Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.mft
File: oInHIR6wy6D9k84xaziVOM4aywA.mft (raw, json)
Hash identifier: cwsJQ9fdfNIAxSEUbfDCMMmMnqLnBuJYaurwgPqvrsM=
Subject key identifier: E6:5A:68:76:43:C7:6F:CB:06:D7:FF:20:64:46:9A:BE:0E:3B:51:81
Authority key identifier: A0:89:C7:21:1E:B0:CB:A0:FD:93:CE:31:6B:38:95:38:CE:1A:CB:00
Certificate issuer: /CN=a089c7211eb0cba0fd93ce316b389538ce1acb00
Certificate serial: 019511A24FC366256036FEDC9AA1CFA4F451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oInHIR6wy6D9k84xaziVOM4aywA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.mft
Manifest number: 0CC6
Signing time: Mon 17 Feb 2025 02:00:04 +0000
Manifest this update: Mon 17 Feb 2025 02:00:04 +0000
Manifest next update: Tue 18 Feb 2025 02:00:04 +0000
Files and hashes: 1: 07n12IDxKPAxIxs90Uxv2kiE_p8.roa (hash: onmuGRswCBPJXmNtk3krWUPKECPDIYJbgKGbyF0Mw3c=)
2: oInHIR6wy6D9k84xaziVOM4aywA.crl (hash: qiZSRLGJrpWExYrJc/bFK/vi5g7lXC/Y0WM1FMN5Pa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oInHIR6wy6D9k84xaziVOM4aywA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:4f:c3:66:25:60:36:fe:dc:9a:a1:cf:a4:f4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a089c7211eb0cba0fd93ce316b389538ce1acb00
Validity
Not Before: Feb 17 02:00:04 2025 GMT
Not After : Feb 18 02:00:04 2025 GMT
Subject: CN=e65a687643c76fcb06d7ff2064469abe0e3b5181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8a:a6:5b:a3:c0:20:ce:cd:69:64:7b:b5:29:
c9:6a:e4:c6:77:0c:72:3a:fc:0d:76:bf:25:34:66:
5b:e3:67:80:13:ba:18:b1:a6:1d:6b:1b:5e:f3:50:
9c:28:51:4b:3e:bc:09:27:de:b0:a5:62:1d:80:c0:
01:8b:90:2c:71:63:c8:ee:cc:34:f7:cd:b4:f2:1c:
30:84:c9:e2:80:49:d9:38:e0:9a:d9:56:f9:38:c4:
62:9b:ff:d4:f5:50:12:f4:2a:49:32:f0:e1:8c:12:
03:f3:4b:74:89:c2:12:86:3f:8f:a9:3e:29:46:c0:
6a:07:50:d5:a5:60:90:64:e3:3e:33:93:76:cb:1e:
43:d9:bc:93:8b:fb:58:d5:ed:b9:43:48:29:05:52:
6b:5d:28:7d:8c:ca:91:9f:90:39:4e:11:85:84:e0:
ed:71:aa:6e:92:93:b4:b9:d1:c4:62:9e:e9:ec:06:
d1:f6:0c:2b:9b:3e:c8:ea:d9:c1:08:54:07:0e:a9:
ed:8f:d0:ea:e2:4f:45:02:c7:fa:16:5d:08:bf:64:
f6:c7:35:36:3d:b3:7e:b3:c2:b4:d5:b5:93:9e:15:
99:1b:f3:e4:6f:fb:32:7f:a9:63:a3:8c:ae:e6:e3:
ca:68:5e:10:f5:3b:2c:34:27:2d:27:77:c6:ab:38:
f3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5A:68:76:43:C7:6F:CB:06:D7:FF:20:64:46:9A:BE:0E:3B:51:81
X509v3 Authority Key Identifier:
keyid:A0:89:C7:21:1E:B0:CB:A0:FD:93:CE:31:6B:38:95:38:CE:1A:CB:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oInHIR6wy6D9k84xaziVOM4aywA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:7b:03:f9:85:31:36:b8:e1:39:df:11:50:c4:7c:cd:a6:9f:
a7:e2:e4:86:aa:bb:9c:5d:f0:55:d7:c9:ab:59:69:a8:39:de:
fd:55:81:2f:61:2e:96:71:07:12:c9:ce:84:80:45:70:b0:25:
91:ba:b1:c9:d5:c1:cf:f8:13:02:70:42:3a:e7:d7:e1:d0:af:
91:26:f2:77:3c:27:cb:e4:9d:40:64:b6:66:db:9d:01:5a:42:
a3:14:48:6b:01:2f:7d:51:bd:37:c2:b6:3a:a4:fb:83:c5:1a:
8a:fe:0f:f7:09:b7:da:d3:67:42:a4:2b:fe:68:36:81:1f:d6:
d6:78:71:cf:47:23:ee:b8:7c:e6:80:59:9e:e4:9b:37:e0:54:
94:42:58:01:39:ce:ed:6c:68:9c:33:06:e0:ff:44:88:35:cd:
88:8e:7e:c4:19:e8:a9:3e:13:7f:41:14:cc:bb:6e:a0:db:3e:
f4:c9:ed:c9:2f:61:a2:12:46:0e:d4:8e:09:9a:0a:15:ac:86:
70:77:24:98:38:3e:8e:ef:58:13:ec:2b:48:a4:e5:69:b7:03:
52:ce:aa:3a:f8:b0:34:5f:71:c5:57:1d:92:ac:05:3f:97:8d:
4c:1d:a7:b9:af:dc:ea:41:80:a9:75:0a:52:1f:b6:b4:b0:3b:
7f:ed:f0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:53 2025 by rpki-client