Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/a4ece0-a7f2-40f9-a994-caa3b87fb34d/1/OqdpZQeVNJmPMK-OaabGYVk5gsg.mft
File: OqdpZQeVNJmPMK-OaabGYVk5gsg.mft (raw, json)
Hash identifier: ws8YcpQP3C+VRVVSQGublAT4Oj1/cNpE4mKaGfWds8k=
Subject key identifier: 1C:03:7C:8B:C8:E5:AC:3C:1A:82:60:A1:C7:FB:9A:3C:2D:88:A5:F8
Authority key identifier: 3A:A7:69:65:07:95:34:99:8F:30:AF:8E:69:A6:C6:61:59:39:82:C8
Certificate issuer: /CN=3aa76965079534998f30af8e69a6c661593982c8
Certificate serial: 0194BABB17021E9F21C67EA0BC4AE2535EA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqdpZQeVNJmPMK-OaabGYVk5gsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/a4ece0-a7f2-40f9-a994-caa3b87fb34d/1/OqdpZQeVNJmPMK-OaabGYVk5gsg.mft
Manifest number: 10FA
Signing time: Fri 31 Jan 2025 05:00:10 +0000
Manifest this update: Fri 31 Jan 2025 05:00:10 +0000
Manifest next update: Sat 01 Feb 2025 05:00:10 +0000
Files and hashes: 1: OqdpZQeVNJmPMK-OaabGYVk5gsg.crl (hash: J+VvOnyVvysUh5rAfne/Hs009u9lyF8AZwZEmMcmldU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/a4ece0-a7f2-40f9-a994-caa3b87fb34d/1/OqdpZQeVNJmPMK-OaabGYVk5gsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/a4ece0-a7f2-40f9-a994-caa3b87fb34d/1/OqdpZQeVNJmPMK-OaabGYVk5gsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OqdpZQeVNJmPMK-OaabGYVk5gsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:17:02:1e:9f:21:c6:7e:a0:bc:4a:e2:53:5e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa76965079534998f30af8e69a6c661593982c8
Validity
Not Before: Jan 31 05:00:10 2025 GMT
Not After : Feb 1 05:00:10 2025 GMT
Subject: CN=1c037c8bc8e5ac3c1a8260a1c7fb9a3c2d88a5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:44:22:57:59:91:64:32:d1:f9:5b:99:2f:cb:
22:ef:7a:1b:36:ac:19:45:ed:95:20:17:b3:36:7a:
a6:0a:2a:88:ee:33:7d:27:46:f1:b5:70:96:ed:ee:
c9:a5:70:9f:22:f0:3a:3c:7a:05:9d:29:a5:6f:ac:
6f:b6:2c:c4:1c:f3:0d:44:d3:a7:71:87:82:46:bd:
95:7d:fe:6e:56:98:98:d8:d2:b9:d2:83:26:1c:6e:
75:bc:eb:06:1b:0e:cc:3b:5e:ae:0b:31:b5:0b:d3:
9e:f2:01:9e:da:53:6a:5a:74:75:6b:fb:2a:58:b3:
2f:6d:f1:fb:2b:00:40:7b:0d:0c:54:68:4e:50:f2:
7b:96:de:d4:b7:7e:26:2c:48:ef:83:eb:ff:e3:ba:
d4:34:27:d7:19:3d:09:28:c1:87:58:87:6c:8a:14:
7d:1f:21:e6:a9:d2:8e:6b:e6:78:fb:b5:56:41:ba:
02:13:cd:65:14:22:cd:48:db:0e:00:15:25:c6:d7:
1d:37:22:30:32:7d:4f:66:b2:e8:73:b1:a2:5b:77:
d9:52:4a:49:48:f2:1c:69:fc:1f:61:98:b1:f6:d0:
15:04:35:af:86:bb:0d:20:69:cc:26:77:08:a4:8a:
8d:52:9e:c8:6d:06:78:38:c9:60:0c:88:54:4f:f4:
1a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:03:7C:8B:C8:E5:AC:3C:1A:82:60:A1:C7:FB:9A:3C:2D:88:A5:F8
X509v3 Authority Key Identifier:
keyid:3A:A7:69:65:07:95:34:99:8F:30:AF:8E:69:A6:C6:61:59:39:82:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqdpZQeVNJmPMK-OaabGYVk5gsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a4ece0-a7f2-40f9-a994-caa3b87fb34d/1/OqdpZQeVNJmPMK-OaabGYVk5gsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a4ece0-a7f2-40f9-a994-caa3b87fb34d/1/OqdpZQeVNJmPMK-OaabGYVk5gsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:09:ac:bb:db:1d:21:f1:64:a3:4e:91:9a:71:59:be:ec:c7:
92:3d:0c:1d:ce:dd:08:6d:7c:58:23:51:2b:29:94:6d:73:1c:
b5:f3:3d:ee:38:36:20:e8:f1:98:59:e8:44:6c:ce:52:a2:f8:
7b:1b:18:fb:b8:b1:1d:39:b5:7d:f0:f0:0d:2c:87:ab:ec:3a:
8e:71:fb:47:03:50:e1:b4:22:06:db:15:76:75:bb:81:be:4f:
95:c8:f4:2b:5e:93:19:c1:36:ce:02:c5:31:02:e6:74:9e:98:
26:01:82:35:02:fd:3c:07:47:8a:99:75:8b:b2:89:a0:d8:9e:
06:2b:13:65:48:0b:7a:33:9e:73:36:95:e6:39:ea:16:7f:24:
d6:c0:cb:f0:b4:9b:fb:75:22:a6:82:0c:d7:fc:90:4d:45:c7:
94:92:09:99:46:c2:ba:18:5b:55:d8:2f:ff:fe:db:ec:33:cb:
d9:fa:f0:4e:f0:9a:2d:1e:b1:c5:5b:5f:81:4e:eb:86:a4:6f:
9a:c3:f2:d3:7e:80:5e:0f:33:64:0e:c3:30:16:e0:00:61:3b:
50:ad:ab:87:a4:c1:ce:a8:48:49:0a:9f:97:3f:28:1c:65:0c:
05:12:cb:ba:1b:bc:f8:c2:73:60:5e:85:84:b8:5e:e6:06:3a:
53:55:47:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:19 2025 by rpki-client on console-fra.rpki-client.org