Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
File: osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft (raw, json)
Hash identifier: tW6qeD8LbhErJovHbJ5VV46vh8DSDhZC+ghO4PMj6qI=
Subject key identifier: FA:7D:AA:20:27:7C:F8:ED:D4:DC:FD:AA:68:C0:4E:AA:2A:C4:6B:9C
Authority key identifier: A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35
Certificate issuer: /CN=a2c56441d83df94bbd0e60144a554639e40e0535
Certificate serial: 0195124722CEC79F94D0E582DDC82C13ECDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
Manifest number: 0C48
Signing time: Mon 17 Feb 2025 05:00:06 +0000
Manifest this update: Mon 17 Feb 2025 05:00:06 +0000
Manifest next update: Tue 18 Feb 2025 05:00:06 +0000
Files and hashes: 1: Om-V-EmCFMGXb43s9fZ-DXbAF08.roa (hash: S2SC8pR//ywuBG9ZV7ZWtalhcLPclQLz9j+fN0Z1bo4=)
2: osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl (hash: c9zutAZ39WCJ+ciKQYeb/aLFQL9n+OXIttDBaHNrgPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:22:ce:c7:9f:94:d0:e5:82:dd:c8:2c:13:ec:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c56441d83df94bbd0e60144a554639e40e0535
Validity
Not Before: Feb 17 05:00:06 2025 GMT
Not After : Feb 18 05:00:06 2025 GMT
Subject: CN=fa7daa20277cf8edd4dcfdaa68c04eaa2ac46b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e7:9d:6a:80:07:2b:52:4e:d5:f9:1b:90:34:
fd:5d:17:6d:ae:f5:45:6d:40:eb:45:a2:53:2c:c4:
3b:b7:65:6b:73:da:f6:65:f8:fb:d7:1d:bb:ec:69:
29:4e:6f:03:6a:e9:96:c8:35:4f:a7:4b:dc:5f:ee:
46:c7:e7:c7:1d:4f:6e:aa:5d:4c:69:6b:c3:15:d5:
1b:a8:f3:1a:66:15:85:bc:7b:76:6a:9e:9c:36:95:
a7:c7:c2:8c:82:6c:71:fd:d8:3d:b7:c4:dd:ea:1a:
a5:cc:95:94:76:f6:18:c3:3c:93:3f:14:04:4e:15:
ca:a8:c0:9e:c9:e2:27:5d:3f:7e:b2:a4:b2:b7:8f:
26:46:28:b6:89:2b:c7:80:21:05:88:15:75:6e:02:
7a:dd:8e:cd:92:16:02:83:00:36:8c:6a:a4:e4:86:
00:9e:5d:bb:7c:92:ba:59:d3:2a:ce:03:27:27:d8:
3b:05:88:b2:a6:02:68:b4:33:13:37:5d:7f:2d:c4:
25:98:7c:06:04:6c:27:8e:e4:f7:5c:58:f3:12:1d:
9d:de:3f:6d:d3:fd:17:9c:61:bd:2c:99:c7:bf:7c:
df:d6:3a:37:3f:36:eb:15:bd:f6:a7:67:b6:e7:e7:
8b:96:72:24:11:04:7e:8a:14:00:1d:6e:45:3b:72:
23:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7D:AA:20:27:7C:F8:ED:D4:DC:FD:AA:68:C0:4E:AA:2A:C4:6B:9C
X509v3 Authority Key Identifier:
keyid:A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:27:1c:b5:e7:20:28:14:1f:8e:aa:b6:34:91:e1:d7:89:a1:
bc:4a:66:37:14:17:1d:f5:e3:db:29:b6:d5:db:1e:38:f3:c3:
92:9e:8a:d5:ab:1c:b6:76:74:b9:60:4e:83:68:0c:5f:37:d9:
58:7e:c7:e6:d0:4d:e5:38:83:29:7e:c4:a1:4c:7c:11:29:90:
49:b4:b0:dc:3b:37:75:1f:d1:25:c8:06:9c:a1:66:a9:f4:46:
cd:46:8e:07:0f:d7:c8:cd:02:68:b4:1f:40:da:31:29:10:91:
25:f9:f5:04:0d:40:59:4b:29:fd:3f:ef:0e:ff:fe:89:0b:16:
8f:66:63:47:37:f2:13:a3:24:61:91:45:0b:6b:99:48:1f:91:
d3:45:0a:7f:77:15:58:a6:2f:97:9d:5a:bb:7d:e3:31:91:a8:
08:b0:66:f1:a2:26:57:88:69:dd:14:e5:eb:7c:1c:98:04:fd:
8f:3d:0b:45:2d:95:e6:46:db:fd:d5:49:b7:95:30:92:d8:24:
7e:6d:29:2a:65:75:4c:23:f9:62:7c:39:dd:7d:24:f6:d6:b2:
d1:bc:2c:72:4b:24:98:5b:df:21:ce:cb:8d:4d:92:1d:fe:63:
9a:43:06:fc:18:85:53:59:d2:cd:4a:d8:05:d2:e3:be:cf:d0:
d7:55:15:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:44 2025 by rpki-client