Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
File: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft (raw, json)
Hash identifier: kNzQUgwCM3fNybfPGZZYUEWIAcjkTPCyQmYJysVprWM=
Subject key identifier: 17:4F:36:63:4E:05:C0:B0:99:7A:A7:57:20:D3:07:A9:83:3D:E1:E8
Authority key identifier: 39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F
Certificate issuer: /CN=3939f92b825ce110903c31d522b0f50cafd74a6f
Certificate serial: 019511347E617A47CC599838FBC0FFC6CE1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
Manifest number: 0411
Signing time: Mon 17 Feb 2025 00:00:07 +0000
Manifest this update: Mon 17 Feb 2025 00:00:07 +0000
Manifest next update: Tue 18 Feb 2025 00:00:07 +0000
Files and hashes: 1: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl (hash: oJpiUdD7gPfDUYHYPn5o1fVX+Nlg0nnb48IYJuNB3kI=)
2: sq58ozSBBYn9Pq2iD0u8A1RCXws.roa (hash: HPO9RE+AHD5O6YfVyp7Diuw2Q5Nz4j4DREm/1Ool0tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:7e:61:7a:47:cc:59:98:38:fb:c0:ff:c6:ce:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3939f92b825ce110903c31d522b0f50cafd74a6f
Validity
Not Before: Feb 17 00:00:07 2025 GMT
Not After : Feb 18 00:00:07 2025 GMT
Subject: CN=174f36634e05c0b0997aa75720d307a9833de1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:13:48:e2:82:20:e1:a0:9a:5a:e1:30:6b:62:
3c:11:ad:8d:2c:d2:05:22:c9:ac:cf:d4:bd:a5:63:
a7:6d:11:14:14:85:17:71:22:b2:09:6e:21:8b:92:
c2:51:68:2e:b7:7a:b5:c6:56:93:1a:d0:ef:25:bb:
49:81:8f:f7:00:f2:84:c5:bb:bc:8c:b3:3f:32:20:
7d:00:6d:4b:73:39:6e:fc:79:c8:cf:3c:86:e7:2d:
9e:b1:9f:a0:23:d3:d9:1e:4c:1e:38:49:72:66:99:
5f:c7:65:7a:b8:31:fb:b8:80:09:64:22:d1:44:94:
01:3e:cf:a1:78:4e:fd:75:85:1f:5e:ce:5a:30:86:
39:b1:ac:5e:c1:78:0f:fc:cd:2d:f3:cb:b6:e5:b9:
93:0e:1b:00:3f:97:c5:a5:ed:91:b4:82:8a:3d:ed:
7a:91:83:51:da:57:de:ef:4e:09:b4:5d:89:d5:e4:
fa:ae:06:b3:f8:2e:bb:1a:37:35:e5:a5:5d:79:ff:
31:88:bd:b1:3a:34:4a:b3:7d:c2:2c:a3:40:84:4c:
7f:9c:e4:30:19:d2:76:cf:48:d0:57:57:69:c3:5a:
30:ed:a1:f3:59:ae:e8:a9:fd:41:25:25:e7:0c:12:
37:41:ca:27:d8:07:2c:74:b4:e5:4e:1c:a6:b1:dd:
eb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4F:36:63:4E:05:C0:B0:99:7A:A7:57:20:D3:07:A9:83:3D:E1:E8
X509v3 Authority Key Identifier:
keyid:39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4d:f7:a3:51:04:d1:ce:a6:03:10:8e:46:53:c2:3c:6b:13:
d0:18:c0:46:d6:54:6a:23:aa:f4:b8:e7:a3:05:11:7b:a2:3a:
b3:6f:1f:c9:9c:4b:11:76:bf:d8:09:37:5c:6d:cf:5d:2a:a6:
1f:99:72:61:b5:f9:1a:dd:f7:76:7f:d1:dd:99:e8:13:41:30:
5d:32:5a:c7:fb:78:3c:4f:32:dc:19:78:37:63:09:a1:56:49:
86:64:fd:e8:94:ec:14:cf:78:ce:5d:f4:65:28:d6:a2:c6:c9:
6c:78:c2:e8:10:e0:08:f7:89:b0:01:ee:c2:cb:84:93:1f:fc:
ea:3b:b3:6c:27:16:47:88:60:ec:71:e3:cd:bb:17:a4:ed:a8:
92:97:8f:ae:a0:4a:30:7b:a9:90:52:c8:41:02:bf:3f:e0:30:
67:10:a9:c2:b7:d6:09:c5:25:6c:ea:1a:7a:4a:90:c9:f9:b0:
6e:d4:b9:3a:04:62:be:f6:e8:94:95:f2:31:96:df:8d:b4:3d:
47:10:45:0a:ec:20:3f:bc:e5:fc:6b:17:9c:4a:a6:4d:ad:02:
a2:5d:c5:f5:04:56:7e:0f:31:3d:54:a4:ee:46:e6:54:ae:78:
7f:46:2f:44:91:85:aa:17:44:a9:af:55:0f:fd:d1:c9:45:4d:
f6:16:94:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:16 2025 by rpki-client