Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
File: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft (raw, json)
Hash identifier: Au3U8TCajVXOSNEv+iFE5VE/IOEtptMaYPSUxDJ/cH4=
Subject key identifier: 39:60:D8:B7:C2:A1:87:FA:78:AF:91:50:36:DF:AB:34:E9:51:67:4E
Authority key identifier: 39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
Certificate issuer: /CN=39ce4c0abe2785d46a5571852170370423b5c59a
Certificate serial: 0194BB6049FEAA94CC4B57DADBFD02C332A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
Manifest number: 0C58
Signing time: Fri 31 Jan 2025 08:00:37 +0000
Manifest this update: Fri 31 Jan 2025 08:00:37 +0000
Manifest next update: Sat 01 Feb 2025 08:00:37 +0000
Files and hashes: 1: 1C8ZLPGb7cs83tfkfpBebyBiX7w.roa (hash: tZDyBN3FPva2cn/hbdxMAaSyUjVLmEX+ROsYp3y9P/E=)
2: 2V2wgHU2PI3brwoPOMDaDc7IkC4.roa (hash: 5qFS24zNGXVe6S2Vcqz/MzGu4AiLpsxGOww3SFLkJW8=)
3: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl (hash: MIeHZh/xXp1m+ZYBnfnLalTVwS7YaHG2R7RxrZZ5H1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:49:fe:aa:94:cc:4b:57:da:db:fd:02:c3:32:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ce4c0abe2785d46a5571852170370423b5c59a
Validity
Not Before: Jan 31 08:00:37 2025 GMT
Not After : Feb 1 08:00:37 2025 GMT
Subject: CN=3960d8b7c2a187fa78af915036dfab34e951674e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a0:7f:f5:3b:b1:03:77:81:48:fe:48:4c:25:
93:46:bc:cb:71:5f:e8:42:40:ba:f7:3b:97:a0:72:
13:37:be:17:32:3c:92:c5:74:f0:2f:d5:32:d4:8c:
e3:2d:af:b7:ef:b4:71:03:1d:58:c9:f3:8d:41:ec:
e1:45:f9:73:0c:d0:58:9a:09:5a:5b:48:35:d5:c9:
7f:e0:3f:6e:e9:0c:0b:b3:c3:87:3f:9a:a5:b2:b7:
e2:ed:e2:a8:11:31:01:30:96:dc:39:ed:46:55:59:
fe:74:39:2d:fe:7e:8d:b6:f1:1d:07:8c:c1:1e:69:
50:ca:49:e1:68:e7:54:20:0a:55:b1:f8:fd:3d:ab:
ea:6e:93:f4:fd:18:8e:cb:7b:31:1b:c8:2b:cb:86:
47:31:b4:6b:f1:d3:c8:8b:85:f5:9b:a4:b1:79:83:
fe:c4:eb:0a:9c:f4:e7:32:e1:ce:d8:74:97:84:15:
e0:1f:6d:49:3d:40:ce:27:a7:86:24:0a:15:58:ce:
55:d4:60:a8:83:d3:77:8a:a8:4e:72:07:11:d8:72:
d4:c4:a9:21:93:6b:29:b0:8a:82:97:d2:b4:62:b4:
58:93:d7:f4:9a:6e:34:66:bb:98:40:ce:ef:25:46:
e8:56:60:60:e7:50:3e:8a:98:16:9d:21:6e:c2:1a:
af:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:60:D8:B7:C2:A1:87:FA:78:AF:91:50:36:DF:AB:34:E9:51:67:4E
X509v3 Authority Key Identifier:
keyid:39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:29:96:ee:ed:f3:d1:fb:53:10:46:f3:30:17:80:c7:59:25:
16:a3:04:06:60:56:b9:2c:a3:09:3b:aa:10:ef:4a:e4:1d:08:
af:4c:c3:32:a2:6d:ce:3d:b8:3a:00:ec:80:a7:78:3e:25:14:
3f:c8:48:a9:54:4f:a7:01:be:b7:d2:71:7e:c3:be:7a:79:32:
b4:9e:99:28:bb:67:d6:30:ad:a2:be:88:42:22:ad:82:a1:26:
22:42:4f:73:03:30:77:8f:c3:7a:40:7f:77:d1:83:5a:86:29:
19:ca:30:7a:1f:9e:c3:e8:94:d6:5f:52:80:48:f6:94:6e:8a:
82:e0:06:0b:64:fe:59:cd:af:d3:db:8c:91:26:66:c5:61:83:
0b:5b:1f:4a:c3:54:34:ae:ed:3f:fc:3f:ea:64:66:f0:9e:e3:
d8:c1:bc:df:f9:e5:cf:4a:aa:5b:fa:19:b2:51:13:a8:9c:cc:
a6:22:80:97:a7:8b:55:02:85:2a:6a:09:69:f2:fc:15:db:be:
6d:66:2a:c3:72:7d:e5:31:4b:5d:80:16:d5:e4:63:b3:8a:8c:
0c:d0:71:94:6d:4f:bf:da:20:8a:31:71:0c:56:11:aa:d1:21:
0b:4d:db:1d:6c:1f:0b:1b:af:58:b9:4f:da:c1:7a:ff:14:80:
4a:bd:3d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:25 2025 by rpki-client on console-fra.rpki-client.org