Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
File: oso33tG3DIG3SkMPm016zGKAXtg.mft (raw, json)
Hash identifier: UUSEQR+DS1b/lFoRXgYe0prBYMccHZ+B2p6AWrNND8I=
Subject key identifier: 5C:0C:05:8A:26:14:D0:8D:7B:DC:61:2E:65:84:90:6C:95:C3:19:DA
Authority key identifier: A2:CA:37:DE:D1:B7:0C:81:B7:4A:43:0F:9B:4D:7A:CC:62:80:5E:D8
Certificate issuer: /CN=a2ca37ded1b70c81b74a430f9b4d7acc62805ed8
Certificate serial: 01958CCE952FC04E1DF50A798BC3FEFC200C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
Manifest number: 02CF
Signing time: Thu 13 Mar 2025 00:01:43 +0000
Manifest this update: Thu 13 Mar 2025 00:01:43 +0000
Manifest next update: Fri 14 Mar 2025 00:01:43 +0000
Files and hashes: 1: Uua6yM2rrGnji--Kv2Pn_xDUCUQ.roa (hash: kXckJ9Wq2st2kAYy1iDEHvhVUEJf4YmXaasq7C+0rWM=)
2: WpAem0y3mJRbP65lGL1BbYc7ewY.roa (hash: 9FtB6GE1KbOq2c/Ao/RtTSsyLPIeyA8GKr7sC11YD4c=)
3: ktIBl0vO2PiY2N18cJ-d_fSxe4Q.roa (hash: PaoiyedZ99+u6zVUTqQy6HmR360bMO4FcWgPO5UfmIs=)
4: oso33tG3DIG3SkMPm016zGKAXtg.crl (hash: RQv7LPoXsO3rSe4Bcfr1Cg/c8cHvr3FZoraDEbCDlgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:95:2f:c0:4e:1d:f5:0a:79:8b:c3:fe:fc:20:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ca37ded1b70c81b74a430f9b4d7acc62805ed8
Validity
Not Before: Mar 13 00:01:43 2025 GMT
Not After : Mar 14 00:01:43 2025 GMT
Subject: CN=5c0c058a2614d08d7bdc612e6584906c95c319da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1f:99:95:0b:05:18:7e:bc:bb:56:f7:2f:6d:
0d:c4:ed:e3:f2:19:3d:05:8e:3f:eb:6c:90:97:91:
fd:30:8d:ca:1e:8a:74:db:a4:2d:30:39:fc:c6:7d:
32:98:0b:c0:03:19:4e:a9:55:21:94:6b:01:0c:1b:
bc:3b:01:2a:4f:84:ad:f1:fc:ff:af:e4:04:59:f3:
50:66:1e:31:fe:37:35:9e:ef:6b:b4:91:66:6e:ee:
4c:55:fc:28:05:0a:c4:01:61:c4:08:58:23:00:d7:
4f:7b:21:33:ba:88:b7:04:39:cc:fe:c9:25:c6:bf:
8b:b2:23:1c:6e:ba:78:5a:1d:7a:60:68:19:bc:52:
01:fb:01:30:28:30:0d:10:e7:69:dc:25:8c:85:8e:
ab:c3:a5:54:40:48:15:5d:8b:45:f6:b5:47:f8:db:
2a:5b:49:36:19:f8:a1:83:23:15:94:89:8c:97:62:
5b:69:96:2c:c9:6b:48:9b:a7:f0:58:2b:22:05:f3:
a8:b0:d5:d7:c7:6f:df:4a:eb:8e:38:42:83:12:76:
51:67:6b:7f:65:98:ef:c2:ce:f1:3c:ce:18:77:90:
e2:51:69:c0:2e:1f:13:92:04:97:de:b7:34:04:7d:
54:23:2b:95:d7:8d:23:1a:77:02:a6:64:d6:98:be:
8f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0C:05:8A:26:14:D0:8D:7B:DC:61:2E:65:84:90:6C:95:C3:19:DA
X509v3 Authority Key Identifier:
keyid:A2:CA:37:DE:D1:B7:0C:81:B7:4A:43:0F:9B:4D:7A:CC:62:80:5E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:f8:c1:37:e2:ba:53:1e:a2:aa:ea:42:e2:62:17:6e:f9:2f:
89:fc:a5:fa:ff:69:7b:51:e7:f9:9b:6d:c3:54:ef:8c:0e:17:
10:dc:85:c2:3e:8c:7d:c7:87:10:e6:47:4c:b9:31:9a:12:fe:
af:eb:ea:81:ee:3c:24:4a:e8:dd:ca:12:24:15:02:09:06:24:
5e:19:19:9c:a4:c9:e8:4d:78:71:27:98:bf:48:5a:38:5e:8e:
59:c8:5c:cb:95:e5:f1:5f:2d:7b:9e:d9:af:22:04:55:f6:fe:
b8:5c:41:94:9c:78:5e:7f:51:b5:3e:31:e3:0d:33:ea:b4:37:
8d:f6:a4:14:d5:9b:57:1a:a2:1c:29:d8:0e:3f:0f:e1:2a:1a:
20:c5:3d:2a:02:68:3b:14:fe:68:08:d0:d2:fe:c2:4c:b3:59:
93:a3:02:c8:40:c3:35:dc:10:81:8d:74:96:fb:fc:68:1b:fc:
5c:e4:6d:d6:8b:0c:e1:60:8e:27:fd:05:df:5a:6e:3d:f2:40:
06:d2:94:f1:a0:ce:07:47:a1:f3:72:bc:56:27:4b:dc:c7:32:
00:3c:ec:ef:a6:64:09:3d:71:bd:08:56:e9:36:37:0c:9b:d2:
c7:6e:10:f1:b4:17:65:c7:e4:a3:77:15:31:be:ec:30:2d:52:
ae:6d:f3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:09 2025 by rpki-client