Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
File: oE3odQHH0wgsdmWfTevZQohDtMs.mft (raw, json)
Hash identifier: /YJ4cWF1NTJAb6n6c4c6b1NFxINy7x7TN07VRdL2oS4=
Subject key identifier: DB:61:BB:28:3D:7D:DE:01:07:A0:EC:B6:64:C1:DE:AE:2D:94:6F:3C
Authority key identifier: A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB
Certificate issuer: /CN=a04de87501c7d3082c76659f4debd9428843b4cb
Certificate serial: 019511A3012287D597DA5C2F1E05BC20D5CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
Manifest number: 1039
Signing time: Mon 17 Feb 2025 02:00:50 +0000
Manifest this update: Mon 17 Feb 2025 02:00:50 +0000
Manifest next update: Tue 18 Feb 2025 02:00:50 +0000
Files and hashes: 1: 3oKx6h0eBr3yZ2nfockvN65K1_o.roa (hash: geWao+6sgTP3cLFpfRuFIKY1lyLCLqYJA9Pcg4p46Gs=)
2: oE3odQHH0wgsdmWfTevZQohDtMs.crl (hash: i1IUE8tOux+21H0/tvO4phommGMCMtLRwpdXEri1ODE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a3:01:22:87:d5:97:da:5c:2f:1e:05:bc:20:d5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04de87501c7d3082c76659f4debd9428843b4cb
Validity
Not Before: Feb 17 02:00:50 2025 GMT
Not After : Feb 18 02:00:50 2025 GMT
Subject: CN=db61bb283d7dde0107a0ecb664c1deae2d946f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:43:89:c5:11:0b:75:6a:2a:8a:f7:cd:84:ce:
21:17:00:0b:4a:c6:2a:53:f2:4d:8b:8a:09:73:2d:
f4:d9:18:59:d7:4f:91:eb:eb:44:a6:41:d2:ba:bb:
2b:0a:1f:41:ab:98:19:0d:db:cb:6c:f3:b1:05:ff:
1f:f4:0a:20:08:40:94:76:1a:b8:48:a8:68:49:ef:
39:57:25:49:26:b7:af:02:15:5e:d6:9e:c9:e5:43:
1a:34:b2:fc:88:d0:61:95:c1:c7:35:22:a0:2c:fb:
c5:bc:58:c4:16:36:82:7e:91:67:9d:8e:55:47:c9:
66:fd:e9:06:e7:8b:01:d8:fc:54:e6:b3:50:b1:90:
91:9e:2f:b9:f6:51:6c:bf:7b:11:6a:da:4e:a4:ba:
23:97:37:c1:64:6b:2c:f9:b2:1e:aa:87:89:f4:55:
a6:8d:92:73:5b:ce:9f:87:93:5a:37:5f:d7:d9:5d:
bf:b9:70:86:8a:9b:b3:cb:70:42:c2:f3:ff:4f:e2:
cf:69:a0:0d:54:59:b7:a9:b4:60:a2:3f:ff:e9:34:
95:20:d8:5e:f9:52:b4:f6:4e:21:79:d7:1a:68:99:
d6:88:4a:c2:b5:93:fa:4a:ce:f5:c0:63:8b:b5:4b:
95:01:2d:c6:4b:47:d2:01:08:f8:7a:fd:05:38:ba:
8a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:61:BB:28:3D:7D:DE:01:07:A0:EC:B6:64:C1:DE:AE:2D:94:6F:3C
X509v3 Authority Key Identifier:
keyid:A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:52:f9:1f:67:bc:e5:b0:00:7a:4e:37:e7:b4:00:b8:c2:0c:
17:1a:2b:d7:ca:c3:9c:e3:c4:a2:98:8e:00:11:f2:5a:f9:fa:
