Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft
File: O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft (raw, json)
Hash identifier: 2DXr5rptDoaXyiY83w66QfD2f8kK/F2IVb37G0gpOQk=
Subject key identifier: 4C:66:6A:13:03:A0:5D:43:C2:6D:77:AA:85:A8:9F:91:82:CB:F2:29
Authority key identifier: 3B:EE:60:66:BB:65:2C:64:8C:7A:87:09:9D:0D:93:54:54:60:60:D3
Certificate issuer: /CN=3bee6066bb652c648c7a87099d0d9354546060d3
Certificate serial: 019510C6DE6FE351024D43A3CCB0617D8543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-5gZrtlLGSMeocJnQ2TVFRgYNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 22:00:23 +0000
Manifest this update: Sun 16 Feb 2025 22:00:23 +0000
Manifest next update: Mon 17 Feb 2025 22:00:23 +0000
Files and hashes: 1: O-5gZrtlLGSMeocJnQ2TVFRgYNM.crl (hash: LcYC2uiRGR9N6V0olUv9hpGmxJRV/sCMGOEqI/0Zo9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-5gZrtlLGSMeocJnQ2TVFRgYNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:de:6f:e3:51:02:4d:43:a3:cc:b0:61:7d:85:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bee6066bb652c648c7a87099d0d9354546060d3
Validity
Not Before: Feb 16 22:00:23 2025 GMT
Not After : Feb 17 22:00:23 2025 GMT
Subject: CN=4c666a1303a05d43c26d77aa85a89f9182cbf229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f8:d8:ae:6c:c8:de:ab:22:63:d2:27:b5:ad:
93:25:12:c4:1b:4f:25:41:4d:0c:fb:5c:b6:a0:b9:
2d:c3:fb:3a:93:d0:70:be:d5:c9:c3:9a:7c:27:f5:
3e:68:4e:b6:62:dd:29:3a:9f:cd:b9:5a:c7:14:02:
7c:c4:b5:cf:ce:d4:b6:67:48:7a:2e:9d:ad:e4:1e:
63:a2:ca:ec:5c:c3:49:36:e1:31:9c:8a:31:83:a6:
ca:c8:0b:d2:05:15:52:ce:17:d8:b6:e6:31:2b:33:
c4:c3:1a:f9:6e:7b:35:ab:8a:f7:33:1d:2b:6e:bf:
14:33:78:76:d3:62:a9:8f:e9:55:af:e4:f8:f8:df:
a8:6d:71:34:03:e3:76:38:a0:f0:9d:a7:41:2c:a5:
9d:5d:29:d7:b0:14:49:0d:33:1e:ee:7b:89:62:54:
3d:c0:07:b7:96:41:cb:86:6b:de:1d:33:5b:f4:d3:
04:11:52:cd:38:ec:30:60:e2:f9:8e:91:e7:83:bf:
92:bd:e3:8e:c5:95:ef:0b:9f:27:6d:98:35:de:38:
ec:48:79:3b:ae:56:56:18:64:8b:ad:f5:78:89:9b:
a0:c9:05:1f:10:e8:66:5c:b3:8f:c1:bc:b4:4d:29:
f6:44:00:20:6b:05:f7:91:62:36:81:66:46:3e:32:
5b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:66:6A:13:03:A0:5D:43:C2:6D:77:AA:85:A8:9F:91:82:CB:F2:29
X509v3 Authority Key Identifier:
keyid:3B:EE:60:66:BB:65:2C:64:8C:7A:87:09:9D:0D:93:54:54:60:60:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-5gZrtlLGSMeocJnQ2TVFRgYNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f9:c2:6e:a6:67:d3:89:32:9f:3e:eb:c1:f6:02:10:fd:77:
e8:78:e2:70:cf:4c:53:74:b0:5e:34:cf:07:e8:45:0a:d3:23:
b9:3c:ae:d7:d9:4a:9a:5f:52:af:63:85:78:e6:64:16:47:f3:
99:55:b4:df:27:fb:00:73:93:06:cd:a4:06:ad:35:af:7b:35:
af:de:a5:f5:90:ce:95:fa:5e:f1:85:0d:91:ab:16:b9:ff:8f:
ba:07:7e:c5:94:cd:b6:5f:49:11:fc:4a:08:2a:31:33:af:53:
b9:c6:ae:61:cb:c2:19:b3:d8:76:79:a8:31:ea:60:44:42:9b:
85:e9:9e:72:24:8b:f3:ac:6c:dd:5f:9d:d9:f2:99:e1:62:c1:
60:9b:42:87:23:9f:84:ed:13:c0:7c:71:68:74:7c:f0:dd:3b:
96:11:57:33:1a:d6:6d:52:43:4f:a4:93:a7:db:2c:10:44:92:
da:a3:45:27:51:d0:78:46:51:3a:dd:f1:78:ad:49:a0:55:b1:
00:33:4a:1f:3c:fd:fa:a2:13:ca:1c:ba:c6:44:1d:e8:bd:30:
cb:12:b6:36:d9:b2:e4:3b:50:bf:06:92:eb:1d:a3:da:96:2f:
69:15:9e:1f:df:36:77:cb:b9:cd:c5:c5:d3:e8:15:06:55:70:
42:e5:a2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:07 2025 by rpki-client