Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft
File: 8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft (raw, json)
Hash identifier: hvU2t6dy1kVO4dl/6aEX0DEJcjHpgghkySaD3qNtj2s=
Subject key identifier: 29:16:A1:03:9A:A0:1E:CD:D8:BB:C2:B5:C1:30:CF:44:94:0E:B3:0D
Authority key identifier: F0:E9:AC:9C:F9:05:A1:6C:5A:FA:0E:50:35:FF:A7:A2:35:2E:13:F4
Certificate issuer: /CN=f0e9ac9cf905a16c5afa0e5035ffa7a2352e13f4
Certificate serial: 0194C507F629E4132583C78C7E1EC0695825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft
Manifest number: 09
Signing time: Sun 02 Feb 2025 05:00:20 +0000
Manifest this update: Sun 02 Feb 2025 05:00:20 +0000
Manifest next update: Mon 03 Feb 2025 05:00:20 +0000
Files and hashes: 1: 8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl (hash: c/JZ/2UZ6ElQrki1xlNlKZuxL/29ouxAGnfZOTGhfFE=)
2: _WVlT7-1Imoz4g0EF5uWl2lTEc8.roa (hash: H0e3KWlG+8qMZBi2VuBc5UjjGP9iBvHcYYdjqTrJwco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:f6:29:e4:13:25:83:c7:8c:7e:1e:c0:69:58:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e9ac9cf905a16c5afa0e5035ffa7a2352e13f4
Validity
Not Before: Feb 2 05:00:20 2025 GMT
Not After : Feb 3 05:00:20 2025 GMT
Subject: CN=2916a1039aa01ecdd8bbc2b5c130cf44940eb30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:60:2d:54:9c:df:5a:84:62:44:77:22:3f:59:
7f:34:2d:14:0e:ba:5a:63:b3:2c:dc:2f:93:3d:bf:
88:6c:33:a4:3e:a8:38:33:e2:e6:0d:f2:07:05:f1:
f8:63:5a:c6:e7:2a:ab:35:07:cc:8f:80:99:4a:a6:
6e:ca:7c:5a:e0:7e:76:dd:ca:7e:fb:f5:da:d7:a5:
0c:83:d1:d8:c2:36:ce:c9:ea:7a:ff:f9:71:87:18:
b9:2b:0d:87:2f:c4:ec:a3:9f:4c:fb:99:56:cb:38:
66:5f:d5:8d:67:3c:ae:d7:17:1f:e9:e0:2d:cd:4d:
eb:ea:99:17:29:01:cd:b0:c2:21:4f:e5:39:76:d2:
41:bb:e6:d8:e2:65:67:c4:ac:20:df:ca:3d:bd:7d:
b3:a7:18:46:01:47:df:9a:80:00:cd:4b:18:12:ed:
49:2d:8d:86:f3:40:a2:ab:ec:37:9d:0f:2b:48:5e:
fb:9a:4f:09:ca:3c:8a:16:2e:89:16:aa:ad:f9:ef:
f5:29:b3:d5:1a:11:73:85:66:4b:37:2a:d0:e8:e4:
46:ea:8d:a4:35:e7:3f:6c:71:47:e9:37:b7:a2:ff:
3f:65:42:25:36:58:57:c6:a0:42:a2:9f:e9:49:5f:
b7:f3:97:a5:74:89:13:b4:b4:c6:61:d6:0c:09:0a:
3b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:16:A1:03:9A:A0:1E:CD:D8:BB:C2:B5:C1:30:CF:44:94:0E:B3:0D
X509v3 Authority Key Identifier:
keyid:F0:E9:AC:9C:F9:05:A1:6C:5A:FA:0E:50:35:FF:A7:A2:35:2E:13:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:78:7c:ca:5d:f2:c5:93:d6:c3:c2:96:48:da:04:63:c6:f8:
