Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
File: ODB5K147usnzcNTK56uipc26ego.mft (raw, json)
Hash identifier: OwOe5UewxRab/FliCSxMqhvFULUxhF6mS7NkoOBAIMw=
Subject key identifier: F4:04:64:42:C5:BE:0F:04:25:7D:42:2E:82:F1:AB:C1:9D:1C:E1:0C
Authority key identifier: 38:30:79:2B:5E:3B:BA:C9:F3:70:D4:CA:E7:AB:A2:A5:CD:BA:7A:0A
Certificate issuer: /CN=3830792b5e3bbac9f370d4cae7aba2a5cdba7a0a
Certificate serial: 0194C387545BC86FB7455CBE510EDE230549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
Manifest number: 1022
Signing time: Sat 01 Feb 2025 22:00:13 +0000
Manifest this update: Sat 01 Feb 2025 22:00:13 +0000
Manifest next update: Sun 02 Feb 2025 22:00:13 +0000
Files and hashes: 1: 1-2PnzzFVpt1dGXWeYqhIzX1nVe0.roa (hash: hI/InHmZs9EbHw0E5EzTrrWOPonm9OzaUn8fi0xcF4M=)
2: ODB5K147usnzcNTK56uipc26ego.crl (hash: YOcWeV2xGfHArqv/LxnzusvWFQgNMVcFOUtuRASNiys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:54:5b:c8:6f:b7:45:5c:be:51:0e:de:23:05:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3830792b5e3bbac9f370d4cae7aba2a5cdba7a0a
Validity
Not Before: Feb 1 22:00:13 2025 GMT
Not After : Feb 2 22:00:13 2025 GMT
Subject: CN=f4046442c5be0f04257d422e82f1abc19d1ce10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:17:f9:e2:14:e4:91:cd:ef:34:24:3e:c8:10:
51:42:e2:9d:74:af:f2:51:77:0c:74:2a:fb:27:f1:
24:28:fb:a0:3f:60:ec:79:4e:e1:78:86:70:a9:29:
ae:35:8e:ae:1c:90:8f:12:75:55:69:e0:60:38:51:
00:f5:df:b7:fc:3c:d4:f6:d0:24:e7:4c:10:c2:87:
1f:99:4a:81:94:2a:c9:6d:54:c1:2a:1f:c8:fa:bd:
35:32:85:a4:32:74:9a:6b:50:13:b6:81:02:93:e1:
c4:c6:ae:30:b7:04:b3:f5:5d:36:45:f1:dd:94:aa:
76:6e:f5:ae:6a:41:c7:c8:f4:0c:7e:7e:79:ba:e1:
ec:1e:96:b0:71:40:6e:0d:5a:b3:e1:c1:db:79:c7:
17:7e:93:a5:ef:79:9a:a0:e7:e7:53:f0:60:1c:00:
ba:f2:b1:3e:69:fa:d7:cb:28:34:f0:d1:f2:1a:65:
74:fc:27:ab:0f:ef:ff:ec:5f:c9:df:14:13:89:82:
cd:e2:06:56:83:e5:29:38:b6:bd:6d:70:8e:cc:41:
5a:50:9b:76:a1:b1:70:0a:17:d3:fc:ea:68:30:25:
52:8a:06:bf:9b:f1:3b:3c:48:84:9f:05:b9:f9:31:
47:3c:3b:af:7d:3e:f1:b0:03:8c:eb:ce:82:2d:55:
e7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:04:64:42:C5:BE:0F:04:25:7D:42:2E:82:F1:AB:C1:9D:1C:E1:0C
X509v3 Authority Key Identifier:
keyid:38:30:79:2B:5E:3B:BA:C9:F3:70:D4:CA:E7:AB:A2:A5:CD:BA:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:1f:d7:6c:44:ab:8b:a5:19:d4:b8:13:33:3a:cf:4c:fa:d6:
f0:3b:8d:8e:46:88:8b:fe:69:c2:56:15:75:f2:d4:3c:26:a4:
a3:30:91:02:ea:43:1a:6f:12:fe:2a:c9:54:0e:17:ca:96:ee:
23:bd:e5:57:5e:8f:be:8d:09:d2:7a:43:fd:24:27:17:a2:2d:
4d:7f:c4:2d:75:19:54:d0:94:27:9c:62:36:dd:75:fe:18:85:
31:31:58:57:31:4c:ba:8a:7d:9b:d0:1b:ef:7c:ce:1e:de:7a:
71:72:2a:19:9b:e3:3d:e9:8d:84:12:c7:78:4e:9b:59:64:b5:
1c:58:02:a2:29:6f:68:5a:37:1d:42:21:b7:8c:63:ba:b2:74:
00:9c:64:82:e2:b0:94:ff:6e:ae:30:22:14:66:af:bc:05:b6:
eb:46:2f:8e:e9:c5:49:21:1d:48:fc:72:4c:01:4e:92:ea:cb:
2f:73:99:98:be:a1:73:fc:75:93:82:8b:3e:59:14:6d:aa:5a:
92:cf:42:4a:20:20:af:6f:24:d4:46:4d:be:36:f4:10:eb:5f:
c7:38:90:77:89:0d:1e:69:d0:3a:b2:82:9e:73:43:bc:d5:60:
86:73:aa:22:a0:6a:c7:2c:0f:36:1e:cd:6a:03:45:6a:3f:6b:
96:f5:60:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:48:26 2025 by rpki-client