Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
File: OEhy6BezpF-Y1LFbZd1FK12i1hE.mft (raw, json)
Hash identifier: XGK8RlDciYBMpOilDlVbMGK4iPDDny/2RdE9ZruLQMQ=
Subject key identifier: C5:4F:88:65:14:31:5C:3D:0D:7C:E3:59:B6:F3:1B:1C:81:7D:20:5E
Authority key identifier: 38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11
Certificate issuer: /CN=384872e817b3a45f98d4b15b65dd452b5da2d611
Certificate serial: 0194C462F6E30231C55EBF3A102AAF1BE205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
Manifest number: 1430
Signing time: Sun 02 Feb 2025 02:00:07 +0000
Manifest this update: Sun 02 Feb 2025 02:00:07 +0000
Manifest next update: Mon 03 Feb 2025 02:00:07 +0000
Files and hashes: 1: OEhy6BezpF-Y1LFbZd1FK12i1hE.crl (hash: 6HtOfkqcJgg2AY80uY/aR53ApVcvT5oXjV+WPakFQz8=)
2: vMh15nJtc0WhPa3adfD72rfDpjk.roa (hash: k90mC6UYUEFlWPzqOLS92+FcHPT0CjyGgsFnNEcMpl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:62:f6:e3:02:31:c5:5e:bf:3a:10:2a:af:1b:e2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384872e817b3a45f98d4b15b65dd452b5da2d611
Validity
Not Before: Feb 2 02:00:07 2025 GMT
Not After : Feb 3 02:00:07 2025 GMT
Subject: CN=c54f886514315c3d0d7ce359b6f31b1c817d205e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:23:39:37:af:26:1e:d4:1a:68:5d:ac:fa:c1:
c5:bb:36:83:83:97:d5:80:c0:1c:16:5a:e2:5a:2d:
4c:16:e0:25:dd:2b:0c:19:9e:30:09:d3:25:ba:e2:
7d:7e:4e:cc:ca:d8:15:5c:d9:6a:40:4d:c1:2d:96:
ff:63:f6:ba:9f:5d:65:3b:ef:98:ab:e9:cb:44:20:
c2:a7:37:b3:2b:1c:1b:f8:d6:14:87:3b:ff:bc:aa:
de:09:fb:31:4a:1f:93:51:91:18:b6:9a:8e:37:87:
a4:9d:31:63:fb:da:4d:18:0b:01:80:a6:a9:ab:c0:
ff:45:18:6f:69:c3:04:de:ac:3d:c4:ee:60:a3:8e:
9c:48:59:95:d0:5d:b9:b5:f1:8b:d5:76:95:19:78:
a6:bc:c6:76:e7:1f:66:7a:d1:ee:16:77:f7:e6:f4:
3b:7a:b2:37:43:70:63:eb:cc:7f:51:68:2e:e5:5d:
be:2b:3f:ee:df:f3:9b:d9:f6:c5:60:84:58:94:d2:
e3:5b:23:7b:6a:70:9c:67:ef:f4:5b:c2:9e:23:d0:
0a:3b:70:05:b3:c8:8f:87:ab:ea:06:f6:31:b1:8a:
6c:5c:ee:d3:5c:e2:74:11:91:53:46:b2:70:10:36:
35:19:12:53:9e:b1:ff:e7:cd:e4:cb:c7:0a:e9:c7:
58:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4F:88:65:14:31:5C:3D:0D:7C:E3:59:B6:F3:1B:1C:81:7D:20:5E
X509v3 Authority Key Identifier:
keyid:38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:67:ab:7b:97:f6:f9:11:86:86:90:65:d3:33:f5:19:3b:b6:
77:ed:83:6b:a0:2e:99:5c:63:0b:f6:19:87:8a:82:ef:9c:bf:
9d:25:65:39:f4:8b:c0:ee:fa:c0:42:c1:51:bb:fb:77:67:d1:
c9:96:b5:56:35:14:f5:7f:3c:82:f3:ce:61:af:ae:6a:94:77:
94:89:68:5e:2f:24:02:a0:bb:46:cb:48:dc:8a:05:54:26:80:
2c:6f:de:c4:26:68:a9:be:19:23:db:8c:07:07:95:59:d9:74:
8b:a9:c8:19:8d:2c:4c:9f:37:a5:e1:32:5d:2d:0e:45:f2:3c:
cf:5a:cc:f0:ac:38:22:b7:59:0e:53:c8:80:bf:60:96:5b:56:
93:1b:db:1c:07:aa:8e:40:02:32:0b:11:be:9a:31:f3:03:23:
c5:8b:99:f9:01:f8:7c:38:c8:c0:7d:d6:b4:95:a3:f2:e9:bc:
b0:84:cb:83:40:8e:e3:94:80:fa:96:b3:a3:06:30:43:cb:aa:
ff:5c:f1:31:42:19:01:5a:3c:31:77:f5:78:5d:56:c4:26:8b:
75:87:80:0c:1d:6d:0f:a9:2d:80:21:9f:b0:89:ac:a8:13:58:
86:35:bd:1a:ab:33:b7:31:15:77:f2:82:a0:72:0c:77:b1:89:
88:78:46:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:01:03 2025 by rpki-client