Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
File: OIeaeKWKSFzNiXDwQy2489dxcls.mft (raw, json)
Hash identifier: 3QEOfyxKfo9rfB0G0uYr/3t7Bv0bTWJQyY85BGO4NzY=
Subject key identifier: E4:18:00:E1:92:6D:CB:BC:4F:9D:51:50:6A:C8:8B:71:CA:CE:AF:79
Authority key identifier: 38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
Certificate issuer: /CN=38879a78a58a485ccd8970f0432db8f3d771725b
Certificate serial: 019511350B18B6B0B3753848F5A6719B7120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 00:00:43 +0000
Manifest this update: Mon 17 Feb 2025 00:00:43 +0000
Manifest next update: Tue 18 Feb 2025 00:00:43 +0000
Files and hashes: 1: OIeaeKWKSFzNiXDwQy2489dxcls.crl (hash: 7s2wK6NfdJ6cYGke5oAAqo/mGMqbL1dT2niJSTLfVh4=)
2: aJF-_eUqR8Yma02F31ybPienJuY.roa (hash: duGwNDtPKrkB5Se3luyctTXBg25/A0K/ZPMK4FyGebo=)
3: xj83lBqnCiYenkchlr_-eEoB-30.roa (hash: rDaj6xDIGI3i5anidMQG7nyOyM3UPZwMFnNZdzH+C5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:0b:18:b6:b0:b3:75:38:48:f5:a6:71:9b:71:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38879a78a58a485ccd8970f0432db8f3d771725b
Validity
Not Before: Feb 17 00:00:43 2025 GMT
Not After : Feb 18 00:00:43 2025 GMT
Subject: CN=e41800e1926dcbbc4f9d51506ac88b71caceaf79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:66:c6:ed:19:dd:0d:67:63:ba:68:57:37:b3:
09:f8:f4:63:e4:db:ba:97:d1:6b:83:47:1e:c5:0e:
a0:4b:6c:8d:3d:27:7b:8b:31:e2:35:4a:af:39:c2:
f7:16:29:0e:99:bd:f5:f2:44:f9:72:1b:1e:3c:b7:
1b:41:8b:29:ef:7a:36:8a:fb:b0:82:c1:e7:da:4c:
fe:24:a4:31:fd:14:a3:45:2b:a3:93:84:c2:bd:c1:
02:90:62:82:1d:5c:8e:da:d8:27:64:8e:64:a7:5b:
ee:d8:0b:86:32:c9:b4:b4:35:37:30:47:dd:a3:8f:
87:3c:25:6a:cc:40:25:49:be:80:8e:1d:91:c8:02:
47:1f:cb:df:69:17:5e:b5:6c:86:6c:03:11:96:bd:
84:a7:96:c2:fa:ca:89:d6:c4:ca:48:a6:03:d3:ae:
58:88:ea:e9:18:2b:51:83:7a:77:47:93:43:24:e2:
e0:1a:f8:e1:95:fb:b1:c9:0b:e6:c5:f6:c3:e9:f1:
d6:c7:81:67:61:11:27:5e:69:ab:00:83:cf:f4:1c:
c1:e6:90:58:68:dd:59:12:ca:99:a4:40:51:6c:30:
97:f4:81:89:f0:58:41:64:64:2c:27:46:ea:d8:1e:
6c:5f:26:a1:37:89:85:d4:28:7e:08:4c:00:fa:5d:
01:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:18:00:E1:92:6D:CB:BC:4F:9D:51:50:6A:C8:8B:71:CA:CE:AF:79
X509v3 Authority Key Identifier:
keyid:38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e0:a1:47:66:20:9e:f3:70:00:83:a9:96:9a:4d:af:ab:e4:
b3:54:5f:1e:f9:43:d7:f5:68:45:9d:ac:e5:41:d9:eb:da:15:
20:94:77:e1:44:27:6f:4f:7d:e5:65:6f:75:7e:6d:ef:ee:70:
92:21:66:19:08:9b:27:66:a2:ea:a7:0d:0a:d5:21:1a:39:b9:
d3:94:fc:d1:31:a6:4b:cc:17:12:04:23:25:df:35:aa:11:92:
fa:1d:28:64:70:a1:22:5e:e3:8b:97:09:a1:85:1e:de:5e:f8:
f3:c1:9c:3b:6c:00:f9:22:10:21:2d:eb:59:20:9c:32:41:bf:
b2:9a:38:7d:11:8c:5f:c7:37:3c:4a:58:3b:6c:32:8e:73:9a:
7a:6a:e6:e0:9e:32:43:e9:3a:54:71:89:88:d9:b0:d5:8f:ac:
a4:91:76:41:7a:de:87:85:f0:92:15:a9:61:76:ba:4a:94:25:
9b:9d:04:14:80:71:59:d5:89:a2:a4:b8:c5:b2:8f:ae:9f:c8:
b7:a8:63:ab:d7:42:34:fa:23:d4:1a:55:62:ae:80:ce:42:17:
7a:a7:5b:f0:41:7f:a7:48:0b:90:ec:37:27:cd:3a:ba:a0:2b:
b1:a2:49:be:8f:e5:1e:2a:b2:f4:20:e4:8b:fb:6f:55:9a:23:
66:ed:80:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:55 2025 by rpki-client