Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
File: ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft (raw, json)
Hash identifier: 6SCdQCeO21uEcf56lCh9PhUKMYzINJ4PyWwc767yo0g=
Subject key identifier: 59:DD:1E:B8:D4:C3:4A:98:D8:4A:26:26:16:ED:05:86:8F:01:2C:99
Authority key identifier: A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1
Certificate issuer: /CN=a2e3c4ec7b36112fce521f5bef2873c7b4cc88d1
Certificate serial: 0194C3F58961DE5138183302990154095D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
Manifest number: 1055
Signing time: Sun 02 Feb 2025 00:00:36 +0000
Manifest this update: Sun 02 Feb 2025 00:00:36 +0000
Manifest next update: Mon 03 Feb 2025 00:00:36 +0000
Files and hashes: 1: O1jkn25qs1-TFBQOkUuo7PUo1bk.roa (hash: G22nJhAbgQNfU91NNPvYIMRUfjCUOYeEUbZcxQsmP2o=)
2: ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl (hash: WBdGrpgqVmIl1JV67+CiChjN9Pg9qU4U6iOgFY+jQkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:89:61:de:51:38:18:33:02:99:01:54:09:5d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e3c4ec7b36112fce521f5bef2873c7b4cc88d1
Validity
Not Before: Feb 2 00:00:36 2025 GMT
Not After : Feb 3 00:00:36 2025 GMT
Subject: CN=59dd1eb8d4c34a98d84a262616ed05868f012c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:81:83:aa:2f:c6:34:07:e2:01:49:a5:78:
5f:66:8a:21:f7:3a:db:68:49:38:21:b6:29:7d:06:
24:5b:91:ae:a1:f0:02:e9:97:59:4d:75:a6:cf:51:
94:ed:80:18:f2:fb:21:34:02:9b:c4:2a:ab:77:7b:
fd:de:1b:42:db:c1:c5:9d:72:fc:b7:2e:1d:2f:67:
bb:6f:f2:07:48:73:6f:ce:b6:94:8a:53:28:f3:75:
7b:c5:fd:19:94:a3:d6:76:ff:d8:fa:b0:d0:39:cb:
a5:63:dc:d4:d1:49:e0:cb:a2:bb:0b:1c:1c:2f:42:
5f:26:c1:89:86:87:ee:cd:4c:d6:98:44:93:b8:f8:
ea:4a:a9:f7:20:69:56:e1:f6:c2:d9:43:52:e0:c5:
b4:ed:cc:26:2b:33:d1:e6:7f:2b:c3:e0:84:ba:02:
ed:45:79:cd:1a:0a:78:f1:1b:f6:d7:51:92:e2:e6:
2a:25:e7:66:8e:29:54:40:85:7b:93:9f:6b:37:ad:
2f:a2:d1:88:85:8d:f3:2e:b9:66:33:ed:35:ae:f1:
ea:ae:df:97:83:b0:1d:4b:94:03:98:b4:c7:ed:5c:
ac:7b:9d:8a:c2:c5:26:8c:f7:62:1a:ed:b7:61:42:
e7:02:5b:76:ca:92:8e:70:af:e7:50:1d:38:f5:bd:
8a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DD:1E:B8:D4:C3:4A:98:D8:4A:26:26:16:ED:05:86:8F:01:2C:99
X509v3 Authority Key Identifier:
keyid:A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e9:38:dd:44:e1:f8:87:37:c9:60:7d:64:7b:d3:d8:15:a9:
54:77:e2:64:8c:50:08:42:cc:00:14:d3:f5:33:5d:e1:0e:03:
