Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
File: od5FbU1AXG9CktY2iGds4VDn8H4.mft (raw, json)
Hash identifier: lpnaPiJXDVlqwt8TmxsfiogvcSBWA0nE1NVh+weWoxc=
Subject key identifier: 77:E8:94:54:52:1E:B9:7A:15:D8:96:79:30:40:8F:CE:B4:F7:A1:F7
Authority key identifier: A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
Certificate issuer: /CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Certificate serial: 019512476D38F3E32650A561D8BA652F9236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
Manifest number: 09C8
Signing time: Mon 17 Feb 2025 05:00:25 +0000
Manifest this update: Mon 17 Feb 2025 05:00:25 +0000
Manifest next update: Tue 18 Feb 2025 05:00:25 +0000
Files and hashes: 1: dqExZg0GTgu9TOznJg-Erf9mkrI.roa (hash: h4iiYtbEAvUkqkzgU+RKRv7Gvi0HY66tI3dhqgvZQ0E=)
2: od5FbU1AXG9CktY2iGds4VDn8H4.crl (hash: MBabxlVRpbMbaXkW5B6oWbN+zDlswQr+iGdbg6V07iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:6d:38:f3:e3:26:50:a5:61:d8:ba:65:2f:92:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Validity
Not Before: Feb 17 05:00:25 2025 GMT
Not After : Feb 18 05:00:25 2025 GMT
Subject: CN=77e89454521eb97a15d8967930408fceb4f7a1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:92:9a:b4:8c:94:7e:e6:35:bd:40:80:ed:55:
85:34:89:a1:bb:60:4a:02:86:58:3d:30:1b:97:9e:
ed:1f:8d:be:63:dc:6f:04:1f:a3:01:da:92:c5:b1:
e3:6f:70:1c:21:66:e9:cc:5c:30:58:d5:41:93:78:
5d:85:16:1e:3c:67:5c:0d:7f:f4:ec:1b:4c:ac:41:
da:26:cc:12:20:ad:f4:5e:4e:98:97:7b:98:92:81:
55:fb:62:ba:63:20:27:37:46:a6:8f:a8:1e:66:e5:
d4:2d:d6:2a:63:32:48:25:8c:a6:69:f6:3c:18:1f:
3e:3f:6e:8b:a0:6e:2c:11:56:74:a0:28:82:96:ed:
6b:7c:33:07:e3:67:03:2d:d7:1b:4a:76:88:06:8b:
0c:ee:70:b3:ea:cb:54:e0:59:47:8f:0e:b8:94:e8:
d3:77:89:13:78:fc:9a:a1:65:94:43:dc:42:d9:f4:
7c:1e:cb:bf:94:c9:5e:88:b9:fb:06:41:63:cb:7e:
b9:44:c3:82:4c:9c:f2:2f:62:d5:01:ec:fa:c6:63:
6e:79:fb:b4:6f:17:85:b7:31:c5:8c:6d:9c:ea:12:
fb:16:26:ab:2a:db:c6:87:c5:be:35:fe:51:95:a0:
ee:f6:64:4c:fc:69:d8:64:c0:1b:e2:9b:32:00:3b:
ec:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E8:94:54:52:1E:B9:7A:15:D8:96:79:30:40:8F:CE:B4:F7:A1:F7
X509v3 Authority Key Identifier:
keyid:A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:3c:71:ed:8c:23:22:e4:ac:b3:41:e5:87:de:60:6a:3d:d8:
1a:fb:72:c0:04:16:15:b0:50:9b:16:69:c4:5c:2c:89:a6:6e:
e8:ab:c4:13:72:5f:fc:f5:e7:c9:ba:ea:e0:7d:60:d9:de:76:
e7:fa:dd:88:c1:13:b6:02:c8:14:00:1b:e3:4a:bb:0f:08:d9:
6c:51:94:53:4c:b4:20:14:0b:b8:e0:f1:88:d9:5a:c7:52:69:
7a:6e:b2:03:ff:28:63:fd:26:ab:79:12:c8:11:97:9e:32:5b:
c3:14:01:97:0b:8c:db:b7:0f:a9:74:84:81:41:be:c5:41:13:
54:a9:fd:ca:85:81:58:da:62:f0:21:59:32:82:1f:db:69:6e:
bd:ad:db:3a:62:68:c3:b9:31:27:a0:50:24:56:88:eb:25:23:
15:11:7a:f0:e6:85:47:29:a7:c5:be:89:a9:eb:36:5d:62:be:
76:bd:c6:7b:83:1f:3c:1a:90:17:c7:8d:76:4c:4b:a9:fd:b8:
2e:d1:49:87:29:f5:44:46:3b:c5:e9:f5:56:08:47:da:6d:ce:
8e:38:b3:d9:25:e5:cf:71:79:40:85:f2:bc:96:f3:ac:9d:9d:
3c:e0:68:ed:2e:06:f8:71:96:8d:75:0c:04:c9:d6:58:79:73:
6a:d6:6b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:01 2025 by rpki-client