Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
File: OsePM-jhGHMnZn-pT9dEa42R5bQ.mft (raw, json)
Hash identifier: UnNr6DKUKBRoHCYDLZTRuHRygwsLAzMfPVCng/tfMi0=
Subject key identifier: 16:C1:5C:28:3D:08:71:F1:83:AD:86:80:0D:46:CF:B7:96:98:01:E3
Authority key identifier: 3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
Certificate issuer: /CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Certificate serial: 019510C72F3F6E764FF5BAA6DA618EEBC7E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
Manifest number: 1458
Signing time: Sun 16 Feb 2025 22:00:43 +0000
Manifest this update: Sun 16 Feb 2025 22:00:43 +0000
Manifest next update: Mon 17 Feb 2025 22:00:43 +0000
Files and hashes: 1: F6UTD5xs6irn044j6Bn0b3rkg8E.roa (hash: 9sFquSQ+RMEX3oUpXt6ncKZDty2H5HID8F9gmHeYrQI=)
2: OsePM-jhGHMnZn-pT9dEa42R5bQ.crl (hash: zspwyqg52wdq9FJDsvDlwxeY5rrgDF0SyU4IdZ0YEN8=)
3: XWOSrFlYBz01u9ZbsC7SaVbGNk0.roa (hash: cXF9VQeB5aeojhDFULFIh/R4knNnDgR602re3Gn7FPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:2f:3f:6e:76:4f:f5:ba:a6:da:61:8e:eb:c7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Validity
Not Before: Feb 16 22:00:43 2025 GMT
Not After : Feb 17 22:00:43 2025 GMT
Subject: CN=16c15c283d0871f183ad86800d46cfb7969801e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f1:d7:3a:35:51:9c:37:30:5b:28:7f:3a:bd:
d0:fe:dc:96:fb:19:a7:a3:46:64:65:77:13:22:59:
3a:72:6a:b0:12:3c:3d:9d:b5:f9:ac:b9:23:53:3d:
e1:da:0d:f3:ed:c0:ff:62:41:fb:04:d2:b3:50:cf:
e8:7c:50:5b:17:7d:9b:81:89:bb:96:a4:80:07:a2:
33:1c:70:20:11:0b:fa:63:46:e2:44:cf:02:65:ed:
62:06:55:80:b9:ab:67:ee:6e:8c:35:fe:0f:c7:01:
08:7b:a5:72:d6:7b:97:6f:85:e9:d1:1d:b1:48:59:
1e:d4:18:f7:7e:cf:52:c9:64:14:ec:ba:f2:4d:41:
45:fa:13:a5:eb:db:99:10:81:f4:2b:bf:f3:85:53:
d7:ba:9c:9a:c0:7a:04:b2:6f:74:e8:63:ae:69:18:
08:3c:2a:8f:1b:ec:4e:f8:b4:a6:f5:8c:e8:cc:61:
95:c6:74:c7:28:61:f1:5d:19:77:ba:14:d5:c6:4a:
7c:39:dc:d6:4c:e9:b2:06:89:8d:a0:7d:66:2f:e2:
a5:5a:c2:d4:7a:be:91:e2:c7:2a:d7:95:8f:d6:97:
15:bf:37:02:27:13:b4:ae:20:30:d2:55:f8:8b:a5:
06:c5:c2:c1:3c:ce:aa:3d:6d:92:f3:2f:cf:d4:2c:
08:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C1:5C:28:3D:08:71:F1:83:AD:86:80:0D:46:CF:B7:96:98:01:E3
X509v3 Authority Key Identifier:
keyid:3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:14:93:63:e9:9e:13:9e:d1:f0:6e:8e:ca:1b:24:18:46:ec:
