Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
File: o8igyniYQoP6uYbJuApbBAl35VY.mft (raw, json)
Hash identifier: PxEXJQjY8TpLAZiveDDOgDSIEZR7vW9PIsTaUnfpPG0=
Subject key identifier: 04:00:FC:35:49:40:1A:8F:D0:D4:AA:94:A9:3F:E6:55:0E:37:E7:F6
Authority key identifier: A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
Certificate issuer: /CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Certificate serial: 019511A2B621B57074D4851806E139DA85D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
Manifest number: 1459
Signing time: Mon 17 Feb 2025 02:00:30 +0000
Manifest this update: Mon 17 Feb 2025 02:00:30 +0000
Manifest next update: Tue 18 Feb 2025 02:00:30 +0000
Files and hashes: 1: 2dCQLf2c8rJJ6iCQKe0e6vINyPk.roa (hash: SEFpdbMTDaaA3AA3UouB55T1ZZTJCyUohOoSjbS+NbY=)
2: S590SXJakiMm1tsWzi1G9Qgs-eo.roa (hash: 3PI1IRmRMy2Dl683V5IPqONj9wz5d+QDZfRjIsrHO1I=)
3: o8igyniYQoP6uYbJuApbBAl35VY.crl (hash: 9/wiT/82IduURE/XdG1GyQG8nMSkUEjH+O+iWoRqM3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:b6:21:b5:70:74:d4:85:18:06:e1:39:da:85:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Validity
Not Before: Feb 17 02:00:30 2025 GMT
Not After : Feb 18 02:00:30 2025 GMT
Subject: CN=0400fc3549401a8fd0d4aa94a93fe6550e37e7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:69:c4:1b:5e:ae:4c:f4:ea:a3:07:5f:eb:29:
b7:4f:cc:34:bd:7e:f7:33:c4:15:d3:62:38:68:7f:
2d:6e:e9:d5:b0:b6:e5:e7:f2:66:49:1d:f1:ec:b4:
b4:39:17:d7:20:f0:cc:b1:95:24:49:3d:f3:8b:b1:
4f:37:2f:d9:61:83:1d:e5:a8:c6:f5:59:25:b2:63:
4e:0e:2c:1f:3f:fe:bb:2d:f9:0c:f1:d6:f9:cd:ea:
47:93:95:e5:d7:46:36:f0:30:5c:01:e0:24:74:3f:
7d:57:94:7f:88:22:59:36:86:18:4c:22:85:2e:eb:
13:e0:f1:92:b2:c0:92:bf:9c:9a:a0:f1:26:66:23:
4d:b6:2a:8e:24:c3:06:dd:1e:f1:ff:05:24:9d:9f:
45:ff:73:dc:8b:0a:d5:ec:cd:61:c6:05:80:a3:61:
0e:69:a0:93:3c:ce:8b:92:4b:5b:fe:be:0a:06:cb:
ab:62:d3:a9:6f:7f:92:53:3a:e6:64:91:b5:4f:fd:
73:08:a0:b1:63:9b:9e:a5:0a:ca:bc:15:8b:f4:14:
49:ff:3f:8d:7c:36:5a:e4:a5:40:0b:53:0d:58:71:
e9:71:93:cf:80:8b:b0:2c:77:e7:4e:97:7f:96:a0:
64:87:8d:c4:a8:78:6b:b2:28:73:70:5d:dc:87:4b:
9d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:00:FC:35:49:40:1A:8F:D0:D4:AA:94:A9:3F:E6:55:0E:37:E7:F6
X509v3 Authority Key Identifier:
keyid:A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:1c:ab:31:79:a4:0e:3a:01:19:65:3c:8a:9b:ce:2b:dd:fe:
e3:40:4c:23:0a:ea:2a:9c:6a:98:03:3f:3b:68:fa:74:78:50:
0c:9d:4c:c7:53:98:d6:9b:36:4b:64:5d:18:f8:16:14:15:06:
64:93:d7:e4:fb:7f:8e:69:fe:10:f4:f6:bd:f5:1d:42:8a:d7:
b5:90:b2:c1:b3:d0:f0:19:2c:55:12:fe:51:9c:6b:21:ff:73:
1b:fd:a4:12:3a:b7:b6:9d:fa:80:73:45:47:56:b5:66:57:bd:
2d:40:f6:80:a4:41:ae:8d:b4:fc:0a:5b:97:80:e0:00:03:a0:
b4:d0:d7:d6:71:50:5c:f4:8d:23:08:22:a6:23:00:b1:7b:44:
df:82:5a:7a:59:42:e2:a0:1d:87:0c:80:b8:f1:12:89:67:77:
61:a0:8a:64:f7:c7:cd:17:06:6f:f4:aa:30:e4:8b:b5:6d:ff:
b9:dd:77:44:44:54:5b:41:96:1f:db:7f:46:3e:fe:5b:f8:e9:
5e:b1:ae:15:c8:a8:ec:37:d5:e7:a6:88:eb:78:92:cd:69:04:
3c:3f:0b:25:7c:e4:79:08:d5:46:6a:00:17:98:7d:ac:44:7e:
bf:59:e7:a9:8a:98:21:7b:fd:c2:50:ad:b9:88:a1:0f:ea:e8:
3d:20:9e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:10 2025 by rpki-client