63:54:93:b6:08:b6:15:0d:08:3f:1a:6b:1c:e9:be:5a:c3:d7:
73:7d:f2:42:6a:ee:e9:a6:de:f3:f9:43:8b:17:b7:b4:d3:c2:
74:ac:2e:5f:be:8c:d3:7a:84:32:c3:a3:7a:39:15:e5:86:7e:
bb:9a:3b:67:2b:a3:72:75:2f:be:97:fd:9d:0c:ac:ff:9e:18:
23:8e:37:f3:91:87:7f:59:b0:ef:10:3b:4a:bc:b9:70:9d:cc:
02:53:5b:3b:12:4f:af:3f:bb:02:c0:46:ef:5b:1e:1a:a6:69:
20:21:d8:65:9c:4a:04:00:d2:60:52:c5:a8:de:e9:75:39:88:
61:c9:8d:d6:34:8a:cc:4e:4b:26:16:e8:b9:d1:7f:56:6d:5e:
d3:2b:dd:5e:45:a9:b1:e5:f6:40:52:bc:e3:1b:26:65:f4:24:
2a:65:00:77:69:a0:49:4e:f0:18:81:80:4c:c7:07:35:7a:c4:
87:e7:e7:eb:d5:53:3e:f6:c7:dc:58:0e:a8:be:1c:9f:03:4a:
5f:63:2f:62:9e:0a:b0:69:76:6d:8b:49:c8:6c:d2:a0:83:ab:
1f:5b:5d:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTD9Ylh3lE4GDMCmQFUCV2NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZTNjNGVjN2IzNjExMmZjZTUyMWY1YmVmMjg3M2M3YjRj
Yzg4ZDEwHhcNMjUwMjAyMDAwMDM2WhcNMjUwMjAzMDAwMDM2WjAzMTEwLwYDVQQD
Eyg1OWRkMWViOGQ0YzM0YTk4ZDg0YTI2MjYxNmVkMDU4NjhmMDEyYzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslqBg6ovxjQH4gFJpXhfZooh9zrb
aEk4IbYpfQYkW5GuofAC6ZdZTXWmz1GU7YAY8vshNAKbxCqrd3v93htC28HFnXL8
ty4dL2e7b/IHSHNvzraUilMo83V7xf0ZlKPWdv/Y+rDQOculY9zU0Ungy6K7Cxwc
L0JfJsGJhofuzUzWmESTuPjqSqn3IGlW4fbC2UNS4MW07cwmKzPR5n8rw+CEugLt
RXnNGgp48Rv211GS4uYqJedmjilUQIV7k59rN60votGIhY3zLrlmM+01rvHqrt+X
g7AdS5QDmLTH7Vyse52KwsUmjPdiGu23YULnAlt2ypKOcK/nUB049b2KywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFndHrjUw0qY2EomJhbtBYaPASyZMB8GA1UdIwQY
MBaAFKLjxOx7NhEvzlIfW+8oc8e0zIjRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3VQRTdIczJFU19PVWg5Yjd5aHp4N1RNaU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9mNDAzODctMmQ4NC00MDYyLWJlYzYt
ZGE1MTNjYzY5ODM5LzEvb3VQRTdIczJFU19PVWg5Yjd5aHp4N1RNaU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9mNDAzODctMmQ4NC00MDYyLWJlYzYtZGE1MTNjYzY5ODM5
LzEvb3VQRTdIczJFU19PVWg5Yjd5aHp4N1RNaU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARek43UTh
+Ic3yWB9ZHvT2BWpVHfiZIxQCELMABTT9TNd4Q4DY1STtgi2FQ0IPxprHOm+WsPX
c33yQmru6abe8/lDixe3tNPCdKwuX76M03qEMsOjejkV5YZ+u5o7ZyujcnUvvpf9
nQys/54YI44385GHf1mw7xA7Sry5cJ3MAlNbOxJPrz+7AsBG71seGqZpICHYZZxK
BADSYFLFqN7pdTmIYcmN1jSKzE5LJhboudF/Vm1e0yvdXkWpseX2QFK84xsmZfQk
KmUAd2mgSU7wGIGATMcHNXrEh+fn69VTPvbH3FgOqL4cnwNKX2MvYp4KsGl2bYtJ
yGzSoIOrH1td7w==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:07:29 2025 by rpki-client