Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/b8b7e4-f4cd-4e06-b81c-c5caa7faed7d/1/oCUXdNbYdJdjkKBWG3ZtQSXv5uw.mft
File: oCUXdNbYdJdjkKBWG3ZtQSXv5uw.mft (raw, json)
Hash identifier: /Zwv49I/WiWmFbZdgvGjOd6v88V5F8t60DAF+Pd5NSw=
Subject key identifier: AE:7C:69:B1:12:97:E3:EC:A8:D7:01:E6:7A:90:C7:D3:9F:20:18:9B
Authority key identifier: A0:25:17:74:D6:D8:74:97:63:90:A0:56:1B:76:6D:41:25:EF:E6:EC
Certificate issuer: /CN=a0251774d6d874976390a0561b766d4125efe6ec
Certificate serial: 0195127E60E39365AA1D2C23744200D246BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCUXdNbYdJdjkKBWG3ZtQSXv5uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/b8b7e4-f4cd-4e06-b81c-c5caa7faed7d/1/oCUXdNbYdJdjkKBWG3ZtQSXv5uw.mft
Manifest number: 13A4
Signing time: Mon 17 Feb 2025 06:00:27 +0000
Manifest this update: Mon 17 Feb 2025 06:00:27 +0000
Manifest next update: Tue 18 Feb 2025 06:00:27 +0000
Files and hashes: 1: 5eyDqPyAo9Xd99AUR3yYU66V9rw.roa (hash: MoYh7IaPPg0nfwmEO7sIyivg9TgZy97zyEzoB/AzKYk=)
2: oCUXdNbYdJdjkKBWG3ZtQSXv5uw.crl (hash: FwkMUgrFH+S7MzyRiA2rhsAMmC87jp/sZgzN4YXktFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/b8b7e4-f4cd-4e06-b81c-c5caa7faed7d/1/oCUXdNbYdJdjkKBWG3ZtQSXv5uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/b8b7e4-f4cd-4e06-b81c-c5caa7faed7d/1/oCUXdNbYdJdjkKBWG3ZtQSXv5uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oCUXdNbYdJdjkKBWG3ZtQSXv5uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:60:e3:93:65:aa:1d:2c:23:74:42:00:d2:46:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0251774d6d874976390a0561b766d4125efe6ec
Validity
Not Before: Feb 17 06:00:27 2025 GMT
Not After : Feb 18 06:00:27 2025 GMT
Subject: CN=ae7c69b11297e3eca8d701e67a90c7d39f20189b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:15:05:c8:c4:21:87:f8:07:3c:78:50:35:3f:
88:2c:cf:92:5e:2c:15:d0:b3:52:82:58:b4:b0:44:
7c:08:95:f0:43:eb:7a:06:cd:2b:27:94:4e:e9:f3:
42:16:91:a4:9c:7d:b7:96:ac:6d:c5:0e:45:3a:f4:
69:6f:66:84:ae:01:82:1d:2c:54:2b:0e:44:5b:b0:
66:67:43:4b:3e:5e:f5:3f:b7:89:dc:73:15:b9:cc:
09:66:29:15:dd:27:18:e2:62:76:33:5a:07:d1:98:
55:d4:b5:cf:0b:17:a9:90:3c:a0:64:ed:bb:32:1d:
35:f0:e5:eb:8c:89:a4:c2:72:36:e8:44:52:93:8a:
a3:61:4e:01:d6:2a:31:b9:60:92:60:cb:22:39:b1:
34:02:1b:9d:98:a8:08:35:d3:e9:ff:87:cb:4b:a8:
ec:ad:68:5b:9f:05:44:21:89:ca:38:eb:88:3a:5f:
e7:4d:ee:5e:56:95:22:73:73:c5:b6:4e:9d:20:93:
4e:94:89:14:25:78:da:f9:3b:5e:42:03:63:4d:80:
8a:93:30:d0:32:1a:c4:0b:b5:87:47:7e:93:56:fb:
f5:e0:ce:89:a4:b5:a0:67:73:3d:d7:12:8c:b2:a4:
95:d0:1b:cf:a2:77:77:33:3a:1d:70:14:29:03:07:
f1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7C:69:B1:12:97:E3:EC:A8:D7:01:E6:7A:90:C7:D3:9F:20:18:9B
X509v3 Authority Key Identifier:
keyid:A0:25:17:74:D6:D8:74:97:63:90:A0:56:1B:76:6D:41:25:EF:E6:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCUXdNbYdJdjkKBWG3ZtQSXv5uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/b8b7e4-f4cd-4e06-b81c-c5caa7faed7d/1/oCUXdNbYdJdjkKBWG3ZtQSXv5uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/b8b7e4-f4cd-4e06-b81c-c5caa7faed7d/1/oCUXdNbYdJdjkKBWG3ZtQSXv5uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:de:44:8d:c0:eb:59:e8:b7:5d:3c:a2:40:29:47:47:51:f5:
2b:de:f3:77:2e:56:60:22:a9:9d:b3:ba:a4:c4:43:56:df:7c:
80:c2:21:59:a4:39:73:ac:24:71:85:05:36:04:30:7b:1f:96:
31:44:2b:ef:c6:29:92:28:b6:ca:80:fd:bf:52:e5:e0:7d:c3:
e5:82:2a:70:92:e1:e5:89:f7:39:2f:49:ec:9a:7d:f1:b9:31:
8f:5a:57:f0:68:d3:e7:0b:90:77:78:0a:28:8c:49:56:fe:5f:
0f:94:0e:4c:25:6b:13:94:18:97:a1:12:87:a7:92:82:5e:04:
87:af:1a:0c:31:52:cd:ff:6e:00:15:eb:a6:be:0f:ea:b6:6d:
47:f4:4e:97:26:b6:99:0a:96:ec:d9:59:2f:14:3c:2c:8e:46:
67:e7:66:3e:01:b0:97:44:2a:24:8a:e8:b3:d5:e3:4e:d2:e0:
0c:3e:f4:a8:d9:95:cf:33:49:36:4e:82:9c:ee:ad:0e:2c:6a:
46:47:f8:dc:8d:61:0d:45:72:5d:95:1b:a6:14:4f:74:b6:b7:
49:7f:8a:a7:b8:ac:f9:e0:32:72:ca:41:7a:92:ac:2a:45:14:
5d:bd:26:64:08:de:ef:b8:cf:0a:e3:75:f3:d6:e4:46:2c:e4:
d5:22:ed:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:47 2025 by rpki-client