Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
File: OEgrEyC5gPRtbkBP59WL2xHVD9M.mft (raw, json)
Hash identifier: ZC8nFcQ/fjpxkLGGWpp0XnJRXV5AEFd1ac0DciadVTA=
Subject key identifier: 58:85:3E:2A:A5:1D:09:B8:C6:59:C5:D5:90:A9:4F:22:1E:B4:63:5A
Authority key identifier: 38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3
Certificate issuer: /CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
Certificate serial: 0194C46303804D49DF0B6B535D054E2AB520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
Manifest number: 1430
Signing time: Sun 02 Feb 2025 02:00:10 +0000
Manifest this update: Sun 02 Feb 2025 02:00:10 +0000
Manifest next update: Mon 03 Feb 2025 02:00:10 +0000
Files and hashes: 1: 5ePvcq9zuyiP8F0_1MZ5SKg1RU4.roa (hash: x2xCVfg3u5h3OuMzgVAwJ2hD3aJVygyj1psk9B6lRgM=)
2: OEgrEyC5gPRtbkBP59WL2xHVD9M.crl (hash: i/pCovn867lZ3q3KeSkIlcNpjcnTlfOoJJefFvGv4zE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:03:80:4d:49:df:0b:6b:53:5d:05:4e:2a:b5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
Validity
Not Before: Feb 2 02:00:10 2025 GMT
Not After : Feb 3 02:00:10 2025 GMT
Subject: CN=58853e2aa51d09b8c659c5d590a94f221eb4635a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2d:fc:23:18:98:31:39:ee:0c:91:5d:7b:75:
f4:b6:4b:13:7e:8c:26:8a:38:80:ea:63:01:70:e5:
35:eb:77:2f:59:e7:dc:b1:ac:80:24:61:37:88:d8:
e2:12:52:89:7a:3d:80:0f:cd:39:e8:14:d8:36:45:
ad:7c:ca:65:a7:51:3c:25:be:9e:ca:f5:af:39:d0:
54:25:62:ef:f8:8d:a8:12:bc:6e:aa:2e:73:09:de:
74:2a:0b:d1:5c:34:54:df:8f:66:ec:54:19:65:1c:
63:2f:10:2e:69:21:ba:ca:e2:6e:ff:72:90:1f:8c:
50:e7:1e:7f:18:ae:f7:71:6d:04:10:38:5a:78:d3:
c1:c1:2a:c0:f7:b7:81:97:26:0b:12:72:08:4f:ad:
6e:b4:24:57:1d:78:e2:ac:93:4a:28:cd:fe:c4:31:
8c:b3:74:c8:13:9a:56:a1:36:db:22:59:ca:56:33:
41:e6:57:44:10:0f:2e:75:9c:8a:8a:f7:e0:19:fe:
52:58:b8:5c:17:13:b1:a6:5c:c0:63:f7:49:43:5e:
a7:c7:05:f2:85:5e:c0:22:b9:aa:b0:6d:a9:75:28:
55:8c:1c:73:bf:31:1d:68:fc:13:35:a7:64:36:dd:
96:07:7b:6f:61:42:19:ce:2c:35:d4:59:ca:0f:f1:
5d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:85:3E:2A:A5:1D:09:B8:C6:59:C5:D5:90:A9:4F:22:1E:B4:63:5A
X509v3 Authority Key Identifier:
keyid:38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:19:f9:b8:fe:81:50:fc:6b:07:96:95:a1:ae:e1:0d:b9:12:
10:23:9d:43:20:c6:73:7c:3f:47:b4:6e:2e:3e:61:09:88:34:
82:3f:97:28:f6:e8:65:42:e4:b5:e3:50:46:9a:b9:ce:06:6f:
c6:e9:04:ce:a9:f2:c8:61:1f:07:57:d3:86:de:de:9d:2f:27:
3d:0c:dc:03:b1:71:cf:a4:f7:72:60:92:b0:b3:46:91:5c:01:
59:a1:30:76:a4:5b:e4:9f:da:0e:e5:e3:48:66:32:77:56:12:
61:c9:59:17:24:0f:ca:51:ef:d9:80:66:76:88:ab:ff:a2:90:
bd:43:07:ad:da:35:a9:2c:34:c7:b7:4f:1d:66:60:f6:ba:aa:
26:62:e4:26:60:d7:46:c9:fd:af:14:ef:80:c9:9e:ac:dc:fc:
d8:b6:62:d5:7b:75:47:e2:27:dd:af:95:1a:33:f7:22:c5:90:
91:4d:b4:1b:8a:4c:18:64:32:a8:74:d2:1f:6b:c4:b1:83:68:
02:fe:01:1f:14:9d:0e:1f:41:4e:93:fa:81:65:9a:c4:79:1a:
4b:67:ea:e2:83:14:34:bd:c1:49:d1:1c:cf:e3:b4:9a:ed:af:
48:8d:73:59:b9:85:71:00:32:00:6f:bf:3b:ba:9f:a4:bb:a9:
99:1a:43:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:55 2025 by rpki-client