Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.mft
File: oAbKBpZb7mgcNTG0JrWZpAHhpaQ.mft (raw, json)
Hash identifier: Tjv22hX363cwyuxBpZzT1Ykp5d9pi5gIm24ktBGtLmA=
Subject key identifier: 88:E1:DF:34:DB:21:33:6D:34:C1:FC:A4:6F:1E:E1:F2:68:5A:F2:86
Authority key identifier: A0:06:CA:06:96:5B:EE:68:1C:35:31:B4:26:B5:99:A4:01:E1:A5:A4
Certificate issuer: /CN=a006ca06965bee681c3531b426b599a401e1a5a4
Certificate serial: 0194BAF24E639C8950A3101D003DA9674037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.mft
Manifest number: 0533
Signing time: Fri 31 Jan 2025 06:00:29 +0000
Manifest this update: Fri 31 Jan 2025 06:00:29 +0000
Manifest next update: Sat 01 Feb 2025 06:00:29 +0000
Files and hashes: 1: 4C0OXayjBs5jaM2cyHhqCBjs15k.roa (hash: Z1AW2ktKl7nH/pif3t4jJj3aESh4kYBCdiYTjw37+0A=)
2: oAbKBpZb7mgcNTG0JrWZpAHhpaQ.crl (hash: wVc2rSTDnnH06t1z5j3Y/f8J6hI+a5yp6JVPVFfM6Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:4e:63:9c:89:50:a3:10:1d:00:3d:a9:67:40:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a006ca06965bee681c3531b426b599a401e1a5a4
Validity
Not Before: Jan 31 06:00:29 2025 GMT
Not After : Feb 1 06:00:29 2025 GMT
Subject: CN=88e1df34db21336d34c1fca46f1ee1f2685af286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:74:7d:b9:68:74:e4:be:3a:2e:28:5c:ab:
6a:16:88:a6:19:46:a8:a1:10:b5:a3:04:d6:a0:d3:
0a:a2:e8:a2:19:93:9f:95:65:e4:61:27:83:91:b8:
45:ea:a4:28:78:1b:41:01:ec:70:06:13:eb:6d:20:
e9:37:3e:88:d8:e1:8c:ff:84:1a:91:42:34:48:63:
60:e3:37:1e:85:01:f7:af:57:b0:e1:6a:7b:18:b7:
96:40:6d:13:6f:b0:04:b4:30:07:41:a9:c4:dc:66:
d5:23:bd:95:43:2b:ee:df:4f:4a:12:1c:7c:93:a8:
34:43:37:7f:5b:13:75:56:f1:99:96:58:00:93:c4:
bf:cd:f2:89:a7:cb:e2:66:71:8d:75:09:2c:00:ef:
54:4d:c7:17:fe:5b:81:cc:e3:af:9c:86:e7:4a:73:
cd:56:75:85:9b:26:0d:6e:24:22:dd:f8:4d:26:6b:
87:76:cc:7b:1d:5a:ba:86:1c:44:5f:f9:a1:9a:44:
08:66:c8:ca:37:c6:40:27:b9:bb:24:52:dd:2d:72:
97:1f:21:d2:7d:42:d0:ff:69:8a:14:cb:22:73:b0:
56:0b:c7:fe:95:80:a3:dd:e8:01:60:6a:b6:32:79:
21:b9:37:0b:f1:3e:3b:b0:f5:bf:56:8f:8e:80:c4:
6b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E1:DF:34:DB:21:33:6D:34:C1:FC:A4:6F:1E:E1:F2:68:5A:F2:86
X509v3 Authority Key Identifier:
keyid:A0:06:CA:06:96:5B:EE:68:1C:35:31:B4:26:B5:99:A4:01:E1:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:71:b3:76:01:e1:8d:e5:7c:23:f5:ea:bd:44:17:2d:47:9f:
a2:52:9d:35:57:71:81:a6:83:6d:02:fb:9f:88:40:bd:94:d7:
19:ee:6a:1a:70:e6:63:1f:a5:2b:8c:f9:27:5a:14:88:24:dc:
17:90:98:5b:0f:71:b2:d3:d7:ef:49:91:00:c2:17:37:9b:8a:
42:2c:fb:16:e7:cf:8c:a3:62:94:41:ad:de:98:7e:75:33:79:
42:63:c7:97:70:e3:ab:72:6e:05:f8:07:73:46:31:7f:2d:1a:
7f:43:19:e0:31:cf:1a:ac:f3:25:78:3d:5f:ca:56:8e:d5:49:
d3:3e:ba:80:79:d8:d3:46:4e:6e:d3:aa:d6:e1:e2:a5:e7:c5:
7f:bb:87:7e:10:6f:dd:17:6a:03:f0:4f:29:87:38:b1:e6:31:
78:4c:27:d4:8a:c9:89:82:31:61:dc:aa:59:ba:17:b5:7f:0e:
fe:65:83:46:ae:94:e9:1d:0a:2e:97:62:9c:a5:6f:05:73:20:
cc:77:19:18:c0:ac:eb:33:9e:7b:99:69:60:ae:8e:76:04:d7:
7b:e7:eb:04:f4:2f:d7:52:c3:1d:5e:09:db:04:58:7b:3f:87:
a1:a4:f9:c4:9c:50:26:e2:11:2e:61:5c:fb:44:07:c4:42:60:
dc:aa:34:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:15 2025 by rpki-client on console-fra.rpki-client.org