Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
File: os1DAbKJXx2YqFDlic58BjxTn00.mft (raw, json)
Hash identifier: a3n2dQz2X7K+4r+ZDgDRPzSwSD8qLb6sploTHmiV4X8=
Subject key identifier: 96:4E:10:1C:2B:D4:07:B0:79:99:67:4A:69:FE:04:6E:9E:30:03:D3
Authority key identifier: A2:CD:43:01:B2:89:5F:1D:98:A8:50:E5:89:CE:7C:06:3C:53:9F:4D
Certificate issuer: /CN=a2cd4301b2895f1d98a850e589ce7c063c539f4d
Certificate serial: 019510FDD0A06C04CFC488F2FDC6851056DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
Manifest number: 0FBB
Signing time: Sun 16 Feb 2025 23:00:24 +0000
Manifest this update: Sun 16 Feb 2025 23:00:24 +0000
Manifest next update: Mon 17 Feb 2025 23:00:24 +0000
Files and hashes: 1: KAKz0xo2XXEBIDI7U4s2tUakP98.roa (hash: nzwZHLIuL4E1A+Jcxn7qeWA8mqGxoFVori2v9JbkLPE=)
2: os1DAbKJXx2YqFDlic58BjxTn00.crl (hash: PQiZwt3bFJgBeO7amWnFQyRtCr9xhH5Df0U16Ijvz6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:d0:a0:6c:04:cf:c4:88:f2:fd:c6:85:10:56:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cd4301b2895f1d98a850e589ce7c063c539f4d
Validity
Not Before: Feb 16 23:00:24 2025 GMT
Not After : Feb 17 23:00:24 2025 GMT
Subject: CN=964e101c2bd407b07999674a69fe046e9e3003d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0f:7c:5d:25:d8:ed:8a:d2:47:b7:3c:ac:33:
51:88:8c:3e:2b:50:30:a9:8b:3c:b2:f8:8a:ea:f7:
68:51:d1:ad:12:29:95:e9:0a:9d:cf:4b:24:13:fb:
c3:a0:31:a7:78:2d:ed:74:95:fb:1f:43:34:7a:af:
33:56:27:c9:05:2d:96:19:1f:89:56:5f:c3:55:7a:
bb:e2:fc:9c:e7:a1:9e:9a:3d:fd:ab:ac:7f:6d:a5:
72:9b:af:46:1a:f4:bb:e4:ae:dd:6d:cd:06:07:4a:
47:41:b1:19:0e:f9:ca:04:52:ef:75:6e:63:c0:f9:
0d:34:2f:cb:58:48:98:68:3e:2f:65:0c:a9:8c:ab:
1f:1c:7c:b4:3d:45:52:03:e8:7d:41:62:fd:06:19:
cc:df:70:21:bc:df:70:e3:a4:35:20:b2:24:55:c2:
b0:f6:ee:f6:74:4f:b6:3e:04:0e:a2:dd:fc:70:65:
70:fe:df:78:35:c8:c2:47:f8:d6:89:f1:4a:5d:c2:
97:0b:21:8d:82:b4:69:33:51:09:d5:46:25:3e:b0:
47:9d:3b:9a:8c:c5:e3:b6:ad:94:0d:17:5e:b0:3d:
7c:d4:5b:29:df:c7:5c:90:94:7e:e6:bc:19:a1:d3:
0b:cd:ae:6a:00:3f:d5:f7:1e:76:ef:29:f6:88:e4:
5d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4E:10:1C:2B:D4:07:B0:79:99:67:4A:69:FE:04:6E:9E:30:03:D3
X509v3 Authority Key Identifier:
keyid:A2:CD:43:01:B2:89:5F:1D:98:A8:50:E5:89:CE:7C:06:3C:53:9F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:8b:ef:e3:87:f0:fa:6f:6c:c9:22:fb:b4:64:5d:5f:7a:6b:
34:f1:6d:c6:f1:21:d0:69:0a:30:7c:7c:b5:53:b7:dc:f3:08:
c7:b4:bc:37:fb:ba:1a:e4:3b:49:a7:ae:d6:09:3b:d0:3c:05:
df:4a:5b:8f:db:7f:23:17:17:95:56:2b:2b:01:22:28:e3:ac:
4c:1e:6a:c1:ad:76:91:4d:76:22:81:fe:2c:76:bb:70:b0:8d:
5c:5b:ee:13:5f:f7:55:01:8d:fa:90:43:a1:f4:8a:3c:4b:cc:
1c:aa:7d:67:31:00:45:ed:d1:3f:22:26:8c:97:ee:62:15:85:
28:7b:17:5a:cb:b3:bb:a5:e6:35:8e:a9:26:11:b6:68:a9:f4:
5a:45:a8:b9:0c:d9:ea:c1:77:dc:50:25:43:79:11:3b:fe:63:
44:81:92:3a:ac:0a:38:73:aa:6b:4a:93:06:97:af:c2:ab:85:
d2:42:bc:c8:01:c7:f0:f1:e1:98:28:54:6e:ce:cb:e7:4f:c0:
6f:99:4b:a0:b5:51:ae:ec:76:24:f4:cd:85:2c:8c:52:be:aa:
39:74:0a:74:c4:57:fc:67:ba:e2:f3:09:98:3f:53:ca:ef:a1:
70:a2:34:ca:95:50:5f:27:fb:ac:7c:a3:b0:f6:e6:4f:0a:d4:
b5:97:0c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:25 2025 by rpki-client