Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
File: 1olx6h0itezaGpdZ8FwmyMVqRow.mft (raw, json)
Hash identifier: Xj+7CjqvvBvRlXue0y2X1xrHyM2Cduo+e8krdN+Y/UE=
Subject key identifier: C5:B2:58:14:9D:A0:CA:86:94:80:D4:98:23:25:83:9B:2D:AD:AE:7D
Authority key identifier: D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C
Certificate issuer: /CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c
Certificate serial: 0195127E48E942816D0F98042DD13AF707D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
Manifest number: 0C46
Signing time: Mon 17 Feb 2025 06:00:20 +0000
Manifest this update: Mon 17 Feb 2025 06:00:20 +0000
Manifest next update: Tue 18 Feb 2025 06:00:20 +0000
Files and hashes: 1: 1olx6h0itezaGpdZ8FwmyMVqRow.crl (hash: IQsAMm6Icqmxqq9wwzYNRgOldNvQrtAPd1LzrFbVjyI=)
2: BN10iJQINkqqQbCXE2ZsJo5PDg0.roa (hash: dLiu8pKhhmUdKMIv3bdjJ619GvxkAvZ9+W0bGvQ4ymQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:48:e9:42:81:6d:0f:98:04:2d:d1:3a:f7:07:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c
Validity
Not Before: Feb 17 06:00:20 2025 GMT
Not After : Feb 18 06:00:20 2025 GMT
Subject: CN=c5b258149da0ca869480d4982325839b2dadae7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ce:62:8e:6e:f5:11:91:45:61:b2:cd:1b:aa:
3c:6f:20:c8:05:b2:4e:87:0e:12:a8:96:ae:55:8b:
26:c2:25:9a:60:23:11:be:44:26:e0:35:da:85:11:
96:41:3c:e5:f3:5c:1a:79:33:21:b7:ed:ad:e6:da:
81:0e:7c:1f:2c:09:d8:47:e3:db:5f:d6:76:07:b5:
60:a6:e1:22:9f:8e:dd:9a:c4:b9:06:64:c0:20:d7:
ad:0c:ed:c9:29:44:5b:58:fd:68:1b:d9:5f:4e:2f:
a9:95:ed:98:b3:63:0b:71:17:c4:8d:bf:35:1f:c8:
93:43:61:5c:e4:5a:83:c9:37:b0:f1:ac:ce:40:c5:
bf:64:2f:fa:00:72:de:c8:19:ff:9c:16:eb:f6:2a:
b9:67:48:17:5b:02:0d:b1:8c:2a:df:80:d9:fa:03:
f5:5b:41:f6:9a:6a:64:d5:7b:10:fc:f2:2a:d9:51:
24:50:fc:7e:ca:7d:e0:a5:e3:c5:e8:b9:bc:7d:50:
5f:69:fc:c9:7f:74:33:52:34:f2:38:f5:5c:92:e4:
2c:fb:19:2e:bc:74:79:6f:64:30:45:1b:c4:21:98:
dd:26:69:1a:80:e8:6b:89:80:80:a5:3a:f2:76:1f:
26:8b:9d:e2:20:15:d9:d9:97:ce:36:d7:3e:65:ff:
3c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B2:58:14:9D:A0:CA:86:94:80:D4:98:23:25:83:9B:2D:AD:AE:7D
X509v3 Authority Key Identifier:
keyid:D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:08:81:49:d3:e0:34:66:16:50:c9:a9:8f:f7:2e:81:80:42:
b5:0f:3e:58:12:84:22:2f:02:5d:3e:9b:23:22:c4:96:77:1b:
44:b3:40:ba:c2:22:66:93:ab:1c:57:44:8a:59:e6:8b:77:dc:
fc:3a:a2:12:9c:a7:52:b0:1a:30:2c:02:43:ae:e8:e6:36:80:
00:cb:f1:6b:c0:ae:ff:07:93:e9:fc:22:fb:fd:46:29:07:44:
6d:81:82:5e:de:9b:17:e3:1f:72:f0:c0:26:1d:cd:d9:d6:7d:
a5:8a:44:35:af:00:8f:6b:56:c8:ac:06:ad:1c:30:dc:eb:d9:
c5:43:d6:c6:2c:bc:8f:61:b4:34:a3:bf:5c:b9:2a:56:27:b1:
db:48:ba:05:49:c7:e7:7f:e9:49:60:51:7a:ec:1f:be:82:e6:
0d:9a:30:46:2e:73:a5:ea:fd:cc:c4:f9:cb:c9:72:7f:c8:51:
1c:14:aa:ed:7d:1e:db:7c:ff:80:30:19:8a:e7:60:5a:fd:18:
36:2c:7d:28:61:98:40:12:85:00:dd:ff:08:40:36:45:a0:d8:
40:7b:3b:44:24:93:65:b7:fe:88:7f:16:7c:09:52:dc:9a:77:
2e:48:0b:03:28:da:4f:b0:fa:62:80:8f:15:3b:de:61:27:b9:
81:0a:9d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:42 2025 by rpki-client