Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
File: O_xkMfUzO23dMeg7aWgtjo7gb8E.mft (raw, json)
Hash identifier: S5ct6OYwLl/rSLsqCXtfbeSd7GGltxYbsGyNgEbhOHc=
Subject key identifier: DA:43:33:90:20:0F:B0:C7:92:22:E6:2A:3B:DA:38:9A:82:87:08:06
Authority key identifier: 3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1
Certificate issuer: /CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1
Certificate serial: 0194BA8441007B156909A24AE6ED59CB50FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 04:00:16 +0000
Manifest this update: Fri 31 Jan 2025 04:00:16 +0000
Manifest next update: Sat 01 Feb 2025 04:00:16 +0000
Files and hashes: 1: O_xkMfUzO23dMeg7aWgtjo7gb8E.crl (hash: zwGRuXa5KnHXe4b5WnjorhCgcB+BjZTLulf0wT+FwKI=)
2: nEwnWGMzytbCFQz7rWdabIS9yB0.roa (hash: 02h618IubyXzMPvUxA826AJsgMoOVyOdwoqacffXAD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:41:00:7b:15:69:09:a2:4a:e6:ed:59:cb:50:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1
Validity
Not Before: Jan 31 04:00:16 2025 GMT
Not After : Feb 1 04:00:16 2025 GMT
Subject: CN=da433390200fb0c79222e62a3bda389a82870806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0a:24:8a:78:14:da:01:3b:4e:65:9f:28:48:
8d:6e:30:9c:16:3c:96:52:c9:4f:94:76:e9:4a:6b:
01:4e:9d:9b:9d:4e:3c:04:18:ae:12:23:52:6e:b5:
ff:96:32:2c:86:9e:6b:78:36:d7:cd:7d:b2:cd:cf:
5f:77:dd:9c:24:41:c9:e8:a1:66:0c:4b:c2:42:e1:
0d:12:f1:4e:4a:bb:94:23:ac:15:cc:1b:4a:0c:ac:
3a:09:01:bd:28:c6:f7:79:b8:43:58:9a:c6:ae:c8:
8c:7b:1c:c8:b0:7c:ee:44:d4:35:c6:2d:17:7c:2c:
0f:45:41:36:09:88:18:56:09:ab:47:00:db:fc:c8:
2b:2f:da:a5:ae:5a:c8:39:2e:0b:4d:ad:f3:f0:5e:
f3:0d:12:13:71:cc:9d:0e:d9:37:9b:c9:3e:7c:d3:
eb:50:4f:97:72:dc:2b:13:a8:55:36:e7:c7:1a:89:
e1:be:0d:8b:79:21:4d:b1:24:3f:ff:fb:38:10:3e:
30:89:b0:63:8f:aa:4d:f9:33:b8:6d:3f:d1:b6:c0:
66:a0:00:62:ff:c5:ad:e9:63:1a:5b:d6:79:eb:d3:
fd:3a:9b:0d:20:1b:bb:60:60:b2:3b:1e:38:a3:87:
62:45:a2:f0:a3:f9:3d:b3:ff:fa:31:c9:3f:bd:98:
7c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:43:33:90:20:0F:B0:C7:92:22:E6:2A:3B:DA:38:9A:82:87:08:06
X509v3 Authority Key Identifier:
keyid:3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:91:82:6b:dc:07:eb:e9:60:d0:8c:07:4e:bc:6a:03:fd:af:
d6:3a:15:25:4a:a5:7c:05:8a:49:67:39:8e:38:df:96:6e:6f:
b4:41:27:6b:b6:71:91:85:30:9a:0b:60:1c:e8:d5:7d:19:ad:
0c:9e:30:c8:cc:8a:6a:7e:d8:27:41:d1:40:84:54:7d:94:26:
eb:c0:18:90:d3:fc:39:f0:af:fc:22:09:46:12:c8:6d:53:ee:
3e:6f:66:1b:c7:94:45:52:39:f5:c9:11:d6:00:18:25:24:63:
83:5c:a5:a7:4f:55:4c:67:e3:90:a8:42:84:f1:2f:db:31:e8:
a4:dd:dc:bd:1c:25:7e:25:a5:d6:b3:9f:39:ec:1d:a4:d6:03:
1e:5a:01:81:80:86:f7:5d:82:c5:57:bf:7b:b5:a1:02:53:65:
26:cb:ec:9c:c0:44:67:5a:6c:4f:c2:1c:22:c2:19:28:d4:9b:
43:a3:b4:a7:96:00:e0:1f:e0:07:d2:c0:4a:62:7b:de:bf:a1:
e2:8c:24:17:c8:dd:3b:c9:0f:c5:02:99:6d:25:41:db:65:3b:
01:ff:d5:c0:4f:b3:9d:20:c3:18:bd:73:c6:69:1f:48:f5:bd:
bd:a9:12:32:44:ab:31:b3:2a:b3:c0:b4:5d:83:35:65:4c:b6:
4e:e9:a9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:24 2025 by rpki-client on console-fra.rpki-client.org