Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
File: OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft (raw, json)
Hash identifier: 2KVA56Xd84zpvAxlthy9SC39CtnUtLK/KK9ZcXDRsLU=
Subject key identifier: CB:C2:8B:4A:47:C9:29:B8:3F:D1:16:20:EA:7E:A0:D4:1C:D2:77:9F
Authority key identifier: 39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
Certificate issuer: /CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Certificate serial: 0194C5081FA3E44A37ABAF3F7510AAE1BE22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
Manifest number: 142C
Signing time: Sun 02 Feb 2025 05:00:31 +0000
Manifest this update: Sun 02 Feb 2025 05:00:31 +0000
Manifest next update: Mon 03 Feb 2025 05:00:31 +0000
Files and hashes: 1: 2ksl-0DaqqPMJOIcVSjRYw3oowo.roa (hash: bR5/CsRer/6UzbcdOln79yAgzHl3TX5cZlnxevkQmfk=)
2: NeDUni-C3uHplhagAy2lf9i4WwQ.roa (hash: tf9wG40bSRlg1tIcGU3dfENffu94T3Q0YSHKTzWPt14=)
3: OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl (hash: 7HEaAKYAtzsnjnGmcfjGFIAw7w3y9Rqq8mXgrnYGeKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:08:1f:a3:e4:4a:37:ab:af:3f:75:10:aa:e1:be:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Validity
Not Before: Feb 2 05:00:31 2025 GMT
Not After : Feb 3 05:00:31 2025 GMT
Subject: CN=cbc28b4a47c929b83fd11620ea7ea0d41cd2779f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:25:8c:43:40:bd:1d:23:fe:60:7d:31:1c:29:
fd:7a:f2:66:4b:16:59:6a:10:4a:3a:50:b2:d1:14:
81:a9:e1:31:e4:21:44:27:f1:ac:61:af:ec:49:c1:
10:f9:0e:96:ac:61:a0:8e:03:af:af:e7:64:18:bd:
c9:d2:d7:fb:fc:cb:58:a7:44:a8:4e:da:74:e5:a4:
70:b0:0a:f6:f0:75:a2:51:54:57:4a:a1:06:2c:f1:
88:3b:b8:23:80:3d:e7:0d:6a:11:8f:fc:fe:78:2b:
7f:4e:b8:ac:83:04:cc:36:00:55:de:66:52:17:f9:
2f:81:79:6c:c2:11:8b:f2:d8:18:63:97:13:5f:9e:
0f:54:f2:fa:90:05:c1:fd:2d:59:67:28:fe:21:62:
1a:af:d7:ac:f2:0e:8d:c8:c6:69:8e:ad:de:7e:ab:
49:9f:2d:13:c5:b9:16:2f:5c:b0:f7:d7:78:cf:2b:
86:cf:13:c2:67:c9:1f:72:e8:2e:85:41:86:45:65:
63:6a:c4:c5:27:cd:37:fc:cc:0b:62:90:96:fc:c8:
40:10:57:59:0c:f0:f9:3a:a4:ac:6e:32:09:5b:88:
48:c5:3c:80:6a:fd:18:f2:bf:4f:3d:54:97:2b:8e:
ce:dc:ab:9f:2e:a5:d1:d8:d0:53:2b:84:38:34:4a:
44:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C2:8B:4A:47:C9:29:B8:3F:D1:16:20:EA:7E:A0:D4:1C:D2:77:9F
X509v3 Authority Key Identifier:
keyid:39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:6e:e5:4b:91:a7:18:62:f0:0b:ad:7c:43:ae:80:2c:39:29:
f9:44:08:10:90:c0:05:91:5c:24:eb:81:b1:07:18:38:e8:c1:
cd:9c:4d:74:66:f4:6b:56:5b:8f:9b:44:99:33:95:85:2f:44:
69:c8:0f:de:0b:82:f7:37:9a:9a:3c:de:34:81:62:b1:89:19:
e8:84:37:64:38:7a:b9:e0:0e:1b:f4:e6:10:d8:2f:38:c4:2b:
c7:84:ed:20:f8:ef:b3:ef:ec:7b:cc:bd:9f:61:0d:02:a7:71:
11:0a:d3:e3:1b:07:56:ee:53:f5:67:65:32:0b:63:ee:13:4d:
62:87:91:64:7f:30:80:9f:db:56:fa:a9:23:9b:d3:35:89:64:
58:f5:5a:b6:73:59:5b:3a:57:97:51:5f:f1:f0:23:11:89:0c:
3a:f4:9e:0b:6e:d3:1f:72:9c:35:e5:47:74:dd:64:ac:30:c9:
94:2c:b0:76:92:6b:63:8d:d3:bb:bb:57:9d:8a:16:85:9a:89:
84:a5:dc:26:2d:11:a4:47:4f:6f:d6:f5:4f:89:79:43:2c:2f:
27:91:09:c8:17:56:f1:99:91:7d:af:f3:4e:fd:a8:0a:f6:b5:
0a:98:cb:4a:e3:93:26:e9:31:25:8f:f9:4f:3f:00:ba:81:5b:
78:e6:54:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:06:55 2025 by rpki-client