36:62:73:ec:87:b2:59:f2:4e:78:e5:4f:5c:06:5f:5f:83:87:
52:63:95:9e:3c:45:05:e3:99:e9:25:40:cb:00:4c:c1:24:b3:
09:b7:be:9f:82:ed:3a:41:1e:ca:c1:e1:07:02:12:63:42:b4:
33:70:df:28:1a:21:0e:98:2f:f0:02:b5:16:8e:85:89:7e:a6:
96:c8:18:5b:2e:00:6f:b6:a3:46:af:74:9c:8d:40:28:63:99:
a1:81:fd:b5:3d:09:97:2e:70:09:ba:19:61:85:51:3a:6f:c5:
a2:8d:e5:19:9a:88:eb:25:4f:96:28:5d:1c:7c:04:58:b7:27:
c1:e7:1b:95:0a:cc:70:72:b7:89:18:b4:d3:47:fa:0e:d9:1e:
f9:36:be:ce:c4:64:e8:d5:31:9d:27:d2:e6:d4:76:2c:24:ce:
f3:f2:3d:17:5e:a2:40:c8:21:25:9e:aa:01:26:8c:4d:18:af:
15:17:5d:ec:d2:61:9b:a5:2f:3d:8b:b8:6a:9f:08:de:4d:c2:
26:5d:82:77:b6:d3:2f:aa:33:2a:ee:a5:a0:8a:f1:ed:e0:60:
3a:b6:3c:2b:93:93:c0:4e:ad:20:5a:4c:37:6a:4f:cc:cc:83:
e8:a8:f1:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTFB/Yp5BMlg8eMfh7AaVglMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZTlhYzljZjkwNWExNmM1YWZhMGU1MDM1ZmZhN2EyMzUy
ZTEzZjQwHhcNMjUwMjAyMDUwMDIwWhcNMjUwMjAzMDUwMDIwWjAzMTEwLwYDVQQD
EygyOTE2YTEwMzlhYTAxZWNkZDhiYmMyYjVjMTMwY2Y0NDk0MGViMzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmAtVJzfWoRiRHciP1l/NC0UDrpa
Y7Ms3C+TPb+IbDOkPqg4M+LmDfIHBfH4Y1rG5yqrNQfMj4CZSqZuynxa4H523cp+
+/Xa16UMg9HYwjbOyep6//lxhxi5Kw2HL8Tso59M+5lWyzhmX9WNZzyu1xcf6eAt
zU3r6pkXKQHNsMIhT+U5dtJBu+bY4mVnxKwg38o9vX2zpxhGAUffmoAAzUsYEu1J
LY2G80Ciq+w3nQ8rSF77mk8JyjyKFi6JFqqt+e/1KbPVGhFzhWZLNyrQ6ORG6o2k
Nec/bHFH6Te3ov8/ZUIlNlhXxqBCop/pSV+385eldIkTtLTGYdYMCQo7sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkWoQOaoB7N2LvCtcEwz0SUDrMNMB8GA1UdIwQY
MBaAFPDprJz5BaFsWvoOUDX/p6I1LhP0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE9tc25Qa0ZvV3hhLWc1UU5mLW5valV1RV9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zNTI3YjAtZDY3ZS00MTVkLTgxNDAt
NmFjMTBiNGQyYmJjLzEvOE9tc25Qa0ZvV3hhLWc1UU5mLW5valV1RV9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8zNTI3YjAtZDY3ZS00MTVkLTgxNDAtNmFjMTBiNGQyYmJj
LzEvOE9tc25Qa0ZvV3hhLWc1UU5mLW5valV1RV9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWnh8yl3y
xZPWw8KWSNoEY8b4NmJz7IeyWfJOeOVPXAZfX4OHUmOVnjxFBeOZ6SVAywBMwSSz
Cbe+n4LtOkEeysHhBwISY0K0M3DfKBohDpgv8AK1Fo6FiX6mlsgYWy4Ab7ajRq90
nI1AKGOZoYH9tT0Jly5wCboZYYVROm/Foo3lGZqI6yVPlihdHHwEWLcnwecblQrM
cHK3iRi000f6Dtke+Ta+zsRk6NUxnSfS5tR2LCTO8/I9F16iQMghJZ6qASaMTRiv
FRdd7NJhm6UvPYu4ap8I3k3CJl2Cd7bTL6ozKu6loIrx7eBgOrY8K5OTwE6tIFpM
N2pPzMyD6KjxyA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:07 2025 by rpki-client