Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
File: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft (raw, json)
Hash identifier: iOVapTBrjJ+Rsnz6HILqhCjiBMY6UaB5G/+h4negg4s=
Subject key identifier: B3:86:41:33:AF:66:30:A4:3D:E4:3C:09:D6:61:81:86:C6:08:4C:4B
Authority key identifier: 3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
Certificate issuer: /CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Certificate serial: 0194C4D17A14D0636DF76212A348BA8E7D68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
Manifest number: 39
Signing time: Sun 02 Feb 2025 04:00:50 +0000
Manifest this update: Sun 02 Feb 2025 04:00:50 +0000
Manifest next update: Mon 03 Feb 2025 04:00:50 +0000
Files and hashes: 1: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl (hash: 8CJQ6Xu6XRhvkhgJ3OxjI89c3TqsxL1JePJLkTu81vg=)
2: f0dwYiFEnOu3_JgUSzuAzEREF1g.roa (hash: finZQb06qlnebE/7uJEc9oVyw8NWrlEdleXzIM/XsmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:7a:14:d0:63:6d:f7:62:12:a3:48:ba:8e:7d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Validity
Not Before: Feb 2 04:00:50 2025 GMT
Not After : Feb 3 04:00:50 2025 GMT
Subject: CN=b3864133af6630a43de43c09d6618186c6084c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:33:a0:3d:5d:fc:8e:1c:53:28:67:81:36:4d:
60:f1:fe:92:e3:1c:27:1d:81:1a:bf:1a:bc:32:37:
63:b5:87:04:41:03:46:58:80:58:a3:2f:62:20:ac:
0e:7f:2e:04:57:44:a9:23:81:3e:e0:1b:b0:f8:78:
81:3a:8e:cf:66:19:84:46:d1:6c:a7:e8:85:68:7f:
96:5a:88:7d:a7:f0:5a:6d:db:80:30:8a:48:a1:4a:
9e:f5:31:3b:3e:4e:8f:7f:65:58:9b:fe:08:9d:69:
6e:a0:c5:d5:67:fc:b5:9c:d9:0e:4b:93:be:79:4a:
fc:3c:58:bf:a2:6c:4e:ae:cd:0a:a9:94:6a:93:91:
c5:a4:9c:3c:0a:ea:43:f8:a5:a4:31:f3:89:b6:44:
04:43:df:27:50:2c:69:bd:44:45:fb:4d:6d:15:4f:
28:d8:25:09:da:16:db:a5:ac:c4:56:9d:e6:15:be:
7b:c0:d3:dd:ca:4f:c1:ce:61:3d:03:2d:a3:4e:da:
1f:52:72:a0:f5:e1:fd:6e:36:ae:d9:cd:a1:84:f3:
ed:86:15:5b:11:85:6b:01:06:f8:53:34:32:26:db:
62:43:1c:41:4c:5b:eb:a4:b7:f5:ed:21:cf:20:2c:
cb:06:bb:00:aa:3e:a3:41:a3:be:5e:fc:f3:24:f5:
93:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:86:41:33:AF:66:30:A4:3D:E4:3C:09:D6:61:81:86:C6:08:4C:4B
X509v3 Authority Key Identifier:
keyid:3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:25:15:be:06:c8:bf:bf:d6:46:c7:0f:02:10:fb:66:95:b2:
73:ec:87:91:70:c2:02:71:57:2e:5c:11:b4:90:51:e3:31:39:
b9:d2:64:20:ae:ba:ee:b6:65:29:74:17:f9:c3:c0:7a:30:b4:
55:d2:f8:43:8c:e7:b7:55:31:56:70:85:18:7d:a1:b6:98:86:
fe:4d:cc:83:27:ad:29:c1:70:66:10:18:26:28:b2:0c:41:02:
dc:77:c8:91:1c:13:d0:20:c3:99:e0:fd:94:75:22:62:fb:5b:
13:0d:e9:6a:73:9b:ec:7a:32:7b:33:34:f9:2e:6a:48:13:92:
58:41:9c:03:9f:2d:40:0a:c0:d1:21:a3:12:c0:d1:57:26:80:
a3:e0:43:25:90:bd:c1:42:1d:77:70:ea:cc:fc:eb:64:4f:57:
f6:42:d3:7a:c3:70:6b:69:3b:ed:40:c9:67:07:6a:28:cb:d6:
ee:37:d9:75:cb:18:58:99:11:0d:8e:9d:d0:12:5d:33:fd:f4:
03:67:b3:01:a1:0c:a5:a6:4a:f5:92:ad:69:55:b4:d8:36:2a:
30:31:29:2a:1e:b1:61:ba:8f:06:e6:82:b9:00:e3:da:fa:92:
65:34:62:fe:18:01:36:9d:f5:1d:db:3f:1c:eb:5b:af:4c:47:
ee:57:29:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:41:06 2025 by rpki-client