Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
File: oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft (raw, json)
Hash identifier: 75GKV/UE2yKVM2w81Kk4YSOfBnN1snKRE6df2T8Mvk0=
Subject key identifier: EA:8C:7D:0A:88:AF:C9:BB:EA:8F:E2:96:A5:E0:99:D7:D0:0F:B6:4C
Authority key identifier: A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
Certificate issuer: /CN=a1a55bf2888753e44675b61dda30394d90156c0a
Certificate serial: 0194C3F629A3551699FAA922B65EB07DEB68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
Manifest number: 0373
Signing time: Sun 02 Feb 2025 00:01:17 +0000
Manifest this update: Sun 02 Feb 2025 00:01:17 +0000
Manifest next update: Mon 03 Feb 2025 00:01:17 +0000
Files and hashes: 1: RAu0fNtqwivhpDFk4ehwbUssHTc.roa (hash: ASO7jKRNvxEqEpBOo5wevxzSp2tNnkfm3RRt0ZwZtAw=)
2: oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl (hash: 4oe7cbsDP1Z57z52B/OaWxIg7K9NlG4pchdLFKtd5Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:29:a3:55:16:99:fa:a9:22:b6:5e:b0:7d:eb:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a55bf2888753e44675b61dda30394d90156c0a
Validity
Not Before: Feb 2 00:01:17 2025 GMT
Not After : Feb 3 00:01:17 2025 GMT
Subject: CN=ea8c7d0a88afc9bbea8fe296a5e099d7d00fb64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:97:68:ea:6f:c8:cf:2b:2d:bd:19:28:25:cd:
1f:cb:0c:10:37:45:c7:7b:95:76:4f:72:8e:88:76:
10:2e:4c:b5:53:7e:e3:c0:fb:06:51:be:fe:48:88:
eb:12:fc:b6:6c:79:a0:c5:0b:6c:8f:49:0c:19:49:
02:aa:1a:68:49:bb:d5:94:a4:25:4c:d2:96:f0:4e:
7a:47:c4:35:56:e9:fe:b9:1b:e3:be:01:96:16:ed:
9f:e8:ae:d0:0c:30:8e:17:4a:64:b2:d3:c5:e2:fe:
9b:73:a2:3c:cd:aa:67:41:c2:b0:7e:59:9c:7f:10:
70:b6:a9:06:62:bd:99:19:25:f4:fa:05:a2:9c:34:
2e:ee:65:50:c8:b0:c7:b3:5d:7e:6f:84:00:63:63:
95:b2:4e:66:2d:bc:2e:fb:46:ce:64:c7:9a:ad:78:
7d:01:63:96:72:4e:b7:a8:5b:91:1a:cc:93:6f:1d:
1a:46:d7:22:86:7d:f3:b5:7d:00:b0:75:2f:ce:f3:
c9:ef:81:97:08:2a:fd:44:0e:0d:49:a8:7c:41:d3:
46:a6:c2:9b:39:d4:68:09:85:7e:8d:d6:b7:78:62:
bd:68:5f:ac:f5:94:06:5f:f0:06:f2:03:1a:68:b6:
4d:4c:75:c3:2a:cf:1c:fe:0b:4d:20:8f:1c:03:22:
e8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8C:7D:0A:88:AF:C9:BB:EA:8F:E2:96:A5:E0:99:D7:D0:0F:B6:4C
X509v3 Authority Key Identifier:
keyid:A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:14:83:ce:0d:67:12:b6:f4:78:6b:94:8d:e2:11:58:ba:62:
b1:71:cd:0c:3d:a2:99:bd:e0:88:8d:a8:bc:98:f7:80:23:71:
2e:a6:55:28:0d:8c:8a:85:83:95:b4:d5:7c:81:5f:af:2a:89:
de:d7:39:a5:6e:9f:f3:a2:2a:52:1d:5d:41:f9:a5:18:9c:5e:
f8:d8:ef:01:a8:af:2e:d2:88:7e:fb:58:77:c8:26:a9:47:50:
ce:b2:d5:f1:d4:f1:d8:ab:ac:d7:50:25:c6:b9:87:bb:d0:aa:
66:69:a6:c0:07:a8:cb:ae:d9:5c:6f:be:41:28:ae:2e:42:39:
09:c2:32:0b:38:f2:16:1f:ea:d9:da:e8:ee:a1:80:16:a9:7a:
a5:93:a5:71:4a:54:b4:2d:85:96:7e:ba:2b:41:49:44:69:d5:
71:e6:59:af:dc:37:7e:7b:f9:73:88:de:43:77:43:2e:1f:6f:
73:da:0d:80:e6:5e:0c:0a:47:06:92:d8:45:62:6a:31:84:c8:
95:ae:4e:53:18:9b:8f:59:5e:1c:38:bf:ee:61:ad:c3:e0:a2:
1b:a1:68:21:5e:e4:83:67:9f:4f:6b:e7:94:4f:63:f5:56:e5:
63:b3:d2:a4:9d:85:26:ba:23:ca:38:1a:32:a9:cb:43:7b:6d:
b8:97:f2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:07:24 2025 by rpki-client