Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/391c8d-6ac6-4c06-9a40-a6b5a8be1113/1/OZ17KbLru-43WSMgfh2FZU8LV7o.mft
File: OZ17KbLru-43WSMgfh2FZU8LV7o.mft (raw, json)
Hash identifier: 2FpOAIHbhSNXNfh8FU0PRB8/NY7ruzTWy4L3fUNbnsM=
Subject key identifier: FF:34:5C:8D:9E:16:3A:08:0E:D0:6E:B4:21:13:C8:2C:6F:90:92:12
Authority key identifier: 39:9D:7B:29:B2:EB:BB:EE:37:59:23:20:7E:1D:85:65:4F:0B:57:BA
Certificate issuer: /CN=399d7b29b2ebbbee375923207e1d85654f0b57ba
Certificate serial: 0194C42C7D74AD4D95D7BD5ACB5524F58236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZ17KbLru-43WSMgfh2FZU8LV7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/391c8d-6ac6-4c06-9a40-a6b5a8be1113/1/OZ17KbLru-43WSMgfh2FZU8LV7o.mft
Manifest number: 78
Signing time: Sun 02 Feb 2025 01:00:37 +0000
Manifest this update: Sun 02 Feb 2025 01:00:37 +0000
Manifest next update: Mon 03 Feb 2025 01:00:37 +0000
Files and hashes: 1: OZ17KbLru-43WSMgfh2FZU8LV7o.crl (hash: No8JgeuiVaMRgH3NBBdtvL28ksYn9Etzf4WuTzaCHTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/391c8d-6ac6-4c06-9a40-a6b5a8be1113/1/OZ17KbLru-43WSMgfh2FZU8LV7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/391c8d-6ac6-4c06-9a40-a6b5a8be1113/1/OZ17KbLru-43WSMgfh2FZU8LV7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZ17KbLru-43WSMgfh2FZU8LV7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:7d:74:ad:4d:95:d7:bd:5a:cb:55:24:f5:82:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399d7b29b2ebbbee375923207e1d85654f0b57ba
Validity
Not Before: Feb 2 01:00:37 2025 GMT
Not After : Feb 3 01:00:37 2025 GMT
Subject: CN=ff345c8d9e163a080ed06eb42113c82c6f909212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:61:7d:1a:e7:22:c7:ab:ca:56:c7:ba:75:36:
30:95:da:13:d5:0b:e8:af:85:12:2d:97:fd:f0:5e:
54:41:0b:a8:c5:4f:16:ed:e6:55:77:04:2e:d3:9d:
e0:06:b9:4c:d7:1c:ed:da:1b:54:03:03:2c:99:1d:
7b:d9:53:2e:c4:1d:77:94:09:0d:d8:bf:52:aa:47:
c5:1d:9b:40:dc:03:77:3c:76:81:cd:25:72:e1:37:
9c:aa:35:65:1c:59:d7:ce:7f:4d:6a:14:77:47:af:
c2:48:65:b2:63:7a:86:53:1c:90:bc:22:66:7d:a0:
6d:48:e6:9f:a4:85:e5:d8:e2:ae:e7:24:de:c7:cb:
1a:48:0f:52:05:ff:b9:36:06:25:ec:4a:ab:c8:b9:
b3:43:0c:aa:a7:40:63:7a:8b:8a:5d:18:2e:9a:1c:
14:53:02:79:04:1f:11:a4:c9:24:5b:3f:85:f2:4a:
1d:bf:28:d1:aa:a9:eb:f7:8c:fb:cc:20:0e:b9:6c:
89:6a:f1:06:07:18:43:ef:af:04:32:d4:88:db:82:
2b:09:03:3f:ca:90:8c:94:f0:da:cd:ba:55:4a:ba:
12:52:a4:29:b4:29:f1:79:21:da:9a:42:75:d6:0b:
85:ce:d7:2c:ed:8f:d1:4d:70:44:c2:a4:f6:0f:74:
7d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:34:5C:8D:9E:16:3A:08:0E:D0:6E:B4:21:13:C8:2C:6F:90:92:12
X509v3 Authority Key Identifier:
