Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
File: OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft (raw, json)
Hash identifier: X/VhlgidBEjYLeoj5KW7liZcEGg/dwBsvQmYFXslh6o=
Subject key identifier: 61:10:2A:83:AD:9F:B0:FD:92:4F:CA:71:69:8F:28:18:7B:9C:54:47
Authority key identifier: 38:7B:75:61:D9:8D:AC:FA:B8:63:05:8B:3B:98:07:AD:82:3F:18:6A
Certificate issuer: /CN=387b7561d98dacfab863058b3b9807ad823f186a
Certificate serial: 0194C387657F7155850EFD5C2164949E0970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
Manifest number: A2
Signing time: Sat 01 Feb 2025 22:00:17 +0000
Manifest this update: Sat 01 Feb 2025 22:00:17 +0000
Manifest next update: Sun 02 Feb 2025 22:00:17 +0000
Files and hashes: 1: FtOApP1JK-2eKX_hjEPgWrMZdBM.roa (hash: fFP7Ifph2yQGZ7ICJ/Ang9F4wXqAsOp+daYrJKGw4zs=)
2: OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl (hash: Scp+iuuF3O8br5jPjVbC2Ctae3vo3GHvZ2PO3GBCwKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:65:7f:71:55:85:0e:fd:5c:21:64:94:9e:09:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387b7561d98dacfab863058b3b9807ad823f186a
Validity
Not Before: Feb 1 22:00:17 2025 GMT
Not After : Feb 2 22:00:17 2025 GMT
Subject: CN=61102a83ad9fb0fd924fca71698f28187b9c5447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:91:77:09:fd:9a:e6:ce:65:c2:85:3f:37:
a4:80:0a:7e:03:1d:6f:ac:41:cd:5d:90:52:f5:8e:
be:2a:47:54:3e:52:a9:63:68:5f:53:16:22:d7:f1:
c9:6a:74:db:eb:56:e5:e1:5e:b7:c7:01:9a:4c:8d:
ad:68:65:10:f5:84:eb:0c:73:5b:93:a1:7d:c6:7e:
84:2a:c6:f9:03:4e:9c:d9:b1:37:b2:47:e4:73:d7:
00:15:bc:28:ab:fe:d1:d5:22:01:df:79:1e:62:37:
97:79:70:89:3e:6c:e2:ec:48:5c:47:8c:f0:c0:11:
1a:88:29:5c:31:00:20:fd:d0:10:45:a0:ee:bf:03:
ea:01:12:7e:9e:22:d6:b1:03:85:86:94:9e:9c:52:
43:96:be:6b:7c:80:c6:f0:6a:a0:13:d5:fa:59:84:
eb:6c:1d:02:59:62:b6:f9:aa:09:a2:a2:3c:da:e8:
d2:b1:b8:03:53:5f:03:d3:92:5a:b1:c4:5a:d6:4c:
4b:9a:93:fe:18:a4:c9:7e:a1:5b:dc:a7:55:75:19:
3b:53:83:c2:53:b0:39:72:1c:fb:7b:b4:e8:ec:78:
c2:17:fe:f5:a8:0e:f2:1e:9d:33:07:e3:48:c1:3f:
8d:9e:26:b8:b8:25:dd:c7:ef:78:09:b9:78:2e:5f:
39:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:10:2A:83:AD:9F:B0:FD:92:4F:CA:71:69:8F:28:18:7B:9C:54:47
X509v3 Authority Key Identifier:
keyid:38:7B:75:61:D9:8D:AC:FA:B8:63:05:8B:3B:98:07:AD:82:3F:18:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e7:8b:3d:bf:4a:bc:94:08:66:3b:4f:da:00:3d:04:cb:5d:
e0:ff:4f:f4:b9:a1:b1:ed:46:d2:0e:b5:a4:14:86:c8:15:bd:
cb:ad:ba:07:93:08:f6:93:22:84:e3:b2:9c:3a:d4:b2:f7:2d:
19:41:2e:75:20:95:c6:1f:8b:5b:3a:0b:77:81:60:05:9a:4c:
b2:72:97:6d:4f:77:a5:12:68:d7:f5:f2:12:e3:c4:41:09:9b:
11:ab:fb:52:cb:c5:88:c3:c9:9d:af:5a:c2:62:b7:38:11:c0:
f9:c9:6d:02:69:41:ba:2a:d0:e4:82:36:db:01:a8:73:e0:52:
98:c0:2b:5c:f6:88:8b:e8:ca:4f:f1:01:d4:22:19:44:ac:c4:
61:82:66:20:3f:0d:78:03:27:8d:07:db:5a:54:62:4d:11:ce:
1e:59:8c:67:84:7d:ca:6a:1a:49:89:17:6e:21:da:0a:1b:3d:
da:b0:fa:ae:06:3d:1c:4b:a0:3f:25:47:7b:a1:11:9c:f4:9c:
bd:8f:4e:55:2c:0a:5b:61:cf:65:0b:fd:49:e4:3d:5f:41:0b:
e2:dc:9f:3b:ff:e0:eb:00:ce:f1:47:a8:81:14:51:a2:6f:60:
fc:83:46:0d:68:e6:c8:3d:80:11:59:f2:3b:39:18:31:76:df:
53:9c:e6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:03 2025 by rpki-client