Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
File: o0kR6dK76mamwkAxnd4wez3vSME.mft (raw, json)
Hash identifier: GzwCpKB0q4WuBwH2lgmWhTwj/EssMITcTdzuPDNSPas=
Subject key identifier: 9A:A6:02:16:C4:23:6A:14:B7:BD:57:D2:0A:99:26:8D:BD:50:D2:38
Authority key identifier: A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
Certificate issuer: /CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Certificate serial: 019510C71BFEC523445ABC302AC54E6E7C60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
Manifest number: 1457
Signing time: Sun 16 Feb 2025 22:00:39 +0000
Manifest this update: Sun 16 Feb 2025 22:00:39 +0000
Manifest next update: Mon 17 Feb 2025 22:00:39 +0000
Files and hashes: 1: o0kR6dK76mamwkAxnd4wez3vSME.crl (hash: FwKhwYN8hVzwYs639HyX+px4Z+lzSmMrv7eLfhXdz5w=)
2: xtKHi03X1rn73LOhmyBcH9uojR8.roa (hash: zBGWZf4vklDM0mAZkH6NtmjYXdkW+BEyoU8BQG385Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:1b:fe:c5:23:44:5a:bc:30:2a:c5:4e:6e:7c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Validity
Not Before: Feb 16 22:00:39 2025 GMT
Not After : Feb 17 22:00:39 2025 GMT
Subject: CN=9aa60216c4236a14b7bd57d20a99268dbd50d238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f4:4e:71:a5:29:b6:13:69:05:4d:3d:50:7e:
bd:da:67:35:a6:48:87:91:4d:e9:2e:04:fb:77:3b:
5a:da:0d:f6:95:6b:0b:d8:56:5b:6e:bf:f5:9a:65:
c9:cf:fc:c9:24:ad:87:a4:5b:16:bb:b5:b9:35:60:
ae:70:4a:70:4e:40:86:bb:4c:fb:67:97:7a:7d:aa:
89:a1:ef:fb:a0:4a:c9:0f:2b:ad:78:c8:93:9a:78:
45:1e:3b:a9:37:63:96:bf:3e:38:d7:b0:c9:0c:0a:
b1:a5:0e:f6:e6:a3:58:ae:e9:96:a7:b1:e4:01:98:
77:5e:55:5e:52:46:c7:2a:9d:a1:a5:65:f1:8b:dd:
d9:f5:75:72:8d:9d:47:48:2a:ac:75:50:8c:10:d7:
2c:25:79:ad:c2:9d:f8:5a:5d:8a:10:82:a6:14:e7:
99:5d:ab:be:df:ba:ec:85:b2:8c:69:7b:67:97:e1:
c9:80:25:64:55:37:4a:f0:83:9c:c8:8e:f0:9c:f3:
15:e6:fb:41:9c:6e:bf:24:69:2b:ee:73:81:28:3a:
fd:14:ad:29:7e:0d:cf:0f:3a:7e:11:c1:3a:62:79:
db:12:74:2e:63:3c:b8:21:32:44:79:c2:0d:28:5b:
38:5a:f5:5e:df:e4:b7:1f:f7:82:4e:71:0f:cc:b4:
ec:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A6:02:16:C4:23:6A:14:B7:BD:57:D2:0A:99:26:8D:BD:50:D2:38
X509v3 Authority Key Identifier:
keyid:A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:54:d7:d5:15:b7:5b:09:76:d0:9f:af:84:79:f7:ca:98:cc:
58:15:3a:10:34:dc:fd:67:99:a1:8b:b8:29:ba:da:88:60:37:
