Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft
File: oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft (raw, json)
Hash identifier: fgJ9hqgHhrt+Vb9i12xDqyLD6AyZmOOO55gjz8LBMYE=
Subject key identifier: 63:F0:8E:EA:F2:E2:22:51:56:2E:8F:96:8B:F5:CC:DF:1D:34:A8:DA
Authority key identifier: A0:C8:CD:A8:14:E7:77:D9:FE:15:4B:92:E9:95:9C:E1:20:B0:AD:58
Certificate issuer: /CN=a0c8cda814e777d9fe154b92e9959ce120b0ad58
Certificate serial: 019512104CA6E408B1815A916BA768FCE088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft
Manifest number: 1454
Signing time: Mon 17 Feb 2025 04:00:12 +0000
Manifest this update: Mon 17 Feb 2025 04:00:12 +0000
Manifest next update: Tue 18 Feb 2025 04:00:12 +0000
Files and hashes: 1: RW4un6mRBfPzHloV5RnOReMxV4M.roa (hash: 6KtCB53EZaTt4rkvk3WW5xLU60zG4n/pYxl9BtxsfPs=)
2: oMjNqBTnd9n-FUuS6ZWc4SCwrVg.crl (hash: KzZqzVSicnO1E8cw28VqZoxLUaw3x092Ykwn4NKvkPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:4c:a6:e4:08:b1:81:5a:91:6b:a7:68:fc:e0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0c8cda814e777d9fe154b92e9959ce120b0ad58
Validity
Not Before: Feb 17 04:00:12 2025 GMT
Not After : Feb 18 04:00:12 2025 GMT
Subject: CN=63f08eeaf2e22251562e8f968bf5ccdf1d34a8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:44:5d:46:f6:f8:f2:76:30:d3:2b:15:62:9b:
ff:b6:00:bf:ea:2b:69:2b:7b:e0:30:ee:1c:54:dd:
7d:77:df:fa:6b:62:6a:b0:1c:1b:b2:cf:07:4a:b2:
77:3c:f6:06:dc:34:df:96:7c:c6:27:78:6d:81:0f:
ba:94:ca:bd:0c:fa:ed:98:50:e0:8c:2a:fd:2d:9d:
b1:6b:35:7e:ee:be:b7:dd:0e:66:92:a6:2c:5d:41:
20:0a:04:9e:44:13:cc:41:20:90:bf:6d:10:e6:41:
0e:3d:b0:c7:a4:2b:73:8b:a6:9f:df:3d:d0:d7:99:
31:af:39:bc:1d:3b:a1:88:ec:d3:b7:0f:3f:54:89:
b6:ef:c4:64:b2:56:62:02:cb:77:6e:12:45:c3:92:
5b:02:0e:cb:70:28:1f:45:af:50:e7:f2:5c:19:e3:
80:f7:db:88:55:a5:c1:ae:09:07:a6:3c:6a:52:2a:
1e:e9:40:28:50:f7:38:24:eb:10:04:bb:90:9c:45:
71:68:4b:97:38:f4:f8:0a:4d:ff:bf:4c:e9:ad:e1:
07:68:81:07:37:f3:02:b1:4a:4d:09:d6:9d:5d:28:
af:6d:9e:ae:64:f5:4b:73:e4:db:e1:8e:87:42:0e:
76:87:09:98:97:4e:a0:10:3c:16:a1:db:10:89:23:
cf:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F0:8E:EA:F2:E2:22:51:56:2E:8F:96:8B:F5:CC:DF:1D:34:A8:DA
X509v3 Authority Key Identifier:
keyid:A0:C8:CD:A8:14:E7:77:D9:FE:15:4B:92:E9:95:9C:E1:20:B0:AD:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:63:9a:62:4d:25:66:5f:c9:25:a6:c1:77:7d:d2:70:29:1f:
2a:5c:67:cd:02:34:12:b9:b0:bf:4f:c2:51:ce:cc:f2:c9:7a:
bc:49:8b:02:82:d8:30:f8:54:2e:f5:47:5c:eb:5d:c9:da:d1:
34:bd:44:04:3d:46:aa:64:61:00:c2:1f:82:30:4a:34:d7:ad:
1b:c6:f4:12:a6:4a:6c:2c:26:d0:b2:a6:75:fe:da:b7:bd:89:
f4:37:e0:e6:05:99:80:06:c9:23:fc:ce:51:73:34:b4:3c:35:
7d:0c:9e:9d:bf:be:45:d6:b2:9d:b2:cc:67:84:ac:c3:17:06:
91:3b:f6:db:39:db:a5:0e:e6:1e:be:ce:ba:88:c0:41:65:cc:
23:32:4f:d1:28:32:8b:de:a3:e4:93:c8:ba:37:ad:7c:bb:6a:
55:d3:54:81:1a:58:60:8e:5d:ad:1a:a4:83:45:a1:04:0e:05:
54:96:48:0f:c1:84:9d:bc:d4:28:09:b1:03:20:6f:00:be:79:
41:6d:fc:e6:d1:af:9b:e5:a2:16:71:3e:e5:b0:3e:01:e9:83:
4f:3e:e2:71:31:52:fc:90:60:70:14:e4:93:72:5f:39:2f:17:
11:ae:db:d6:c3:e7:79:6c:cd:33:de:13:4d:92:a5:a1:67:5a:
5a:01:dd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:27 2025 by rpki-client