keyid:39:9D:7B:29:B2:EB:BB:EE:37:59:23:20:7E:1D:85:65:4F:0B:57:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZ17KbLru-43WSMgfh2FZU8LV7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/391c8d-6ac6-4c06-9a40-a6b5a8be1113/1/OZ17KbLru-43WSMgfh2FZU8LV7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/391c8d-6ac6-4c06-9a40-a6b5a8be1113/1/OZ17KbLru-43WSMgfh2FZU8LV7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:95:6a:f4:15:a5:3f:37:68:6c:59:71:c9:35:a8:0b:60:fa:
71:11:35:1c:c5:63:27:af:31:2a:5b:24:ff:84:dc:ef:af:72:
b0:86:dd:ae:d9:1a:7b:ec:38:58:6c:59:51:49:38:2f:74:09:
41:9f:ea:b6:6a:88:af:24:26:3d:1c:24:fc:f7:0a:59:53:68:
38:3b:f6:75:9a:f7:0b:cd:58:eb:c0:c9:3e:53:4b:c5:0b:04:
ba:19:f9:68:63:cb:4f:05:cf:e7:86:a2:91:a6:10:dc:ed:c4:
a6:e3:3c:a8:be:81:5c:14:9a:cf:ce:79:99:5d:a8:45:bf:79:
b7:89:c0:2c:ec:b9:10:99:2b:94:8d:2e:41:b7:77:4f:d6:1a:
b1:a1:6a:78:6e:89:00:bc:57:fd:eb:91:f5:57:fe:87:3c:16:
dd:ff:ee:74:ca:1e:34:80:eb:e3:49:5e:8a:c6:a4:81:aa:da:
27:35:b0:38:5e:47:4b:0c:26:2c:43:4f:ad:79:0b:27:07:b4:
a3:dc:aa:d4:0f:32:f6:96:0d:e3:25:9d:8a:14:24:50:39:1a:
93:5e:2a:37:1d:8b:e4:cd:54:f6:60:01:d5:bf:1d:73:e3:04:
29:4f:a1:f5:f3:c5:c0:fa:6f:83:7d:16:15:ef:fb:28:ba:79:
05:2d:e9:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTELH10rU2V171ay1Uk9YI2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5OWQ3YjI5YjJlYmJiZWUzNzU5MjMyMDdlMWQ4NTY1NGYw
YjU3YmEwHhcNMjUwMjAyMDEwMDM3WhcNMjUwMjAzMDEwMDM3WjAzMTEwLwYDVQQD
EyhmZjM0NWM4ZDllMTYzYTA4MGVkMDZlYjQyMTEzYzgyYzZmOTA5MjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGF9Gucix6vKVse6dTYwldoT1Qvo
r4USLZf98F5UQQuoxU8W7eZVdwQu053gBrlM1xzt2htUAwMsmR172VMuxB13lAkN
2L9SqkfFHZtA3AN3PHaBzSVy4TecqjVlHFnXzn9NahR3R6/CSGWyY3qGUxyQvCJm
faBtSOafpIXl2OKu5yTex8saSA9SBf+5NgYl7EqryLmzQwyqp0BjeouKXRgumhwU
UwJ5BB8RpMkkWz+F8kodvyjRqqnr94z7zCAOuWyJavEGBxhD768EMtSI24IrCQM/
ypCMlPDazbpVSroSUqQptCnxeSHamkJ11guFztcs7Y/RTXBEwqT2D3R9gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP80XI2eFjoIDtButCETyCxvkJISMB8GA1UdIwQY
MBaAFDmdeymy67vuN1kjIH4dhWVPC1e6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1oxN0tiTHJ1LTQzV1NNZ2ZoMkZaVThMVjdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8zOTFjOGQtNmFjNi00YzA2LTlhNDAt
YTZiNWE4YmUxMTEzLzEvT1oxN0tiTHJ1LTQzV1NNZ2ZoMkZaVThMVjdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8zOTFjOGQtNmFjNi00YzA2LTlhNDAtYTZiNWE4YmUxMTEz
LzEvT1oxN0tiTHJ1LTQzV1NNZ2ZoMkZaVThMVjdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu5Vq9BWl
PzdobFlxyTWoC2D6cRE1HMVjJ68xKlsk/4Tc769ysIbdrtkae+w4WGxZUUk4L3QJ
QZ/qtmqIryQmPRwk/PcKWVNoODv2dZr3C81Y68DJPlNLxQsEuhn5aGPLTwXP54ai
kaYQ3O3EpuM8qL6BXBSaz855mV2oRb95t4nALOy5EJkrlI0uQbd3T9YasaFqeG6J
ALxX/euR9Vf+hzwW3f/udMoeNIDr40leisakgaraJzWwOF5HSwwmLENPrXkLJwe0
o9yq1A8y9pYN4yWdihQkUDkak14qNx2L5M1U9mAB1b8dc+MEKU+h9fPFwPpvg30W
Fe/7KLp5BS3pCw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:07:35 2025 by rpki-client