1a:b5:08:df:5e:7e:85:0c:41:52:3c:59:ee:6e:28:46:f5:94:
41:02:a7:8b:94:e7:49:9e:d1:98:c5:08:65:f6:3d:67:8f:cf:
28:27:b2:01:3c:a1:d8:05:2f:6c:e1:13:cd:08:a8:a7:ef:70:
0c:ef:b7:3e:d1:f0:e8:3e:5a:32:8a:35:24:34:48:89:3f:61:
cc:73:2b:e2:31:b3:6b:61:c7:ae:5d:24:2d:fe:9b:ad:dc:eb:
29:10:24:ef:db:57:3b:2b:86:83:ff:65:6f:2c:7b:36:e7:5e:
45:1d:d3:5a:7c:17:86:9c:87:cc:5f:b2:b9:7f:78:f1:f3:ff:
c6:e0:bd:c3:16:0f:eb:b7:bc:55:d0:6d:40:ce:cf:23:ae:9c:
c3:2d:62:fe:a3:9e:b3:95:ab:84:ab:cb:37:f7:30:d9:52:8e:
48:f9:e6:87:66:e6:2b:f1:e2:16:db:29:8a:94:e8:1f:c2:40:
2d:c7:86:0e:1c:dc:4d:21:14:2e:53:89:ad:89:87:9c:d9:5b:
44:0f:30:77:e5:02:b2:09:5b:73:c8:7e:7c:f6:8f:7d:99:47:
65:67:c1:e6:3d:66:e0:0d:fc:6a:6a:a9:f1:b5:7c:38:8e:97:
91:14:69:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxy8/bnZP9bqm2mGO68fpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhYzc4ZjMzZThlMTE4NzMyNzY2N2ZhOTRmZDc0NDZiOGQ5
MWU1YjQwHhcNMjUwMjE2MjIwMDQzWhcNMjUwMjE3MjIwMDQzWjAzMTEwLwYDVQQD
EygxNmMxNWMyODNkMDg3MWYxODNhZDg2ODAwZDQ2Y2ZiNzk2OTgwMWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/HXOjVRnDcwWyh/Or3Q/tyW+xmn
o0ZkZXcTIlk6cmqwEjw9nbX5rLkjUz3h2g3z7cD/YkH7BNKzUM/ofFBbF32bgYm7
lqSAB6IzHHAgEQv6Y0biRM8CZe1iBlWAuatn7m6MNf4PxwEIe6Vy1nuXb4Xp0R2x
SFke1Bj3fs9SyWQU7LryTUFF+hOl69uZEIH0K7/zhVPXupyawHoEsm906GOuaRgI
PCqPG+xO+LSm9YzozGGVxnTHKGHxXRl3uhTVxkp8OdzWTOmyBomNoH1mL+KlWsLU
er6R4scq15WP1pcVvzcCJxO0riAw0lX4i6UGxcLBPM6qPW2S8y/P1CwIpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbBXCg9CHHxg62GgA1Gz7eWmAHjMB8GA1UdIwQY
MBaAFDrHjzPo4RhzJ2Z/qU/XRGuNkeW0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3NlUE0tamhHSE1uWm4tcFQ5ZEVhNDJSNWJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81ZWRhYWYtMzMyNy00M2VkLTkwYjEt
ZGMwMWY0YjRiYWU0LzEvT3NlUE0tamhHSE1uWm4tcFQ5ZEVhNDJSNWJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy81ZWRhYWYtMzMyNy00M2VkLTkwYjEtZGMwMWY0YjRiYWU0
LzEvT3NlUE0tamhHSE1uWm4tcFQ5ZEVhNDJSNWJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhSTY+me
E57R8G6OyhskGEbsGrUI315+hQxBUjxZ7m4oRvWUQQKni5TnSZ7RmMUIZfY9Z4/P
KCeyATyh2AUvbOETzQiop+9wDO+3PtHw6D5aMoo1JDRIiT9hzHMr4jGza2HHrl0k
Lf6brdzrKRAk79tXOyuGg/9lbyx7NudeRR3TWnwXhpyHzF+yuX948fP/xuC9wxYP
67e8VdBtQM7PI66cwy1i/qOes5WrhKvLN/cw2VKOSPnmh2bmK/HiFtspipToH8JA
LceGDhzcTSEULlOJrYmHnNlbRA8wd+UCsglbc8h+fPaPfZlHZWfB5j1m4A38amqp
8bV8OI6XkRRpQg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:18 2025 by rpki-client