Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
File: o8cchkWd50u9NaPMv9iuXZy00tg.mft (raw, json)
Hash identifier: 0vi7ZgMNR71wEZmq0wns4VqKMhlrWbGBI9Ng2Hugyig=
Subject key identifier: FC:82:FD:AB:E8:69:0E:7F:A8:5B:33:8B:3B:09:7F:37:81:F3:77:5C
Authority key identifier: A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8
Certificate issuer: /CN=a3c71c86459de74bbd35a3ccbfd8ae5d9cb4d2d8
Certificate serial: 019510901FA3F0CF8CD5AA226E9998B4BC12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
Manifest number: 0D08
Signing time: Sun 16 Feb 2025 21:00:35 +0000
Manifest this update: Sun 16 Feb 2025 21:00:35 +0000
Manifest next update: Mon 17 Feb 2025 21:00:35 +0000
Files and hashes: 1: UK3kp7DVS-fpdp_PyKKZBPAEkaQ.roa (hash: 8KxM7G0u96R3lRI3p6WhEJjK8omSDAMQXe8llr10HQ8=)
2: o8cchkWd50u9NaPMv9iuXZy00tg.crl (hash: 5+OBWDS5+7lVVHOS0PUUjKbujTrTBtznYjfAuq0HVSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:90:1f:a3:f0:cf:8c:d5:aa:22:6e:99:98:b4:bc:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c71c86459de74bbd35a3ccbfd8ae5d9cb4d2d8
Validity
Not Before: Feb 16 21:00:35 2025 GMT
Not After : Feb 17 21:00:35 2025 GMT
Subject: CN=fc82fdabe8690e7fa85b338b3b097f3781f3775c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:81:9b:6e:fd:fd:67:eb:50:f9:f5:0b:c2:
72:4b:4f:35:a8:5b:d2:11:a9:f3:43:6f:8e:80:bd:
da:db:1a:6f:59:67:16:aa:aa:76:88:7a:c2:8d:d7:
f3:08:d9:c7:00:dd:a0:c1:fa:45:b2:1d:a7:5b:8b:
36:eb:78:92:5f:e3:4f:bd:a6:76:48:96:cb:af:24:
c6:a8:3a:b6:c1:a3:94:07:ee:69:d4:99:37:73:8f:
ee:a4:35:33:1a:5b:f3:d3:f3:89:ab:13:7e:fc:1b:
4f:c5:58:ea:d4:6a:23:f6:38:72:9a:0e:c0:88:72:
f0:e4:5d:80:56:44:73:09:9b:b2:7d:9d:59:89:6a:
70:0c:54:25:8b:8e:a4:7d:f5:da:26:8d:0c:b4:b6:
98:90:9a:a0:81:81:c3:93:02:e6:bf:52:a3:bb:69:
b5:ef:c2:5b:cf:c6:cf:ef:65:63:7f:d5:da:39:e3:
70:1e:47:e6:de:67:98:b0:19:5b:b6:5d:75:ee:1e:
80:d5:30:76:80:74:24:60:75:a5:5a:12:3d:15:e2:
d6:fc:5b:2a:5b:04:97:5c:54:a7:b9:6c:2c:18:5b:
08:6c:0c:83:73:8d:f5:1b:b3:63:95:c4:b7:63:3a:
e7:52:36:c4:66:ec:d4:23:99:e0:a9:de:7b:34:0f:
7e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:82:FD:AB:E8:69:0E:7F:A8:5B:33:8B:3B:09:7F:37:81:F3:77:5C
X509v3 Authority Key Identifier:
keyid:A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7c:b3:31:23:85:3e:88:fb:ce:1a:26:ec:c4:2a:7f:2d:ba:
7a:fb:54:60:7c:bf:38:36:17:0d:06:91:23:79:53:03:8c:d9:
30:b1:51:d8:da:69:b9:39:e7:4d:9f:e5:d2:f7:41:8e:fe:65:
61:60:21:d0:d2:b5:e9:37:b9:73:96:a1:3d:e7:6d:7a:63:7a:
a3:d0:6c:dc:55:8e:d6:5c:6b:2a:07:5d:84:83:a0:fe:6b:0b:
fd:d9:7c:91:39:28:08:76:f2:1f:f9:95:29:05:57:4b:c7:09:
71:13:23:4a:a6:a3:08:fc:de:5f:22:63:4c:94:d2:cb:74:01:
b1:a1:4c:2e:4d:63:5d:10:ef:bc:29:e5:d6:3a:2d:9e:44:3f:
ba:5d:37:e7:bd:c0:45:7b:12:66:b6:e5:bc:1a:30:fe:64:1b:
71:19:ad:70:17:01:9a:3b:77:75:e2:18:4a:f1:47:46:78:01:
17:66:c4:cb:65:db:03:92:c5:e9:a9:94:3d:e4:a9:5b:c8:a0:
5f:ec:0d:bf:3b:3f:b6:2d:e5:de:bf:4b:a2:e6:65:53:46:5d:
d3:44:e2:34:c3:0b:f7:79:86:1f:0d:56:5d:45:6b:23:37:a1:
15:ff:b5:ef:4f:4f:fe:5c:6e:ec:ec:fb:c8:8b:4e:76:3a:c4:
0e:c4:56:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:23 2025 by rpki-client