Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
File: oHFXHI4QtBnXo7824Qhf_VzXipg.mft (raw, json)
Hash identifier: R5DKZfsjoIjP+Hc4tPjyNxxnsWZzeUSOJqfOxyuV1bM=
Subject key identifier: FC:30:FD:9F:A7:49:72:DF:71:2F:53:C8:20:FB:90:35:D7:F5:F4:4C
Authority key identifier: A0:71:57:1C:8E:10:B4:19:D7:A3:BF:36:E1:08:5F:FD:5C:D7:8A:98
Certificate issuer: /CN=a071571c8e10b419d7a3bf36e1085ffd5cd78a98
Certificate serial: 019511D978474C86ADD167755FBEA7B9802C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
Manifest number: 0E1E
Signing time: Mon 17 Feb 2025 03:00:19 +0000
Manifest this update: Mon 17 Feb 2025 03:00:19 +0000
Manifest next update: Tue 18 Feb 2025 03:00:19 +0000
Files and hashes: 1: _RMv1Q7O2CnoWhcrAcn90ZX5USk.roa (hash: I2FYErDanPUJADaKO92Q6jyRK2EK15cN4Qdxt/bs9vQ=)
2: oHFXHI4QtBnXo7824Qhf_VzXipg.crl (hash: bDw5h97rdy9kgZNrdMt+ATPTnWIIiGcloxY3hs1jsLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:78:47:4c:86:ad:d1:67:75:5f:be:a7:b9:80:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a071571c8e10b419d7a3bf36e1085ffd5cd78a98
Validity
Not Before: Feb 17 03:00:19 2025 GMT
Not After : Feb 18 03:00:19 2025 GMT
Subject: CN=fc30fd9fa74972df712f53c820fb9035d7f5f44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f9:ce:a3:c3:9e:28:ef:59:fb:7c:0c:ec:f4:
35:ca:5a:2e:aa:59:ed:28:ac:0c:8b:09:49:09:14:
13:66:b2:f9:3c:5d:90:46:20:4e:20:32:81:54:33:
1b:bb:f2:09:4a:47:ef:28:0c:a2:74:f7:62:bf:a2:
87:5d:52:76:fd:31:3c:cd:bf:5a:1e:bd:b5:ac:6c:
69:60:87:fa:39:ff:d7:30:d1:af:1b:e7:92:9f:5c:
ba:67:8d:4d:47:cd:15:c6:6f:2b:80:e5:86:e0:a4:
7b:65:5c:9a:dd:ad:18:ea:51:99:bf:8f:c5:a5:f5:
69:a4:d9:cb:2a:26:00:ff:04:1a:d2:bc:48:99:e3:
ec:4e:f1:04:49:54:d1:7f:af:d4:23:e6:71:ff:ec:
85:84:5c:96:34:67:1b:8a:d1:4b:14:86:df:58:23:
98:e3:ff:27:ff:51:9a:db:6a:09:2b:94:a9:02:24:
06:1e:29:e7:c5:a6:7e:49:22:44:1e:58:c7:01:ed:
83:9f:00:39:70:18:bc:f1:c3:7b:47:6c:3c:e5:ba:
43:ee:a6:76:d8:6c:84:bd:dd:d2:d8:8c:82:ab:94:
b3:f5:3d:90:27:16:e8:f7:4c:d5:1f:8b:6a:11:14:
ad:10:f4:b5:07:56:4c:e6:d5:b4:4d:44:25:88:7e:
33:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:30:FD:9F:A7:49:72:DF:71:2F:53:C8:20:FB:90:35:D7:F5:F4:4C
X509v3 Authority Key Identifier:
keyid:A0:71:57:1C:8E:10:B4:19:D7:A3:BF:36:E1:08:5F:FD:5C:D7:8A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:73:fc:4a:5f:0e:ab:b7:9e:e1:77:d0:34:fe:e5:e2:f5:25:
2e:37:89:1e:bc:ac:20:04:c1:22:e0:dd:a7:ce:a4:b7:89:13:
db:87:e1:55:25:29:10:10:bd:c0:81:41:cd:fb:c5:fb:db:4f:
62:7b:47:6b:e9:52:1a:0f:d3:19:61:4a:d8:98:eb:5b:00:b2:
2d:f8:c9:6c:b1:ab:5b:20:27:6c:22:9d:14:f3:c8:d4:0d:8c:
0f:2d:3f:e2:a9:30:64:bc:84:b5:c0:98:b4:82:c4:9d:cd:44:
90:6e:bc:aa:e2:09:50:53:3e:e9:fc:31:f4:32:7d:57:6a:05:
d8:0d:76:4f:4b:e4:29:ec:9f:17:2b:1d:bf:98:e3:ab:29:00:
66:e1:bb:50:4d:92:fd:41:36:31:5c:08:ba:ab:5b:09:32:93:
44:a3:08:23:c7:54:91:8c:0d:12:cb:a4:8e:0b:19:96:eb:34:
4d:1d:89:78:ae:eb:17:15:16:97:de:78:5c:cb:4b:b6:d4:51:
2b:f6:b7:74:ba:95:9c:a7:6a:e0:37:51:7f:53:25:4a:a3:93:
e6:65:13:2e:97:35:db:7a:20:14:d6:1a:de:f0:92:33:b6:a0:
98:ac:60:0d:39:de:e4:cd:bb:ab:dd:a3:f4:c4:8a:d2:e2:a2:
83:e9:5d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:49 2025 by rpki-client