Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
File: ODD00TlF8W-bdLEmR-oSzF0nSM8.mft (raw, json)
Hash identifier: n9+pfFsnS4gnSUMRaJipFYB/qwvnX4JkHGb3MzZQI78=
Subject key identifier: 8F:21:B8:BE:CE:CB:0C:7E:28:A9:D7:9A:F2:A1:D8:A0:CC:6B:E6:44
Authority key identifier: 38:30:F4:D1:39:45:F1:6F:9B:74:B1:26:47:EA:12:CC:5D:27:48:CF
Certificate issuer: /CN=3830f4d13945f16f9b74b12647ea12cc5d2748cf
Certificate serial: 0194BB296BCFE5DEE44F176188DA785EBA11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
Manifest number: 0C20
Signing time: Fri 31 Jan 2025 07:00:41 +0000
Manifest this update: Fri 31 Jan 2025 07:00:41 +0000
Manifest next update: Sat 01 Feb 2025 07:00:41 +0000
Files and hashes: 1: ODD00TlF8W-bdLEmR-oSzF0nSM8.crl (hash: mu6RV2pVVr0t/wOKWc1yIyvHFIfM2i4cvjeGJxcmuvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:6b:cf:e5:de:e4:4f:17:61:88:da:78:5e:ba:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3830f4d13945f16f9b74b12647ea12cc5d2748cf
Validity
Not Before: Jan 31 07:00:41 2025 GMT
Not After : Feb 1 07:00:41 2025 GMT
Subject: CN=8f21b8bececb0c7e28a9d79af2a1d8a0cc6be644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c5:9c:33:51:63:6c:73:c8:df:1b:9a:83:dd:
f8:4b:b6:f3:49:69:5e:62:9e:6d:51:58:02:16:2c:
2d:fe:a3:59:79:f9:4e:3f:a4:fd:43:86:05:95:98:
29:22:5e:77:da:68:05:ce:47:ff:af:2d:71:89:d1:
1d:a2:5a:0b:79:31:32:59:01:12:6a:f0:17:cc:55:
8e:ca:bc:f2:03:48:d4:a4:ef:94:2b:e1:0b:3e:80:
a3:9c:6d:3f:8b:1b:8e:b1:7f:9e:6a:dd:bd:8e:96:
99:97:c7:e7:4d:0b:ad:2e:8b:97:e5:1a:0a:a9:a9:
38:98:67:02:56:f1:01:58:75:1b:e5:67:25:31:01:
46:07:fe:e5:05:c5:24:b5:18:ef:6c:b2:20:c6:eb:
29:24:04:6c:18:fa:f5:99:18:77:de:f7:6c:f6:d5:
ab:ed:38:6f:20:4e:02:42:77:81:cc:54:3c:a0:23:
6c:33:aa:5a:77:ce:8b:2f:28:ac:18:b0:93:d4:42:
05:80:03:f3:2c:09:14:9e:21:b2:56:b6:ba:c5:85:
f1:c3:6d:78:3c:b4:b4:97:ac:46:08:3e:2b:f2:5e:
a3:6e:76:9f:cd:31:e5:96:26:ad:05:3b:f5:a1:08:
48:1f:1f:7d:84:62:13:0a:01:bd:5e:b4:33:c9:6b:
2d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:21:B8:BE:CE:CB:0C:7E:28:A9:D7:9A:F2:A1:D8:A0:CC:6B:E6:44
X509v3 Authority Key Identifier:
keyid:38:30:F4:D1:39:45:F1:6F:9B:74:B1:26:47:EA:12:CC:5D:27:48:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:fe:84:49:04:0a:7f:a4:4d:0d:72:0f:d5:92:fe:cc:08:5e:
a4:d6:e3:fa:71:60:a0:ae:18:32:f5:28:8d:b2:6a:c4:c0:08:
ef:40:90:7b:48:fd:f1:d3:d1:09:ea:a5:6e:a1:e6:a0:3d:f9:
cf:18:cb:41:51:01:ca:53:64:4e:6a:21:31:4b:02:27:25:f2:
0a:30:d0:f0:34:f0:6e:c6:00:4c:64:57:fe:7f:bf:be:df:78:
f8:e3:d1:e8:a5:ab:e6:0d:bf:55:9d:0a:d5:19:08:4d:10:09:
53:bb:3d:d6:7e:e8:df:52:a7:0a:25:81:6f:39:5d:55:30:af:
81:cf:6f:ac:73:b0:2f:39:7d:15:35:af:d3:9b:ec:98:92:5b:
ba:23:04:10:fa:ac:56:de:73:21:71:5f:0f:55:af:6b:ea:2b:
42:97:4b:ea:20:0a:e0:63:be:6d:5d:b2:96:b4:13:ae:54:9a:
95:40:fb:ab:6f:22:0e:de:a0:89:82:ea:cf:77:d6:1f:d8:a9:
70:c1:24:67:e4:61:8a:cb:55:f9:dc:6e:89:37:84:62:ed:a8:
68:3b:3a:64:8e:86:6a:4f:11:3c:6e:8f:ad:d7:ca:4d:fa:5e:
4c:63:54:d6:3f:80:ec:33:f0:7e:ef:fd:bd:35:3e:5c:58:9a:
11:cc:d9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:12 2025 by rpki-client on console-fra.rpki-client.org