Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
File: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft (raw, json)
Hash identifier: yxd6kb+XaMlPlFjH980Hbt/ZQPawkeCu9HHTyn+ICho=
Subject key identifier: 29:BF:F6:3A:A4:71:43:16:86:B5:59:AE:5E:5D:96:B8:FA:E9:C4:D1
Authority key identifier: 3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
Certificate issuer: /CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Certificate serial: 0194C4D1621A7A0E483EA0CD94002514FF21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
Manifest number: 4D
Signing time: Sun 02 Feb 2025 04:00:43 +0000
Manifest this update: Sun 02 Feb 2025 04:00:43 +0000
Manifest next update: Mon 03 Feb 2025 04:00:43 +0000
Files and hashes: 1: GHoYC29SdZ8JHtSYpKsW5kablNc.roa (hash: Ggk2bB2uCoFFVfvkzavwaobQUbDhv+a9KTxQ1jDSQZ0=)
2: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl (hash: fNGkMxWiRS2w4CdSu0qqaciJKjeR38cwqLR1xEznvGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:62:1a:7a:0e:48:3e:a0:cd:94:00:25:14:ff:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Validity
Not Before: Feb 2 04:00:43 2025 GMT
Not After : Feb 3 04:00:43 2025 GMT
Subject: CN=29bff63aa471431686b559ae5e5d96b8fae9c4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:02:e6:99:a4:87:dc:75:f9:d3:31:51:fe:43:
6e:d9:e7:d6:57:9f:dd:6a:80:64:1d:09:07:ed:8d:
d9:c8:33:28:76:b1:f8:03:c6:aa:44:1a:f9:a5:6f:
b2:6b:3e:fe:ab:5a:17:0e:6d:60:2f:f1:75:f6:ce:
d1:ab:53:6a:b2:4a:93:03:8d:3a:01:f1:6f:86:09:
38:12:8b:15:9f:f9:29:89:31:f5:13:b5:a7:f1:8f:
75:8e:49:1e:de:ae:e2:81:79:d9:8e:b2:25:47:f5:
59:e9:67:b9:66:04:88:88:aa:76:bf:bc:12:74:65:
5e:d5:e7:b2:61:c7:53:66:76:d7:8e:db:bf:4e:ef:
e7:6c:40:f0:8f:93:eb:62:9e:74:06:3b:e5:14:7c:
2b:16:c1:7f:18:39:38:23:9a:b7:3b:76:5d:39:bf:
5b:7c:52:d6:45:67:2e:97:02:12:e7:8b:b0:44:5a:
de:06:71:7f:62:e8:c9:a6:1d:64:40:50:7f:fa:eb:
95:43:5f:a4:3a:1b:ff:a3:84:7f:bb:d2:9e:a8:96:
48:1a:30:63:7a:9e:8f:84:e5:c9:d0:de:a7:7a:25:
1c:86:db:53:6b:83:34:a9:6a:bf:6a:c1:a7:5e:55:
3e:3f:f4:5b:58:8e:7b:65:ba:30:77:09:76:75:fc:
c2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BF:F6:3A:A4:71:43:16:86:B5:59:AE:5E:5D:96:B8:FA:E9:C4:D1
X509v3 Authority Key Identifier:
keyid:3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:07:1e:e5:58:40:61:96:a0:d8:35:d8:d7:21:44:27:8e:47:
ef:75:b7:7b:85:54:46:f3:35:24:01:03:7c:ed:13:31:c0:73:
5b:80:74:e3:81:1e:98:f6:6a:8a:ac:27:78:a8:4b:23:a0:95:
ed:c0:f3:ca:b0:18:6e:60:8d:4d:21:fe:29:fd:11:97:9e:4f:
93:d2:c5:1c:d3:67:c3:80:b9:d0:bb:a1:f4:b2:a2:52:34:b5:
eb:82:10:f0:3b:f3:13:ae:f3:b5:9a:c3:85:30:2b:e0:7b:ff:
b4:a8:27:15:86:a5:c2:0d:08:13:4d:04:6f:4e:03:12:51:5c:
44:93:84:89:d2:67:2e:0a:54:4b:13:97:1f:e6:ca:f1:7a:87:
30:53:04:ca:56:da:fe:5e:10:2a:eb:97:4c:95:7e:51:49:69:
12:63:84:4b:a6:b5:bc:c7:aa:6a:e3:36:b9:dc:e1:07:7d:d8:
5b:94:f7:06:b1:a2:1b:16:1a:e5:23:94:8e:98:d9:dc:82:ee:
df:bb:8b:ea:af:82:b7:40:83:73:90:07:b7:ea:cc:4f:19:ed:
22:3d:1e:d6:76:7e:c3:55:b0:58:02:5b:e6:ae:05:14:fa:c7:
72:20:12:74:cd:79:25:15:54:e7:be:6c:ca:21:32:9e:14:f7:
c7:dc:65:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:50:24 2025 by rpki-client