Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
File: o-boI_bdpn0oOp9BpykJkGrJqDc.mft (raw, json)
Hash identifier: hrFBCPSeCA+3fCE4nUiW49yaGXPZkucnWyujuAu/BPE=
Subject key identifier: A0:E8:9E:E4:40:A2:FF:2D:FC:30:0B:30:CF:54:8C:B6:A3:E3:0E:AA
Authority key identifier: A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37
Certificate issuer: /CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
Certificate serial: 019511A2A0EF3130AFB263CD554EFCF0A0DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
Manifest number: 145C
Signing time: Mon 17 Feb 2025 02:00:25 +0000
Manifest this update: Mon 17 Feb 2025 02:00:25 +0000
Manifest next update: Tue 18 Feb 2025 02:00:25 +0000
Files and hashes: 1: 6_a-aeOKvfIVcw7qcE2cQDyNLOY.roa (hash: WdgelCFy5E02aPpURS4UTgXi3wN5eWjkYjrBc+OZPSI=)
2: 8WHNdpvFKOcR1NYdd7sGV-5deCM.roa (hash: 1JOP6RuQiDJQnqR2UlsIBnEE2gJbfnp6EUOaKdVsJlw=)
3: aJfMXR0KgD85hp2B5m_o11nFhQY.roa (hash: KbbBuzotL/jgzy+EpOCalbhLtTBDf/lVI3VgkQVW38s=)
4: o-boI_bdpn0oOp9BpykJkGrJqDc.crl (hash: RupeORHQYOP7dPYEg98yIc/3hx5BDjVA1E49FPTuz7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:a0:ef:31:30:af:b2:63:cd:55:4e:fc:f0:a0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
Validity
Not Before: Feb 17 02:00:25 2025 GMT
Not After : Feb 18 02:00:25 2025 GMT
Subject: CN=a0e89ee440a2ff2dfc300b30cf548cb6a3e30eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8a:f1:53:8f:19:94:7e:e0:35:ec:79:16:8b:
c2:4b:3d:15:ab:df:e0:8b:59:d4:53:1d:c4:db:9e:
7a:64:c1:79:96:72:79:98:f4:22:d9:fb:fd:aa:61:
91:1a:25:40:5b:60:33:39:74:da:3f:5b:ac:47:9c:
44:6f:38:f1:67:33:d2:6f:4d:d0:30:58:b3:06:ba:
5b:cc:ad:b7:92:ec:dc:cb:75:4c:c6:49:bc:aa:66:
77:8e:46:52:b3:3d:f0:86:54:f9:9f:d0:37:e7:43:
db:e6:bb:34:00:88:be:ee:b2:a8:8d:d0:6d:67:03:
9b:75:6f:12:ee:1f:68:a3:f8:e3:56:2a:0c:df:29:
49:78:a0:65:5d:76:1e:fc:3c:01:c7:1c:6d:75:8e:
29:fb:26:b5:c0:2d:83:ac:02:14:ee:0e:16:14:4f:
97:e1:bc:68:17:4b:5c:b5:6c:5d:89:30:6c:b1:26:
3d:26:c3:9a:1f:d4:78:7d:2b:bb:a5:89:dc:ce:19:
16:ed:6f:a7:67:eb:9a:da:52:1d:b7:74:a8:f1:70:
97:6e:7c:85:f5:e2:0a:b5:52:d2:56:16:d8:6c:f3:
82:ed:71:4a:54:75:15:bc:d1:8c:41:97:89:2d:de:
a8:90:2c:bf:0b:36:25:1b:af:c1:a7:ff:01:09:70:
13:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E8:9E:E4:40:A2:FF:2D:FC:30:0B:30:CF:54:8C:B6:A3:E3:0E:AA
X509v3 Authority Key Identifier:
keyid:A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:4a:a1:57:e8:e1:46:cb:e0:6a:d3:f0:a5:6a:e7:96:ad:6f:
a8:cf:bd:f5:b5:0e:4f:dd:b0:cb:34:16:a8:80:3c:c9:d1:47:
fa:bd:d5:50:78:08:92:92:e3:9f:fc:50:d8:0f:4c:0c:60:57:
cb:1a:8c:fc:0a:a2:d9:ee:08:d9:fd:4a:3e:94:24:ba:62:76:
36:21:0e:b9:7c:1f:4e:93:71:d8:c8:88:a1:1a:ff:1a:29:3a:
4b:88:cc:55:46:57:66:d5:a3:45:1a:06:b4:22:cb:74:a1:52:
41:f8:ef:83:71:b0:05:a4:8c:a6:b9:30:b2:cd:3e:1e:22:33:
49:69:44:f5:ad:f8:89:bd:fe:30:ba:19:88:41:56:18:c2:4e:
f4:f1:80:1f:24:2a:62:c6:40:47:6e:31:84:8f:61:55:e4:d1:
af:bc:10:b4:fc:7b:a4:da:3b:81:fa:76:16:26:50:5b:fc:ef:
07:4f:c1:2d:c9:55:a3:08:57:36:d9:ce:3a:67:42:7f:51:76:
90:74:fc:f9:ea:d1:2e:25:e2:64:e9:3a:5b:49:68:c2:b3:e3:
55:83:ff:73:b6:47:f0:9d:23:cd:5c:d1:08:0d:b6:58:62:5b:
ff:31:15:63:97:08:19:43:74:09:aa:e7:82:5e:c5:81:49:b4:
5d:2a:dd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:58 2025 by rpki-client