Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
File: oktI7cejJdfxrg8lfA4oNRcbya4.mft (raw, json)
Hash identifier: K1kmxOYz+dtH+X6wYLtLvRYgl+qpVp6DWAw1Iyj4ZG0=
Subject key identifier: 57:E2:EE:F7:DE:F9:8B:30:AC:F9:18:37:B2:ED:62:45:78:DD:F1:94
Authority key identifier: A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
Certificate issuer: /CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Certificate serial: 01951247A438978133A586EDDDA12A211832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
Manifest number: 145F
Signing time: Mon 17 Feb 2025 05:00:39 +0000
Manifest this update: Mon 17 Feb 2025 05:00:39 +0000
Manifest next update: Tue 18 Feb 2025 05:00:39 +0000
Files and hashes: 1: B0JGrIFbhcfZ9k0gLZbKOC7BRts.roa (hash: uan7Xlr3tx5QNJHwIPILAsu/3eaM2Ksrcs3oBa0JKWg=)
2: B6qJHXpeC3IEJy34_URs46RdWiA.roa (hash: toHD5hhCltD6s8AbgpGot0TJcoWUl/7kkl/+KkMGZ/I=)
3: X5BI_4m66OA1gTOSPBNCsDRd-Pw.roa (hash: 3oZT1fDyGLqNouLkyRSol/W9I5a1RPKZknAigOCTTYM=)
4: oktI7cejJdfxrg8lfA4oNRcbya4.crl (hash: g6E4QrsmFGkqe+ek3joAbz7XF0DCnwdkF1UEaQSKb+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:a4:38:97:81:33:a5:86:ed:dd:a1:2a:21:18:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Validity
Not Before: Feb 17 05:00:39 2025 GMT
Not After : Feb 18 05:00:39 2025 GMT
Subject: CN=57e2eef7def98b30acf91837b2ed624578ddf194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9d:51:19:99:e0:e5:03:09:57:8f:13:2e:43:
d9:cf:2e:71:dd:a8:e0:fb:0d:d4:24:e6:09:ab:50:
fa:84:55:46:19:dd:87:10:1d:e3:1a:85:60:3d:2e:
f2:8d:58:39:97:50:c0:62:dc:1a:18:45:33:5b:76:
28:3d:dc:ae:24:ef:2d:45:8d:3c:d2:d4:6e:72:98:
b2:84:58:f2:7c:ea:f4:cd:12:00:0f:ce:df:00:5e:
96:1f:17:fe:fb:d7:65:69:da:20:fa:44:eb:8c:d4:
67:6a:7f:ea:87:a8:72:f8:a0:e6:ca:97:79:18:36:
b5:f1:d2:55:80:ea:4a:b5:29:04:11:3f:f5:64:aa:
08:3b:10:93:ac:4d:13:ae:5b:e1:63:9e:70:3a:9f:
c2:c2:0c:6e:d9:8f:20:1b:57:9c:7e:7d:29:74:46:
89:09:08:81:a7:1d:e7:f7:80:75:a9:0b:5f:42:a1:
06:59:08:40:61:d0:1a:be:31:17:e7:bc:bb:db:94:
11:e7:0b:5a:aa:4f:18:f7:9a:b5:18:a6:36:4d:b0:
23:2b:5f:ac:85:92:0e:40:4f:92:a4:a5:83:14:fd:
05:d8:fe:c0:15:15:18:a8:d8:70:01:b6:06:ce:c5:
fa:1e:c9:e7:20:89:ed:cb:de:28:16:4a:4b:77:1d:
3a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E2:EE:F7:DE:F9:8B:30:AC:F9:18:37:B2:ED:62:45:78:DD:F1:94
X509v3 Authority Key Identifier:
keyid:A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:8e:f3:8e:99:5e:2f:6f:9c:70:2f:c7:7e:52:b8:9e:3c:fd:
af:b6:c1:47:27:c1:47:b1:51:65:1a:c8:7b:3a:51:3a:57:3b:
72:71:c6:fb:bc:86:66:5e:2b:b1:0b:ff:7e:4f:65:1d:c6:42:
a5:98:eb:13:53:c9:49:21:73:9a:09:78:ac:c1:6c:5a:9c:bd:
3c:eb:cd:4e:c7:8a:ce:36:f7:57:03:41:ec:53:6a:0f:3a:d9:
9b:f7:77:cf:a1:e5:ca:a3:16:05:29:eb:f3:08:7c:6c:bc:39:
00:a6:9b:ab:e1:50:38:10:3f:fc:c2:7c:10:9b:55:7c:1b:fa:
b4:6e:2e:4a:46:ee:85:5f:12:03:c2:67:d0:c1:e9:7d:a4:3d:
1d:e9:c1:e0:c2:19:8d:c2:ab:21:38:77:54:b2:52:7d:a9:5f:
98:20:aa:e1:72:26:6b:9a:39:fe:6c:f2:97:a3:9c:38:ae:88:
fa:44:c5:a8:ad:e9:2e:d9:45:ec:21:26:5a:bc:30:42:c3:38:
cf:b7:9a:ee:a6:97:37:95:ee:d3:e2:df:ac:ac:f1:ee:bd:9d:
ff:bb:66:bc:08:8e:9b:4f:30:53:c0:d6:a1:bf:4f:7e:93:bb:
c0:ac:c6:75:af:d0:64:38:22:2c:89:ef:28:47:a4:10:e6:56:
c4:88:64:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:24 2025 by rpki-client