Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
File: O6BcspZx0wpXo-hET0H-A0z3UjE.mft (raw, json)
Hash identifier: VUz0/m5iGKxRRSwU0iSanvNkgCUABPXIO3XdbV+VsTE=
Subject key identifier: CA:A5:BA:8D:0C:AE:89:A2:64:DE:CD:97:4A:77:37:B9:91:DF:57:48
Authority key identifier: 3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31
Certificate issuer: /CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
Certificate serial: 0194C49A2A789A7CDA6B77799FC77AF86591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
Manifest number: 02F3
Signing time: Sun 02 Feb 2025 03:00:25 +0000
Manifest this update: Sun 02 Feb 2025 03:00:25 +0000
Manifest next update: Mon 03 Feb 2025 03:00:25 +0000
Files and hashes: 1: O6BcspZx0wpXo-hET0H-A0z3UjE.crl (hash: FXZoUmE502YY3fQ8XCkpa1tmCFRXvSIOQGaIiGIFuKg=)
2: Rz-Vh9z4e03dlNgqerpia1XRL-k.roa (hash: 264nJ8QiwzT6QaHmYoFKRNYp0Sy9/H1JZeP4RPKrOd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:2a:78:9a:7c:da:6b:77:79:9f:c7:7a:f8:65:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
Validity
Not Before: Feb 2 03:00:25 2025 GMT
Not After : Feb 3 03:00:25 2025 GMT
Subject: CN=caa5ba8d0cae89a264decd974a7737b991df5748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c9:4b:86:ce:e2:86:a3:dc:05:f0:df:68:af:
cc:b3:97:f6:68:02:26:01:f6:3a:6b:b1:50:11:65:
1e:41:6b:7d:eb:bc:10:72:23:10:8b:7b:ab:c4:06:
fc:c1:9b:9f:26:e1:24:28:c9:ae:63:5d:d4:be:3b:
e9:22:50:4f:a0:1d:3d:90:98:f4:6a:b2:da:4c:f3:
aa:05:4f:71:a5:e7:d5:9f:04:b4:57:78:d1:83:92:
0b:ef:c6:0a:7e:0b:17:18:1b:ee:11:ad:90:a2:a2:
8a:46:d0:cf:5a:57:50:14:90:8f:d4:04:11:06:24:
e2:77:3b:9a:2c:af:c5:57:90:a6:f6:89:99:fe:68:
a0:91:05:42:fc:3b:62:19:04:e7:63:3b:98:8a:e4:
0d:56:2d:a7:34:78:f7:d7:79:3d:0a:33:b7:ae:ec:
da:89:50:67:a9:32:d0:b2:13:a4:f0:ee:db:af:28:
af:fa:73:53:bf:2e:2c:5c:91:9e:15:ad:a8:e3:99:
39:c1:81:e6:bd:c8:24:f7:ad:e7:51:43:a4:08:f3:
df:2d:29:b8:e6:ef:01:36:b9:06:69:a3:49:1a:3d:
cf:5b:eb:7f:88:2b:02:d7:78:a4:ab:39:e9:b8:b0:
d7:d6:6a:49:bf:9d:b0:46:92:21:88:6a:be:17:e2:
20:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A5:BA:8D:0C:AE:89:A2:64:DE:CD:97:4A:77:37:B9:91:DF:57:48
X509v3 Authority Key Identifier:
keyid:3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:bb:bb:33:16:d5:4a:b4:10:ae:de:73:60:de:3e:8d:9e:00:
33:33:c2:32:84:74:c8:eb:82:70:84:17:57:51:f1:3d:e9:b1:
7f:aa:60:57:74:e6:40:c9:63:f1:d6:0c:eb:69:af:51:76:81:
05:97:35:a0:51:f0:12:9c:07:21:86:d7:4a:5a:24:aa:21:98:
68:26:c7:22:d3:95:f3:e8:d0:18:c9:03:03:62:b3:b5:ce:01:
2e:aa:f1:fd:a7:8e:b6:fa:9c:24:61:5d:39:97:ee:d3:aa:3a:
f9:57:ec:f4:0f:0f:55:54:56:1e:43:10:b7:8a:5c:a7:bf:7d:
e3:46:55:c6:64:09:41:0b:01:fc:9f:b3:8c:81:4d:5d:21:66:
05:b4:37:37:01:ce:d5:60:0c:df:55:cc:b0:61:ce:32:09:7c:
5a:6f:55:95:6e:be:3f:a4:38:25:a3:73:ea:26:48:27:46:3b:
54:39:bb:a2:43:10:f8:7a:c7:6a:c7:f4:89:dd:a3:90:f9:13:
68:4d:35:cb:db:b3:aa:68:ee:43:09:45:1f:43:b5:1a:c0:e8:
c8:6d:f9:95:e3:7f:4b:36:ae:57:91:4d:9d:59:ee:21:b0:27:
0f:81:7b:34:13:a4:37:59:1b:da:d3:6d:4b:07:5f:3c:9e:af:
73:22:05:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:47:01 2025 by rpki-client