25:6c:92:79:5c:0a:d1:78:83:fa:ce:7d:04:c3:ec:20:1d:8c:
c8:8b:15:35:ca:1d:4a:d1:5f:e7:51:e6:d1:55:41:dc:cb:b7:
c5:30:3c:82:89:e7:eb:cb:3d:d5:77:13:05:79:8f:69:5e:5d:
ae:e9:84:84:83:8b:84:93:0d:40:47:59:fa:fa:6e:2f:fd:29:
d8:4d:e5:1a:f0:69:4d:bd:f2:9f:97:fd:42:10:25:db:64:6a:
5d:c9:20:a0:1c:62:d5:83:bb:0e:8c:50:7c:d1:d9:19:4c:d0:
2e:b0:8d:e2:9a:ae:7b:22:19:6f:0b:b9:95:2d:32:a1:cd:f6:
3e:5f:64:81:88:ca:ef:69:e1:89:9b:6c:35:cb:a6:bb:f1:16:
af:6f:e7:1e:c1:f2:0f:80:35:c5:89:8a:5d:32:d6:33:38:f4:
c4:09:63:95:42:95:f2:64:2c:2b:c6:47:56:ab:5d:04:a6:6b:
f7:f9:77:77:43:ab:f0:bc:bb:c8:48:91:d6:a4:c7:d9:56:a1:
d8:f0:ee:ca:3a:bd:e6:99:58:55:88:fe:f7:a7:4b:d3:f8:aa:
17:f5:1d:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxxv+xSNEWrwwKsVObnxgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNDkxMWU5ZDJiYmVhNjZhNmMyNDAzMTlkZGUzMDdiM2Rl
ZjQ4YzEwHhcNMjUwMjE2MjIwMDM5WhcNMjUwMjE3MjIwMDM5WjAzMTEwLwYDVQQD
Eyg5YWE2MDIxNmM0MjM2YTE0YjdiZDU3ZDIwYTk5MjY4ZGJkNTBkMjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/ROcaUpthNpBU09UH692mc1pkiH
kU3pLgT7dzta2g32lWsL2FZbbr/1mmXJz/zJJK2HpFsWu7W5NWCucEpwTkCGu0z7
Z5d6faqJoe/7oErJDyuteMiTmnhFHjupN2OWvz4417DJDAqxpQ725qNYrumWp7Hk
AZh3XlVeUkbHKp2hpWXxi93Z9XVyjZ1HSCqsdVCMENcsJXmtwp34Wl2KEIKmFOeZ
Xau+37rshbKMaXtnl+HJgCVkVTdK8IOcyI7wnPMV5vtBnG6/JGkr7nOBKDr9FK0p
fg3PDzp+EcE6YnnbEnQuYzy4ITJEecINKFs4WvVe3+S3H/eCTnEPzLTsXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqmAhbEI2oUt71X0gqZJo29UNI4MB8GA1UdIwQY
MBaAFKNJEenSu+pmpsJAMZ3eMHs970jBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzBrUjZkSzc2bWFtd2tBeG5kNHdlejN2U01FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xNDQ4NmEtYTdlNi00MTEzLTkzYjEt
MTVjZGM5YThjMzhmLzEvbzBrUjZkSzc2bWFtd2tBeG5kNHdlejN2U01FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8xNDQ4NmEtYTdlNi00MTEzLTkzYjEtMTVjZGM5YThjMzhm
LzEvbzBrUjZkSzc2bWFtd2tBeG5kNHdlejN2U01FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVTX1RW3
Wwl20J+vhHn3ypjMWBU6EDTc/WeZoYu4KbraiGA3JWySeVwK0XiD+s59BMPsIB2M
yIsVNcodStFf51Hm0VVB3Mu3xTA8gonn68s91XcTBXmPaV5drumEhIOLhJMNQEdZ
+vpuL/0p2E3lGvBpTb3yn5f9QhAl22RqXckgoBxi1YO7DoxQfNHZGUzQLrCN4pqu
eyIZbwu5lS0yoc32Pl9kgYjK72nhiZtsNcumu/EWr2/nHsHyD4A1xYmKXTLWMzj0
xAljlUKV8mQsK8ZHVqtdBKZr9/l3d0Or8Ly7yEiR1qTH2Vah2PDuyjq95plYVYj+
96dL0/iqF/UdHg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:48 2025 by rpki-client