Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
File: oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft (raw, json)
Hash identifier: qnWt2BvT8HUadJ8BFVHQAjpesFY5oB5jH3FrRblig78=
Subject key identifier: 8D:81:4C:8A:D1:18:AA:78:0C:A2:9E:A3:85:78:85:08:5B:C3:C5:B7
Authority key identifier: A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
Certificate issuer: /CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Certificate serial: 019510C745A5D6678DCC6764DD19E18B4DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
Manifest number: 0FAB
Signing time: Sun 16 Feb 2025 22:00:49 +0000
Manifest this update: Sun 16 Feb 2025 22:00:49 +0000
Manifest next update: Mon 17 Feb 2025 22:00:49 +0000
Files and hashes: 1: oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl (hash: jY7PIJGfoamtoPPdr3Bcmmpv423NIQNZ0BltffKjzmM=)
2: tbot_ZPo7efS_eEBsyLeDHJNVmM.roa (hash: edYIJvl9gSH8k9QetJe1JVzyMvJbYqfDW2Tyrs7Mw9w=)
3: uoHivGDaQdTRu4MbmZ1xXu7l-mk.roa (hash: UPN1y7noDZEvkhcHWjNiVxEsGCr7mcBF0YnibzrND6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:45:a5:d6:67:8d:cc:67:64:dd:19:e1:8b:4d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Validity
Not Before: Feb 16 22:00:49 2025 GMT
Not After : Feb 17 22:00:49 2025 GMT
Subject: CN=8d814c8ad118aa780ca29ea3857885085bc3c5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:50:f3:1e:18:d9:13:67:47:4f:95:ab:f3:
f1:18:07:f8:ad:76:8c:ec:60:0f:ef:89:21:1c:04:
82:9f:69:b3:6f:f9:86:4b:7d:e8:a4:23:5a:f2:45:
b9:a9:c6:b3:34:33:fc:68:a5:94:3f:22:1a:46:49:
89:73:08:ad:5d:c4:c1:5d:3b:de:93:cb:06:9b:7f:
c9:6b:d2:e2:1d:02:86:93:6f:fb:ad:0a:71:8a:a1:
2f:7e:ec:06:4c:5e:bd:f3:49:8e:5e:9e:a8:30:5c:
ec:52:b2:dd:70:83:18:3b:5b:8d:d3:d2:e1:26:10:
69:49:20:42:b6:39:3d:4e:f2:af:90:df:6f:fc:4d:
aa:b6:61:09:48:c7:39:77:a9:21:bc:0c:1a:88:d2:
d6:67:e8:82:f7:3b:aa:09:82:74:cd:1e:c4:94:9c:
a9:30:e7:6e:da:36:41:dc:04:81:1e:50:94:9a:ee:
ed:c9:a2:4a:b9:01:55:cd:81:f8:92:f8:b1:b1:16:
10:46:41:1a:3d:2d:8f:b3:6c:1b:61:22:28:97:ed:
eb:48:60:f1:f8:4c:75:11:d4:b5:e9:c9:d9:0b:47:
98:6e:c3:f6:fb:79:d3:be:25:d0:3f:cd:6d:06:cc:
33:cc:c4:d4:bb:21:5e:fe:0c:d7:75:1e:83:09:bd:
4a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:81:4C:8A:D1:18:AA:78:0C:A2:9E:A3:85:78:85:08:5B:C3:C5:B7
X509v3 Authority Key Identifier:
keyid:A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f9:48:a2:d7:50:63:da:24:9b:b9:c5:14:e4:a7:8d:3b:37:
8d:0c:8e:7f:b8:77:26:70:40:18:bc:47:b8:3a:b4:08:7e:ff:
9d:8c:36:14:b4:00:f2:f5:43:68:cc:98:37:34:4e:f9:cf:48:
1f:72:84:de:50:5c:74:0d:ea:77:7f:fa:30:66:16:5a:c6:72:
72:81:03:00:d6:7a:4c:78:f6:31:71:90:3f:4c:b0:5c:ee:c5:
a7:3e:b9:5f:70:26:9b:59:6e:9e:28:bf:e9:15:71:98:90:49:
af:ca:8e:96:a1:ce:a7:69:90:a9:eb:2c:d8:b4:eb:99:3e:91:
5f:78:bf:84:0a:cd:cb:49:2b:3f:38:3a:af:52:e1:19:76:22:
72:2e:ee:91:fb:e2:a0:a0:e3:26:00:96:0a:58:f8:0d:ee:2a:
5b:48:9f:82:ef:9b:84:a1:c9:f1:01:eb:dc:80:d3:d3:9c:8a:
af:70:bf:74:ea:eb:b4:59:27:f4:b3:9e:20:19:f5:25:08:c2:
3b:0e:9e:08:a6:a0:11:a7:29:5d:93:60:41:93:9b:7d:e6:8f:
d5:0b:57:59:cf:3e:b3:6b:60:a4:24:90:0f:02:dc:fc:6f:e1:
7b:65:3f:56:ac:3b:3e:7a:e2:48:b3:43:a1:33:e0:94:b4:13:
8e:03:37:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:49 2025 by rpki-client