Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
File: T0_oHzIxJo9848MUpJaoLMInfDs.mft (raw, json)
Hash identifier: pZSUA32YM7j1zWNWu2ui5wf4ZjljroAXn8z8iOpfRMs=
Subject key identifier: 45:4E:0B:3F:18:3C:77:8E:6E:4A:7B:C5:40:2A:DE:29:B0:C0:76:3F
Authority key identifier: 4F:4F:E8:1F:32:31:26:8F:7C:E3:C3:14:A4:96:A8:2C:C2:27:7C:3B
Certificate issuer: /CN=4f4fe81f3231268f7ce3c314a496a82cc2277c3b
Certificate serial: 0194C463561B20FBE05102A8465C0AF1310B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
Manifest number: 11A7
Signing time: Sun 02 Feb 2025 02:00:31 +0000
Manifest this update: Sun 02 Feb 2025 02:00:31 +0000
Manifest next update: Mon 03 Feb 2025 02:00:31 +0000
Files and hashes: 1: T0_oHzIxJo9848MUpJaoLMInfDs.crl (hash: UMnLQpb96rFT/B0ZVyZrQ5fJuknaRgDC05YGTLn0CJo=)
2: aeH9HJ9pJaNmWyF-L7DK5SJwZY4.roa (hash: ZymKLot+S0ODnNv/ycCiCzvG9PSmkpOXHHZ4MxN5d9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:56:1b:20:fb:e0:51:02:a8:46:5c:0a:f1:31:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4fe81f3231268f7ce3c314a496a82cc2277c3b
Validity
Not Before: Feb 2 02:00:31 2025 GMT
Not After : Feb 3 02:00:31 2025 GMT
Subject: CN=454e0b3f183c778e6e4a7bc5402ade29b0c0763f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:24:0d:bd:53:03:33:14:49:f4:7d:cc:db:01:
fb:d8:31:16:66:37:ca:f7:5d:bf:58:e7:7e:08:75:
31:9a:d6:2d:2a:c1:35:53:77:4d:a7:69:1b:33:3a:
3e:86:04:40:91:bd:98:6b:0c:b4:f2:d7:55:19:d9:
d6:2d:0e:64:f1:88:d0:88:fc:da:0d:2c:6d:29:b1:
3e:62:f1:f3:be:a5:99:6e:5d:ee:02:96:14:d6:fa:
6d:17:5e:5b:75:13:7c:25:1b:70:87:cf:4e:9a:f8:
cf:d3:15:1d:5a:11:4c:7a:6f:ed:b1:82:dc:d9:5a:
61:55:c7:e6:ac:b7:c7:62:5e:80:fb:d2:a2:66:be:
01:f2:e3:55:9b:0b:4d:86:43:99:93:33:9f:38:1d:
ae:54:f5:8c:8f:1b:85:90:42:c3:61:f5:a9:d1:8d:
da:92:08:13:f9:2b:fb:77:d3:4b:99:e4:2a:05:2a:
98:6b:bb:f0:65:52:7a:66:ce:a6:05:c6:d3:fe:47:
f0:75:a0:4c:4f:ce:d7:a1:8c:11:47:ee:d9:11:5a:
76:b4:63:79:33:ea:18:24:8d:26:a9:c6:b8:aa:6b:
19:eb:e3:0a:8b:88:1e:d0:06:c7:d8:86:b7:ac:b1:
8c:45:65:19:62:2e:0f:60:3b:74:d5:c2:60:89:22:
dd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4E:0B:3F:18:3C:77:8E:6E:4A:7B:C5:40:2A:DE:29:B0:C0:76:3F
X509v3 Authority Key Identifier:
keyid:4F:4F:E8:1F:32:31:26:8F:7C:E3:C3:14:A4:96:A8:2C:C2:27:7C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c4:09:07:d2:35:65:01:c5:92:77:05:ac:1c:e3:2c:eb:aa:
04:6a:70:ed:7e:70:14:b6:3c:7b:34:15:c4:23:0b:61:00:13:
f1:e4:ab:db:e3:34:95:bc:99:f3:4d:79:85:f9:d2:f2:fa:0b:
69:bc:26:f3:e1:c9:e1:ee:24:dc:7f:77:33:2b:a6:5c:f1:2e:
26:5d:b0:aa:dc:7d:04:5e:4f:d5:c5:ed:2a:7c:42:1a:f8:78:
17:49:b8:28:f8:df:87:9f:a7:7b:01:b7:cd:3b:d6:b4:8f:54:
54:c4:b2:94:2d:59:0d:75:ca:f5:38:bc:2c:71:e3:db:69:c5:
4d:37:06:51:0f:f6:13:68:5f:dd:7d:a9:e1:3b:3a:32:26:9e:
1f:7c:79:7f:8c:3f:5e:3f:b5:27:66:08:04:c7:58:77:4f:71:
69:83:d0:2c:3c:6c:0f:37:65:f6:0d:2e:c4:0f:70:7a:62:6b:
0d:69:9e:3d:5f:36:b5:15:b2:14:6e:da:55:15:25:e6:35:80:
07:10:a5:88:ee:2f:3d:81:70:ae:d7:1a:a5:a1:53:b3:db:0b:
0d:76:3a:ad:41:e3:83:b5:50:df:3c:85:ac:65:33:5c:05:0d:
15:d7:0f:b0:cd:9d:44:df:1b:a7:8e:5f:4b:1c:31:f6:20:28:
b3:c1:21:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:43:35 2025 by rpki-client