Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
File: O0d6YmB_uUyOI7WgYseNk9-cvWk.mft (raw, json)
Hash identifier: n+tCWRqyi3abhJ3I0qL9Bg8MyN+1hD+/a60MLz9gp+s=
Subject key identifier: EF:C9:AB:B0:BC:65:95:24:BD:19:3B:84:BE:8F:8D:AA:90:7D:4F:0C
Authority key identifier: 3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69
Certificate issuer: /CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69
Certificate serial: 019510FE0539B3C153127ADD4F7D8A03E3E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 23:00:37 +0000
Manifest this update: Sun 16 Feb 2025 23:00:37 +0000
Manifest next update: Mon 17 Feb 2025 23:00:37 +0000
Files and hashes: 1: KAady5nIQ7goGP7Rcsy66F2FCTk.roa (hash: NabV/t+jGm2/Hy6psxEDHdFW8WsqCHu/S3YWHXIah24=)
2: O0d6YmB_uUyOI7WgYseNk9-cvWk.crl (hash: Ex69T35uszpZQXzEQoltC1tS8F0uB8UwQMpctNUj1+w=)
3: r-imVOZ1MKVCPTmznPktWbUEqW8.roa (hash: cRIVP2Lam6u4TX8QNidArFda2a92J/ptBDkcqev/q4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:05:39:b3:c1:53:12:7a:dd:4f:7d:8a:03:e3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69
Validity
Not Before: Feb 16 23:00:37 2025 GMT
Not After : Feb 17 23:00:37 2025 GMT
Subject: CN=efc9abb0bc659524bd193b84be8f8daa907d4f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:22:ee:af:80:2a:6f:53:5c:41:5a:a2:08:34:
ec:e4:13:72:80:81:3c:19:bd:30:e8:3a:f6:29:02:
f3:83:95:41:b3:ce:38:4a:f4:ce:24:5d:28:1d:6d:
80:d9:96:c1:e6:a7:b0:df:d0:72:9a:d8:58:4c:04:
18:04:d5:8b:13:a2:1d:39:09:5a:65:a6:85:f9:b0:
ea:e4:72:6e:3f:15:5e:6d:f6:e1:db:91:01:75:df:
c1:74:ee:2a:11:30:25:0f:0f:55:84:9a:7e:d7:b1:
5f:bf:b4:44:26:4e:e1:62:d9:99:e7:82:41:df:87:
d3:43:23:7a:c3:e1:f5:61:9c:be:01:21:b3:8f:ee:
57:47:e3:c0:eb:ff:92:d1:3b:41:ba:7b:a1:6d:55:
55:4b:10:27:df:c7:f1:ff:e1:f8:7e:d7:b0:99:cc:
47:40:c4:bc:ce:e8:0d:f8:2b:11:92:9f:c7:bf:46:
f3:df:8e:ae:87:db:1d:38:73:66:35:aa:c8:0d:7a:
ed:80:82:fd:ae:e8:7e:0f:b1:bb:b8:24:06:fa:8c:
f5:52:ab:c3:79:5d:2d:6a:eb:ae:22:85:bd:18:f4:
0f:a8:6b:3c:38:33:ee:3b:86:e9:e6:cd:ab:7a:25:
10:aa:3f:b5:68:a4:48:c6:c7:4a:91:68:f6:2f:b9:
de:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C9:AB:B0:BC:65:95:24:BD:19:3B:84:BE:8F:8D:AA:90:7D:4F:0C
X509v3 Authority Key Identifier:
keyid:3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:08:db:2a:bb:ce:26:03:59:e1:cc:c6:56:65:f7:98:34:a4:
65:d3:90:7e:ed:e4:03:d7:3e:eb:b1:7e:e7:3c:1f:38:c8:e7:
06:18:e3:29:59:79:c1:c4:a8:b4:46:2c:ff:a2:b0:52:9d:20:
52:25:06:9b:96:17:69:03:a8:c1:a8:11:86:e6:09:b1:cb:42:
ca:2a:73:3f:a4:32:0c:4a:33:20:a7:e3:d6:c1:b5:f3:f6:53:
8b:e9:4a:30:5a:91:f0:6a:01:8a:6a:d2:7a:0c:e4:4c:43:fe:
dc:3a:9e:c0:4a:a1:99:66:6a:f6:fb:85:b1:45:74:48:0d:22:
5f:85:7e:4a:64:b9:44:28:bc:bb:3f:bb:a6:44:6a:66:07:5f:
6e:e7:ed:bb:09:76:dd:20:ea:a7:1c:9d:9f:e6:4e:82:8c:0d:
e8:5e:ca:f3:7b:24:7e:43:46:19:4e:01:d5:26:cd:5b:44:b6:
5b:2f:90:28:6c:23:f9:2c:a9:8d:74:22:44:81:9c:3f:4f:c2:
f7:9f:f4:fe:d9:c6:7a:74:ae:7d:33:45:65:35:43:e3:b5:89:
aa:59:3e:12:ce:14:22:47:60:72:15:17:66:bf:20:d5:1a:e0:
c3:01:bc:12:b3:2c:8f:3c:6f:64:9f:cc:19:0f:57:2d:17:b6:
15:b4:1a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:50 2025 by rpki-client