16:2f:b2:83:b3:24:e9:60:07:50:bf:96:48:62:9b:12:ea:97:
8e:5d:70:4b:05:00:54:15:ee:48:ce:a6:9d:cf:84:a3:a3:d8:
5b:a6:e9:1d:14:5e:3f:11:13:bc:90:1b:c1:c4:40:65:9f:f0:
f9:b7:61:b9:3e:e7:5c:f8:8c:d4:0d:e8:b0:c2:77:a1:4f:48:
4f:4c:62:72:28:e4:f0:2d:a0:d9:e6:79:8d:1f:bb:02:c9:db:
5c:77:2d:9c:5a:ae:60:aa:25:30:8d:93:dd:a6:b7:b7:51:85:
ba:ee:7c:8e:95:6a:2c:ef:03:d2:70:dc:dc:3a:1b:ce:cc:14:
c0:24:46:8a:aa:8c:5f:cb:98:1e:25:8e:46:ac:d6:ae:94:ba:
b8:a4:70:b5:ee:da:5d:bb:85:37:6c:5b:61:46:04:1b:fb:10:
a1:a4:0d:68:aa:06:4f:85:3f:d6:1a:d9:32:81:c5:06:af:96:
bd:c8:ca:d5:c2:c7:ea:67:ce:83:96:16:c6:74:2d:10:4c:d8:
aa:7d:35:7a:9b:f2:4a:60:63:3c:11:6b:68:ec:5a:cb:fe:03:
ab:db:38:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURowEih9WX2lwvHgW8INXOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNGRlODc1MDFjN2QzMDgyYzc2NjU5ZjRkZWJkOTQyODg0
M2I0Y2IwHhcNMjUwMjE3MDIwMDUwWhcNMjUwMjE4MDIwMDUwWjAzMTEwLwYDVQQD
EyhkYjYxYmIyODNkN2RkZTAxMDdhMGVjYjY2NGMxZGVhZTJkOTQ2ZjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkOJxRELdWoqivfNhM4hFwALSsYq
U/JNi4oJcy302RhZ10+R6+tEpkHSursrCh9Bq5gZDdvLbPOxBf8f9AogCECUdhq4
SKhoSe85VyVJJrevAhVe1p7J5UMaNLL8iNBhlcHHNSKgLPvFvFjEFjaCfpFnnY5V
R8lm/ekG54sB2PxU5rNQsZCRni+59lFsv3sRatpOpLojlzfBZGss+bIeqoeJ9FWm
jZJzW86fh5NaN1/X2V2/uXCGipuzy3BCwvP/T+LPaaANVFm3qbRgoj//6TSVINhe
+VK09k4hedcaaJnWiErCtZP6Ss71wGOLtUuVAS3GS0fSAQj4ev0FOLqKwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNthuyg9fd4BB6DstmTB3q4tlG88MB8GA1UdIwQY
MBaAFKBN6HUBx9MILHZln03r2UKIQ7TLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0Uzb2RRSEgwd2dzZG1XZlRldlpRb2hEdE1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NjVjOTAtNzBmYi00MDE1LWI5Njkt
NzQ4Zjc4NzgzODhhLzEvb0Uzb2RRSEgwd2dzZG1XZlRldlpRb2hEdE1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80NjVjOTAtNzBmYi00MDE1LWI5NjktNzQ4Zjc4NzgzODhh
LzEvb0Uzb2RRSEgwd2dzZG1XZlRldlpRb2hEdE1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmlL5H2e8
5bAAek4357QAuMIMFxor18rDnOPEopiOABHyWvn6Fi+yg7Mk6WAHUL+WSGKbEuqX
jl1wSwUAVBXuSM6mnc+Eo6PYW6bpHRRePxETvJAbwcRAZZ/w+bdhuT7nXPiM1A3o
sMJ3oU9IT0xicijk8C2g2eZ5jR+7AsnbXHctnFquYKolMI2T3aa3t1GFuu58jpVq
LO8D0nDc3DobzswUwCRGiqqMX8uYHiWORqzWrpS6uKRwte7aXbuFN2xbYUYEG/sQ
oaQNaKoGT4U/1hrZMoHFBq+WvcjK1cLH6mfOg5YWxnQtEEzYqn01epvySmBjPBFr
aOxay/4Dq9s4mA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:52 2025 by rpki-client