Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
File: O-LwFktmp2eVhgtOo1hvrVY7rEc.mft (raw, json)
Hash identifier: +4O7ZLy2egJsT2wZReaSCmFd7od4hKaE2EQfuA5r0Qc=
Subject key identifier: 3E:28:31:F2:D5:27:7A:45:0E:5C:F6:69:47:46:57:2A:6D:92:70:76
Authority key identifier: 3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
Certificate issuer: /CN=3be2f0164b66a76795860b4ea3586fad563bac47
Certificate serial: 0194BB2916879DA0B34483998977C73A112D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 07:00:19 +0000
Manifest this update: Fri 31 Jan 2025 07:00:19 +0000
Manifest next update: Sat 01 Feb 2025 07:00:19 +0000
Files and hashes: 1: O-LwFktmp2eVhgtOo1hvrVY7rEc.crl (hash: Tn5hBQGoVmvYBb5T9R5u4aaptC4QM98K6F9267SlHjo=)
2: bnVoAcKQpBUpBdJ_G4E6sEiT0wk.roa (hash: D5MR6IRxVzBiemlQt2yPaFHtcO6ch7oL0gJFMCA2LTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:16:87:9d:a0:b3:44:83:99:89:77:c7:3a:11:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2f0164b66a76795860b4ea3586fad563bac47
Validity
Not Before: Jan 31 07:00:19 2025 GMT
Not After : Feb 1 07:00:19 2025 GMT
Subject: CN=3e2831f2d5277a450e5cf6694746572a6d927076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:59:ce:78:a6:0a:f8:72:dd:1c:66:85:5a:1d:
d2:d6:0d:a9:23:21:9f:da:b4:b2:ae:4c:08:01:85:
1c:40:70:85:fa:18:14:35:0f:76:e3:32:b0:16:3a:
bc:a6:ab:bf:1c:42:e1:4e:f7:e4:5f:e5:f7:ff:6e:
75:13:ba:30:96:da:0b:ae:75:69:fb:61:c2:00:e5:
7b:0f:9f:7c:fa:2e:b2:ee:38:a7:e6:4d:a9:d1:be:
23:3b:56:5b:23:4c:09:2b:1b:d3:b5:6f:f1:8b:33:
91:a6:d0:b5:7c:7c:c7:78:5a:58:31:56:2b:e8:73:
f1:25:dd:76:be:b7:41:25:77:b7:5f:df:ab:09:31:
d4:b4:96:2e:26:bb:9e:69:da:a5:0a:f0:03:d4:9b:
71:c8:14:86:a8:3c:78:ea:1d:84:18:dc:b3:71:79:
6d:0c:04:17:59:18:a7:e9:43:5b:1f:d5:11:56:45:
ba:bf:1f:fe:82:76:b1:cd:4f:6b:ce:d2:5f:10:ea:
ce:48:34:c4:c3:ca:77:60:e0:f7:5e:61:66:d2:5f:
9b:7d:6a:b6:8f:67:c7:8c:d3:4f:84:e0:20:d8:1b:
9d:a8:43:8c:45:62:68:f0:37:14:9d:76:5a:23:fb:
87:8a:01:ec:71:4e:41:61:12:aa:23:16:54:9e:e5:
ff:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:28:31:F2:D5:27:7A:45:0E:5C:F6:69:47:46:57:2A:6D:92:70:76
X509v3 Authority Key Identifier:
keyid:3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:96:4f:3d:bf:bb:65:23:c8:2f:29:bf:1e:26:6c:2d:52:d1:
c4:df:ee:a1:8a:67:65:6a:f5:b3:fa:a9:93:c3:32:e7:54:70:
27:39:8f:19:83:d7:20:b1:e7:ec:16:30:15:aa:bd:d0:9f:41:
8c:2d:c1:9c:12:e6:6a:f4:38:46:a6:75:24:cd:b9:ee:66:47:
ce:45:37:75:16:06:9e:27:29:b0:8c:3d:f8:7e:9d:ac:15:1d:
94:be:7c:cc:54:64:09:35:aa:a5:79:16:7d:95:d0:e2:42:36:
cf:b1:98:e4:d6:b1:73:7f:60:c9:83:c6:a1:d1:b4:d0:7c:15:
5b:c5:08:42:6c:e1:15:f7:1f:f5:6a:ae:e0:59:a8:80:b4:e4:
2a:a2:ca:33:c3:f0:48:ad:10:0b:7a:f3:96:4d:f9:70:b6:b9:
ba:23:82:b4:82:41:b4:80:53:4c:4b:f9:c3:7b:95:9b:bf:8f:
e1:39:ff:8d:1e:fd:61:aa:26:6d:72:94:3d:f3:b2:df:b5:75:
17:3d:89:03:43:39:58:f1:1d:3f:b0:09:48:0c:54:6b:0e:80:
c8:81:78:3f:e6:f3:1f:ae:c0:13:7e:54:9d:a3:56:d0:48:0c:
c1:c1:9e:03:87:7d:1e:c7:7b:c7:ad:57:08:48:21:76:1f:7d:
54:04:1a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:40 2025 by rpki-client on console-fra.rpki-client.org