Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
File: osUThqzwWzqrYYEEdHjW7qG_AGI.mft (raw, json)
Hash identifier: T7RZxAxiYGZY3hQhcyeYo4S3rLZAsZNG/hkkuu3KSTA=
Subject key identifier: 3B:F7:3A:8B:75:DF:1A:70:0A:B1:AA:C8:D2:71:72:FA:80:BF:25:45
Authority key identifier: A2:C5:13:86:AC:F0:5B:3A:AB:61:81:04:74:78:D6:EE:A1:BF:00:62
Certificate issuer: /CN=a2c51386acf05b3aab6181047478d6eea1bf0062
Certificate serial: 0194C3F63A49BF82A7663C23CC2F53A43104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
Manifest number: 19
Signing time: Sun 02 Feb 2025 00:01:21 +0000
Manifest this update: Sun 02 Feb 2025 00:01:21 +0000
Manifest next update: Mon 03 Feb 2025 00:01:21 +0000
Files and hashes: 1: 0cFm87h5GkHalEGqmJaLcd0Qqo8.roa (hash: jMxPSL+zdsv3eh4JmgehYYH5Kp/WnR56mTqAfCb0p0E=)
2: osUThqzwWzqrYYEEdHjW7qG_AGI.crl (hash: zUEWnDA1JywJzm3W2SSMsym1wIYTa6r7NcqjByL4DBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:3a:49:bf:82:a7:66:3c:23:cc:2f:53:a4:31:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c51386acf05b3aab6181047478d6eea1bf0062
Validity
Not Before: Feb 2 00:01:21 2025 GMT
Not After : Feb 3 00:01:21 2025 GMT
Subject: CN=3bf73a8b75df1a700ab1aac8d27172fa80bf2545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b4:5e:6f:ea:8a:88:0c:80:3a:0b:ec:0b:c4:
1a:05:dd:46:d9:2a:c2:eb:00:38:ed:0a:9d:b6:7a:
ae:8a:d0:4d:d5:8c:cc:84:05:7f:15:d3:b9:97:56:
41:e5:47:0b:ad:15:68:ff:ff:95:f1:69:3d:0d:e6:
b1:23:62:ac:74:0e:5a:3a:01:e8:55:20:56:c5:a9:
bb:aa:e1:d2:47:47:78:cc:65:f9:4e:8f:ee:0a:c9:
5b:fe:71:ac:1f:5e:37:71:b2:44:1f:72:b9:86:0d:
f4:f3:cf:84:c7:9c:b6:ee:ff:d1:b0:ef:24:31:a6:
11:d4:6b:18:72:84:57:ca:74:2c:03:2f:29:73:45:
bd:1c:1e:e2:2a:2c:d0:0f:d1:0d:a9:5d:54:62:23:
7a:af:53:89:4c:6a:28:ab:4f:a4:c8:0b:3e:4b:11:
16:3e:14:8e:30:fa:25:4f:47:ed:68:8b:f2:c4:97:
45:89:37:e1:bb:ad:be:50:e0:c9:82:e3:f9:47:d7:
b9:26:54:a3:5b:ae:6f:85:27:4a:d3:ca:96:54:01:
60:e7:f5:22:b3:48:17:57:1e:96:ee:f2:74:d5:13:
7f:f5:d4:b2:59:d7:43:47:24:20:a9:5d:69:45:95:
0b:43:4c:0c:56:b2:f5:ab:0c:01:4a:0c:a8:29:46:
df:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F7:3A:8B:75:DF:1A:70:0A:B1:AA:C8:D2:71:72:FA:80:BF:25:45
X509v3 Authority Key Identifier:
keyid:A2:C5:13:86:AC:F0:5B:3A:AB:61:81:04:74:78:D6:EE:A1:BF:00:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e4:ee:8b:4e:28:ef:1a:d4:f6:fd:56:fa:1a:76:e9:a2:fe:
