Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
File: OCvsQ90a_pemT1brhUx58WP6TuY.mft (raw, json)
Hash identifier: QZNYzjpSPLf+9HpjqJ9Xm8Q+vDIm5Eyg/UUrQUgHDKU=
Subject key identifier: 15:64:24:78:0D:F2:1D:48:42:33:84:69:8D:D3:04:B5:9A:7A:8C:F6
Authority key identifier: 38:2B:EC:43:DD:1A:FE:97:A6:4F:56:EB:85:4C:79:F1:63:FA:4E:E6
Certificate issuer: /CN=382bec43dd1afe97a64f56eb854c79f163fa4ee6
Certificate serial: 0194BB601C717DF857AC40BF91DA252C78A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 08:00:25 +0000
Manifest this update: Fri 31 Jan 2025 08:00:25 +0000
Manifest next update: Sat 01 Feb 2025 08:00:25 +0000
Files and hashes: 1: OCvsQ90a_pemT1brhUx58WP6TuY.crl (hash: 2I+vv5ihQ3prbzlX2ejqP6gjOmhzVEQZfa/cuXaJT/o=)
2: ZcMWvBkTNFkQiz2yA0G8DNGlqp8.roa (hash: ElsDKcX3/AeNMZDxpF6Opg+D9XtiydscqeFlhPJCg+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:1c:71:7d:f8:57:ac:40:bf:91:da:25:2c:78:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382bec43dd1afe97a64f56eb854c79f163fa4ee6
Validity
Not Before: Jan 31 08:00:25 2025 GMT
Not After : Feb 1 08:00:25 2025 GMT
Subject: CN=156424780df21d48423384698dd304b59a7a8cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6d:0e:9b:7f:d0:f1:f0:1b:0a:87:fc:a0:4f:
7e:a9:04:e1:59:05:ee:54:2b:4b:be:63:d0:b8:70:
50:af:7b:82:7f:c4:82:7e:e0:95:34:6f:a3:35:e4:
19:64:29:a3:23:45:47:9c:1f:28:32:38:91:8e:4c:
72:e7:d6:11:26:55:a2:80:03:13:a9:39:41:9e:78:
11:1d:ca:63:fc:d2:49:91:90:c2:9c:b6:7e:ca:d1:
9e:01:61:04:be:0c:c5:55:72:f9:37:c3:14:68:b5:
70:8c:d3:49:ea:4d:d7:be:b9:7e:aa:5f:3c:6f:84:
0d:92:d7:5f:4a:87:bf:c3:20:2e:be:63:f2:59:54:
53:0e:64:f1:a7:29:2b:ff:f0:2a:3b:86:45:fb:0f:
51:89:32:2f:21:34:4e:d3:81:d7:70:db:bd:1d:6e:
e5:dd:3f:b9:d7:8e:6e:13:6e:2e:c5:69:b7:57:96:
ba:02:64:45:7f:fb:ee:ed:38:22:82:30:60:44:f1:
0c:29:f2:02:76:dc:1b:50:51:e4:82:74:40:b2:b7:
81:f2:48:9d:46:71:bb:ca:40:3b:f6:0a:79:a6:4d:
5c:39:76:4e:46:d9:48:d5:41:9b:f5:62:6f:84:37:
17:13:f6:95:ff:1e:c0:19:b9:ee:55:3a:f3:7a:70:
28:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:64:24:78:0D:F2:1D:48:42:33:84:69:8D:D3:04:B5:9A:7A:8C:F6
X509v3 Authority Key Identifier:
keyid:38:2B:EC:43:DD:1A:FE:97:A6:4F:56:EB:85:4C:79:F1:63:FA:4E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:67:b2:f5:b4:3e:e3:11:d8:de:d0:e7:e8:c6:af:08:77:ab:
96:62:71:b5:59:35:a2:74:2b:86:05:c0:26:4f:60:a5:28:50:
1d:c0:0f:42:f4:33:a3:08:87:42:96:62:28:d6:ed:e5:cd:7f:
be:fc:c2:c4:ff:21:00:2b:4b:18:2e:fa:ea:6f:8c:8c:2d:fe:
dd:53:5f:f1:84:2d:66:6b:d6:d3:94:3b:1c:b8:b5:b1:41:a7:
af:e4:63:b5:cb:2c:a7:11:2c:0e:4d:a9:2f:35:36:d1:4b:ca:
03:81:2b:da:19:61:e3:d6:3f:88:e4:c1:5e:89:3f:1c:3c:47:
02:c4:66:17:13:45:15:da:fc:39:22:cc:b3:d7:6e:a0:ca:bf:
53:8b:ad:df:e1:5c:82:0a:a9:9e:9d:d6:32:b9:5e:45:26:a1:
64:2d:d3:35:29:57:5d:e8:4f:6f:85:e2:cd:cb:9a:f3:18:91:
42:f2:a2:aa:40:19:bb:0f:01:ef:f6:e7:aa:c8:9a:dd:70:95:
b3:18:30:9e:d6:91:37:83:03:78:05:c6:b0:a2:ec:c3:53:81:
b7:de:7f:28:6f:9f:5a:39:49:01:b1:7c:2a:3e:0c:c6:f3:4f:
ec:c3:eb:11:40:ca:06:66:d9:d2:c8:b6:16:5b:e1:22:13:b9:
be:bf:12:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:12 2025 by rpki-client on console-fra.rpki-client.org