: 1148
Signing time: Fri 31 Jan 2025 09:00:41 +0000
Manifest this update: Fri 31 Jan 2025 09:00:41 +0000
Manifest next update: Sat 01 Feb 2025 09:00:41 +0000
Files and hashes: 1: Ol3CullC4E_di6mVFqG5Ox5PliQ.crl (hash: Qyy8z6gCSS+mMu+01eda+y8af7gudD8cQbtLZizpQD0=)
2: qJBvxpD7n70pwcXNsgqdSFQCwU0.roa (hash: kY14YD94l5CclyQ8uKmXazP+0TkN3037Xr92PjRqrpA=)
3: xujMYWDLMyhqIWgA4xHOXbda_Ew.roa (hash: PTpzQ7Ys6HXSZaAHLbMSGjofVeB7J4xubWwZPF+3a7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:49:2c:61:12:c7:1d:98:e4:84:34:cc:a2:3e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Validity
Not Before: Jan 31 09:00:41 2025 GMT
Not After : Feb 1 09:00:41 2025 GMT
Subject: CN=9d9dcb6bec58f480f6d15ec1782cc946139cb13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ea:04:c6:67:f5:4e:b2:f2:93:21:06:6a:ad:
1d:8e:8a:bf:65:22:94:1c:fe:6f:10:ef:25:1e:95:
54:ce:82:e8:49:bd:5d:77:07:2a:a1:9e:42:7a:29:
0f:c7:9a:16:84:dd:81:40:14:89:86:7b:ab:e0:04:
a6:40:f8:f5:c4:13:d3:d2:9f:5d:65:4e:86:e6:db:
3e:eb:ba:cf:cd:bb:98:0c:bc:5f:44:25:6b:34:02:
a0:a9:41:0c:5a:92:13:c7:11:fd:0b:9e:2b:21:79:
ab:84:74:1a:c5:66:bd:2a:86:6d:0c:55:0e:2d:98:
72:c8:cf:be:2e:f7:e8:fe:be:7d:4c:fa:8e:49:1a:
28:de:3a:05:52:57:74:bd:16:ee:f0:cc:1c:2e:93:
66:74:50:8d:8a:a8:7f:77:98:72:ad:45:f7:57:f5:
c0:b9:78:44:dd:78:bf:13:5d:22:d8:a7:48:c1:94:
d7:3b:a3:af:99:41:6e:7f:b9:ee:6f:48:1b:09:8a:
27:b6:98:22:51:27:c8:91:11:28:b8:03:19:aa:72:
69:08:a4:c9:15:21:0b:f2:cb:1c:92:ec:35:57:17:
73:fe:28:b6:99:78:c9:9b:96:d2:c4:46:65:cd:6e:
42:15:4d:fd:4f:9d:c0:fb:33:b9:2b:c5:0a:1b:c7:
78:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9D:CB:6B:EC:58:F4:80:F6:D1:5E:C1:78:2C:C9:46:13:9C:B1:3E
X509v3 Authority Key Identifier:
keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:64:b4:d6:f1:54:ba:88:65:c0:9f:97:47:14:54:50:33:ec:
72:75:52:37:81:71:ff:0b:e1:26:70:0f:95:ed:09:aa:fa:24:
71:2a:16:03:71:0f:2c:9f:bf:13:16:dd:b9:7b:d5:d6:22:54:
04:d9:13:4f:ed:b3:05:b9:b2:15:4e:bc:6b:89:03:ac:45:65:
28:c6:e4:bb:a8:57:6d:ee:a1:be:f3:0c:37:a7:c8:7c:27:a7:
7c:96:74:89:29:ea:7f:90:5a:a9:a4:47:e9:16:8b:2a:46:98:
af:d3:24:5e:16:eb:ff:d5:af:fa:85:07:f0:91:1f:d5:22:dd:
42:52:9a:09:c4:be:0e:62:b9:87:ba:81:f1:d9:e0:df:83:ea:
30:a9:f0:d2:9d:58:94:9a:72:99:1f:2e:c2:47:41:fc:fe:32:
b2:71:9a:e7:d1:0d:c0:29:72:6a:99:11:34:dc:e9:64:27:02:
51:e1:f3:f9:db:dd:d8:d5:09:7a:2d:1a:48:c8:56:40:ff:d0:
6e:91:3b:f7:cc:c9:67:cd:8e:fa:cb:b5:d6:f0:99:11:d8:86:
3b:7b:bc:e9:7b:11:58:a7:26:42:77:c9:cb:14:94:31:2a:66:
ed:c3:08:28:ec:d6:83:35:d5:3b:f1:56:3b:ef:e2:44:38:65:
dc:a9:ed:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:06 2025 by rpki-client on console-fra.rpki-client.org