Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
File: oZxkOUagWTlzVUINc7xF8U2ip2s.mft (raw, json)
Hash identifier: wFj4HGAFwIxFfQCpgTBLQGXA7AGkXroqVJb7t5JgZqM=
Subject key identifier: 74:F4:8F:6E:C4:A3:53:12:64:F3:C5:CA:62:D2:F9:4E:96:9D:CA:64
Authority key identifier: A1:9C:64:39:46:A0:59:39:73:55:42:0D:73:BC:45:F1:4D:A2:A7:6B
Certificate issuer: /CN=a19c643946a059397355420d73bc45f14da2a76b
Certificate serial: 0195121037A88C223265BE71472FF3A2C38A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
Manifest number: 13BE
Signing time: Mon 17 Feb 2025 04:00:07 +0000
Manifest this update: Mon 17 Feb 2025 04:00:07 +0000
Manifest next update: Tue 18 Feb 2025 04:00:07 +0000
Files and hashes: 1: ID7EJVgdGpnmyne0NupoGtnpzek.roa (hash: ZeCQXddR8S6+kjzcEpoW2z9l/rn9G5gRDRbTRJiZ+0o=)
2: oZxkOUagWTlzVUINc7xF8U2ip2s.crl (hash: PxtlzHf7mbTJNl2fq6px/nU1rbf5513W4f09n/cRlTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:37:a8:8c:22:32:65:be:71:47:2f:f3:a2:c3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19c643946a059397355420d73bc45f14da2a76b
Validity
Not Before: Feb 17 04:00:07 2025 GMT
Not After : Feb 18 04:00:07 2025 GMT
Subject: CN=74f48f6ec4a3531264f3c5ca62d2f94e969dca64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ef:87:bc:c2:92:a1:eb:1a:c6:d1:09:3b:bd:
4d:07:c2:4a:43:d6:33:e2:0f:e8:20:9b:36:29:0d:
96:f6:70:d3:90:bc:ec:e3:62:67:f5:64:77:a7:80:
e8:93:4d:71:c3:f8:12:19:cd:7e:15:72:97:74:ea:
8a:58:6d:95:46:bd:6b:90:6a:2b:3f:7c:c2:82:d8:
89:67:44:0f:b4:bb:52:71:e9:cf:d6:cb:3e:22:3e:
d7:da:c3:d0:83:57:a7:05:50:13:ec:6a:3f:25:a4:
69:19:e6:d7:1b:fd:4d:60:ae:d8:3d:3e:47:9a:d9:
35:93:d3:56:2d:ae:2e:b3:fe:5e:d4:44:83:96:73:
a1:e2:88:1f:76:a1:f4:4e:9f:5f:df:44:2e:a0:df:
56:e2:92:b5:33:9d:2c:d3:64:d7:b4:9f:16:32:71:
e2:ea:c8:c7:4e:ef:c7:63:56:5c:14:8f:37:43:18:
4c:63:ca:d0:dd:fa:ef:b4:15:50:ba:33:bb:50:02:
57:f2:49:49:6b:07:aa:6a:d4:c1:5c:f8:01:fc:9c:
bb:23:c8:e9:a6:f2:e3:dd:de:9a:8d:36:e4:6d:c6:
6e:be:1d:5d:e0:6b:93:e3:c5:ff:a4:04:f9:cd:2c:
91:00:26:8b:ad:40:a0:0a:49:c6:a3:b3:38:ae:09:
82:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F4:8F:6E:C4:A3:53:12:64:F3:C5:CA:62:D2:F9:4E:96:9D:CA:64
X509v3 Authority Key Identifier:
keyid:A1:9C:64:39:46:A0:59:39:73:55:42:0D:73:BC:45:F1:4D:A2:A7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:29:e4:9f:4c:40:a0:07:fc:be:53:29:62:9d:34:46:25:4d:
a0:8a:25:c8:69:ee:90:22:69:04:67:42:8b:60:31:c8:ba:a6:
b3:b4:55:44:69:70:4b:ac:01:9d:c5:36:3c:65:94:39:2a:ed:
fb:f5:0b:1d:6d:bb:3f:0c:49:f7:e0:21:52:9c:48:83:53:22:
ac:08:23:b2:0d:7e:77:99:db:c4:5f:10:29:e8:07:e2:0c:ea:
09:ae:11:6c:f4:9b:24:e7:4c:91:1a:c1:1e:1a:8f:86:ad:4f:
85:21:f5:db:2f:bd:84:75:06:5b:04:01:f7:f3:7d:01:ce:bd:
45:db:ba:18:cc:f0:a3:22:da:40:1f:0b:74:60:31:73:15:45:
9d:7e:ae:99:4a:d7:bf:0b:13:e7:a0:e5:37:0a:29:9b:8c:14:
20:72:71:9f:6c:11:de:53:74:38:04:2c:55:03:a4:31:df:e9:
a3:cc:90:ea:4e:aa:bc:7a:24:1f:1b:cf:01:b8:01:90:88:d4:
3e:b2:37:8e:b3:fa:5b:8f:92:e2:e0:e7:12:51:c3:21:85:f2:
50:20:26:86:fc:56:a4:fe:d6:f3:b8:65:e4:02:03:ce:22:b9:
d0:fa:c0:e6:00:da:cd:49:4c:7b:88:60:45:0f:7a:c5:a7:fa:
fb:c9:eb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:09 2025 by rpki-client