5a:b7:05:12:4b:dc:a7:94:d5:be:b3:c8:20:80:8c:c1:c9:a4:
a9:6e:da:7a:f9:91:b1:8c:82:89:54:5a:d7:9b:da:06:67:56:
9a:8d:59:2b:33:31:0e:c1:24:81:ad:83:10:44:4c:f4:e0:fb:
76:40:c9:ff:c6:cf:ad:1e:a3:8b:0a:f3:cc:c5:52:65:3e:28:
23:6c:3b:80:eb:79:20:18:6b:3e:e2:60:39:69:97:af:e8:cf:
f3:a7:25:bd:ce:54:7b:cb:d7:9b:9f:e0:74:b5:74:2c:ed:79:
0b:38:01:28:56:3f:2f:2f:84:26:2c:22:fa:c8:c3:f8:98:64:
db:09:7b:8b:d5:03:80:67:00:98:13:92:f2:ee:b5:76:a4:93:
94:dc:42:2b:60:80:14:9d:81:7a:5c:1b:04:70:da:5a:02:5b:
b0:cd:52:2c:3e:8a:21:3e:b3:0d:f1:1d:c8:09:7d:9f:ae:d8:
3f:33:06:23:d5:5c:9f:c7:18:1d:72:78:66:ed:7d:2b:ba:a7:
0c:43:7d:14:7e:96:3b:c4:ba:17:4a:a0:0b:b4:16:ae:5c:57:
6a:6b:8f:5b:f6:9b:7e:81:e7:ba:75:33:ab:37:a4:92:ad:52:
0a:4d:6d:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTD9jpJv4KnZjwjzC9TpDEEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYzUxMzg2YWNmMDViM2FhYjYxODEwNDc0NzhkNmVlYTFi
ZjAwNjIwHhcNMjUwMjAyMDAwMTIxWhcNMjUwMjAzMDAwMTIxWjAzMTEwLwYDVQQD
EygzYmY3M2E4Yjc1ZGYxYTcwMGFiMWFhYzhkMjcxNzJmYTgwYmYyNTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrReb+qKiAyAOgvsC8QaBd1G2SrC
6wA47QqdtnquitBN1YzMhAV/FdO5l1ZB5UcLrRVo//+V8Wk9DeaxI2KsdA5aOgHo
VSBWxam7quHSR0d4zGX5To/uCslb/nGsH143cbJEH3K5hg3088+Ex5y27v/RsO8k
MaYR1GsYcoRXynQsAy8pc0W9HB7iKizQD9ENqV1UYiN6r1OJTGooq0+kyAs+SxEW
PhSOMPolT0ftaIvyxJdFiTfhu62+UODJguP5R9e5JlSjW65vhSdK08qWVAFg5/Ui
s0gXVx6W7vJ01RN/9dSyWddDRyQgqV1pRZULQ0wMVrL1qwwBSgyoKUbfgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDv3Oot13xpwCrGqyNJxcvqAvyVFMB8GA1UdIwQY
MBaAFKLFE4as8Fs6q2GBBHR41u6hvwBiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3NVVGhxendXenFyWVlFRWRIalc3cUdfQUdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xNjRkMzQtMTI1Zi00YzYwLTg2MzUt
N2Q2ZjUzODg5ZDU3LzEvb3NVVGhxendXenFyWVlFRWRIalc3cUdfQUdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8xNjRkMzQtMTI1Zi00YzYwLTg2MzUtN2Q2ZjUzODg5ZDU3
LzEvb3NVVGhxendXenFyWVlFRWRIalc3cUdfQUdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANeTui04o
7xrU9v1W+hp26aL+WrcFEkvcp5TVvrPIIICMwcmkqW7aevmRsYyCiVRa15vaBmdW
mo1ZKzMxDsEkga2DEERM9OD7dkDJ/8bPrR6jiwrzzMVSZT4oI2w7gOt5IBhrPuJg
OWmXr+jP86clvc5Ue8vXm5/gdLV0LO15CzgBKFY/Ly+EJiwi+sjD+Jhk2wl7i9UD
gGcAmBOS8u61dqSTlNxCK2CAFJ2BelwbBHDaWgJbsM1SLD6KIT6zDfEdyAl9n67Y
PzMGI9Vcn8cYHXJ4Zu19K7qnDEN9FH6WO8S6F0qgC7QWrlxXamuPW/abfoHnunUz
qzekkq1SCk1tiA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:43:57 2025 by rpki-client