Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
File: osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft (raw, json)
Hash identifier: SyubcvEkdFl2tkjGh30CigzRtIhcnEQky+WRHVFrtMQ=
Subject key identifier: 98:77:F2:6D:25:20:07:8B:CD:E5:EF:4E:D1:D2:54:A9:B8:0D:90:C7
Authority key identifier: A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
Certificate issuer: /CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Certificate serial: 0194C42CC0CF3AB78737CBDB21C4851FD9BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
Manifest number: 142F
Signing time: Sun 02 Feb 2025 01:00:54 +0000
Manifest this update: Sun 02 Feb 2025 01:00:54 +0000
Manifest next update: Mon 03 Feb 2025 01:00:54 +0000
Files and hashes: 1: T1KxzYg5ki8jROBXHnXsuuF1Usc.roa (hash: pSMvp0rn5YAkLffVlSaMpmmw60CI4RpSAuDI1ZJ7Bys=)
2: osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl (hash: YS/9J1XdaSns6uSpBkgzG+Iw4QQFl6xWg2WUmGuu6u0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:c0:cf:3a:b7:87:37:cb:db:21:c4:85:1f:d9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Validity
Not Before: Feb 2 01:00:54 2025 GMT
Not After : Feb 3 01:00:54 2025 GMT
Subject: CN=9877f26d2520078bcde5ef4ed1d254a9b80d90c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:0b:a4:0e:46:ad:79:65:cc:8f:b4:14:e4:75:
58:7b:39:ca:06:e3:52:de:35:42:1d:91:ba:16:22:
85:79:17:d2:20:85:42:c4:e8:8f:ba:88:7f:1c:a3:
73:8c:9f:4b:fd:35:e3:18:51:24:fc:e5:04:18:5e:
48:75:20:e1:6c:25:e0:ca:b8:10:2b:a2:3c:0f:45:
7a:c5:e2:4c:b0:74:b9:b2:ef:3d:84:47:31:59:5c:
af:60:8f:c2:80:a8:0c:be:e8:44:f5:25:6b:14:24:
31:05:17:a5:ea:da:4a:c7:81:a3:bb:58:0d:fb:5c:
60:b2:95:1a:42:0c:6a:f9:fa:59:8b:5f:74:99:17:
2d:64:47:ba:a8:c8:95:b8:43:12:dc:a6:15:43:2a:
26:7a:05:eb:56:22:be:e4:25:5c:83:93:fd:8c:a4:
6a:0f:1f:fd:65:68:8d:a5:c8:64:1b:7d:f3:a3:e0:
f9:d8:ce:c4:3a:b5:d7:f0:b7:52:4e:bd:7d:32:81:
02:c8:3a:f3:88:1f:d6:7f:e9:85:82:15:a0:1d:22:
40:7d:a8:06:39:2d:81:12:f7:3d:04:65:b1:0d:a7:
8a:9f:49:3e:ba:6d:3c:66:a2:0f:e9:2b:c9:bf:7b:
94:ca:ad:16:c4:41:e7:bf:dd:97:46:45:ef:ef:ee:
09:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:77:F2:6D:25:20:07:8B:CD:E5:EF:4E:D1:D2:54:A9:B8:0D:90:C7
X509v3 Authority Key Identifier:
keyid:A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b4:db:cb:a4:8f:dd:57:ec:46:0c:1b:5a:99:d1:a9:a0:30:
a0:38:b2:e0:6e:b0:0f:d0:6e:9e:75:d0:0c:ac:38:24:d7:5a:
d1:ff:f4:1e:0e:da:b4:b6:ac:1a:1a:f0:d3:60:81:04:6d:7b:
0b:c5:eb:77:f8:9f:df:00:92:22:20:c8:f5:08:63:9f:96:9e:
45:07:a8:c4:97:db:59:cf:8e:07:60:7b:b9:af:e0:1b:c5:d6:
6d:8f:74:1b:ca:ed:b6:7b:50:0c:e5:76:24:65:13:4f:7f:fd:
a9:58:3f:aa:d3:2d:8c:71:1c:c0:be:68:88:6b:16:ed:73:66:
c0:01:f9:8c:3f:8a:a0:44:9e:ef:bc:8a:7b:1a:4c:1d:c5:df:
af:00:04:44:76:96:89:47:69:04:aa:aa:c5:fb:40:d2:6d:42:
0b:a3:e0:91:e9:7d:1b:af:3c:9f:be:af:c7:73:a6:41:d7:87:
2f:1b:bb:b5:da:6e:5f:30:96:51:49:06:58:55:10:dc:c9:2f:
71:03:2e:47:9f:87:b2:fb:3e:6a:f4:ab:8a:44:2f:51:f5:3e:
0d:8e:bb:55:64:13:ac:95:f5:e5:9b:e0:44:b3:0f:f2:37:29:
40:06:13:90:5c:5b:fe:1c:4a:22:af:81:ea:c0:73:1d:e1:ba:
8d:29:36:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:03:19 2025 by rpki-client