Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
File: rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft (raw, json)
Hash identifier: AEnE/OTpChGZDnfLnFk2TFiu+3+X/HBKVb+IG+HspOo=
Subject key identifier: C8:06:9E:A1:8B:2D:4E:8D:D5:C2:B6:20:45:64:C7:4F:FC:87:A5:4E
Authority key identifier: AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C
Certificate issuer: /CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
Certificate serial: 0194C463B3A5845B8E1ED56AB6D755C34D62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
Manifest number: 51
Signing time: Sun 02 Feb 2025 02:00:55 +0000
Manifest this update: Sun 02 Feb 2025 02:00:55 +0000
Manifest next update: Mon 03 Feb 2025 02:00:55 +0000
Files and hashes: 1: 2-l-7yT7_u7_OYzRYJFyaa75TPk.roa (hash: bYwJQxGV83lRBUqEUc8QOqElQ+XjkvUc1MyoxR+0EMk=)
2: rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl (hash: QBnvllcH2kMzjTrRM1jmndJWZlOfV3Jb8OMEI6VXfIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:b3:a5:84:5b:8e:1e:d5:6a:b6:d7:55:c3:4d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
Validity
Not Before: Feb 2 02:00:55 2025 GMT
Not After : Feb 3 02:00:55 2025 GMT
Subject: CN=c8069ea18b2d4e8dd5c2b6204564c74ffc87a54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:c0:83:80:a0:de:dc:dc:65:c9:58:e6:9b:
3f:ab:ff:10:f8:8e:9f:99:6d:42:5b:b6:07:b4:ff:
8a:7f:64:41:14:b1:d4:b7:03:f2:3b:b6:0c:58:9f:
df:1c:d6:0e:b2:4f:d7:57:e1:b8:f3:97:ca:37:54:
22:cc:be:e8:4d:ae:7b:12:05:58:d8:e5:c4:70:50:
aa:1b:7b:3a:4c:89:d6:6a:fd:06:6c:61:de:16:6f:
6b:79:c3:d0:ff:3b:41:6b:87:53:8c:3f:62:9e:bc:
dc:2f:5e:d2:32:0c:39:48:b6:98:25:d6:55:c2:be:
a1:b6:0e:11:66:29:fa:53:c8:9e:08:93:3e:3e:7f:
16:0d:85:f2:a6:36:bb:cf:96:13:9c:80:9d:74:90:
7d:d7:80:0b:78:09:94:9e:5c:54:f4:a3:d8:5f:ab:
08:07:8e:18:73:8b:0a:e4:9a:88:b1:6f:f4:0f:9a:
cc:a2:fb:ad:40:f7:8f:80:f3:56:b8:3d:33:67:8a:
4c:5c:17:c3:15:46:23:b7:c0:49:7b:48:75:68:0c:
51:96:5e:eb:0c:9e:f5:79:41:36:1b:1d:2f:80:ac:
83:bc:c0:5a:1f:40:24:19:98:b6:0a:b5:a2:b9:ef:
4d:66:5a:37:77:43:04:4b:01:61:53:33:eb:5a:d6:
b4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:06:9E:A1:8B:2D:4E:8D:D5:C2:B6:20:45:64:C7:4F:FC:87:A5:4E
X509v3 Authority Key Identifier:
keyid:AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a4:43:7e:af:70:d9:8d:b6:3b:8b:1b:a5:62:6e:9e:60:3e:
99:6c:2c:a1:53:fc:ef:e7:90:64:fc:96:f9:be:7d:31:b0:21:
e7:df:35:10:18:93:cb:59:b7:f8:07:55:5d:51:9d:48:3a:6b:
00:4c:9a:e3:4a:ae:aa:3e:2d:95:24:98:50:fa:69:48:3d:e1:
b6:60:92:46:b9:e1:65:f0:86:63:48:db:5a:66:c6:79:0a:00:
e8:79:f2:c9:62:76:29:da:b3:9c:85:d5:54:de:74:b0:e2:8d:
a7:4b:a1:78:f1:a1:59:88:2f:3e:a5:81:13:0f:ea:47:52:1a:
d1:e8:e6:17:2e:f0:45:e1:7e:33:62:52:f7:1f:83:67:38:92:
3f:0a:91:a4:aa:0e:df:64:10:e5:aa:09:16:2f:61:45:ad:49:
e3:e9:f5:28:f9:8f:c6:30:45:ef:3a:52:79:fd:b9:16:94:04:
04:2d:be:81:27:31:1a:e8:8f:25:c2:5a:1a:e7:2c:e6:21:45:
7e:18:55:b3:64:06:6f:0a:77:f5:f7:55:2d:60:89:ad:5a:99:
c0:d4:05:7c:16:ce:a0:00:a0:91:91:bc:31:92:75:13:0e:a7:
b5:ae:d7:b7:b0:75:c5:33:fe:22:e4:43:55:be:65:fd:c1:22:
6a:0e:08:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:48:23 2025 by rpki-client