Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
File: o082XngGS1jETUjPs5KR0_sdnhA.mft (raw, json)
Hash identifier: UM9vRB2bS7kz6HuVBU6UjC0nYh5cYqMhAiz6lQNN++Y=
Subject key identifier: DE:BA:9C:05:9B:A2:11:DF:91:4D:A7:93:09:BD:1C:68:4C:29:C9:25
Authority key identifier: A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10
Certificate issuer: /CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
Certificate serial: 019510FE28804F515FE06221CBBE7862EBF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
Manifest number: 1398
Signing time: Sun 16 Feb 2025 23:00:46 +0000
Manifest this update: Sun 16 Feb 2025 23:00:46 +0000
Manifest next update: Mon 17 Feb 2025 23:00:46 +0000
Files and hashes: 1: 8M6EvOOueKa7PM6SUMWysNV1P1E.roa (hash: tXy3k1V6q4E+Xjy/ypSFyuA9ZzVHmCAzqLsaHasRW9o=)
2: o082XngGS1jETUjPs5KR0_sdnhA.crl (hash: Rli6ZVxu2EreLbkQEn0NeoRRv47CmmSQaFmV4BM1OfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:28:80:4f:51:5f:e0:62:21:cb:be:78:62:eb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
Validity
Not Before: Feb 16 23:00:46 2025 GMT
Not After : Feb 17 23:00:46 2025 GMT
Subject: CN=deba9c059ba211df914da79309bd1c684c29c925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ee:0e:90:f5:97:61:56:25:15:f9:ef:cf:c3:
a5:eb:b6:83:81:8c:c2:05:80:6c:4f:54:d4:e1:17:
74:60:62:c9:6e:ea:7c:72:cc:8c:35:8a:a9:ea:31:
b7:6e:86:13:6c:8e:30:76:f6:2f:d3:6b:21:46:2c:
53:6b:27:37:52:3a:1e:e9:ee:e6:61:e6:b1:fa:33:
42:a7:00:11:45:6d:d6:03:f1:ca:7c:ba:04:ca:d6:
35:08:28:0d:fa:40:24:7f:08:dd:83:ba:24:d3:32:
95:32:27:ab:91:17:d4:19:59:68:eb:f3:71:39:12:
b6:b1:05:9c:6b:42:5a:e3:88:91:7f:28:1f:e4:38:
e1:42:07:14:e5:6e:7b:01:e4:77:0c:57:87:13:23:
86:01:43:34:d6:11:88:21:fb:d3:75:92:b6:03:9e:
1a:03:97:dd:4d:fa:47:46:b5:09:11:4a:a0:a3:48:
13:2d:e9:85:47:81:be:86:22:dd:0b:35:58:e9:dd:
e2:0d:4a:4a:28:90:0e:4c:45:d7:bd:57:45:42:05:
e0:4b:20:a5:b1:80:2d:d0:09:b1:d0:7a:f0:59:1c:
b4:e7:d9:e0:98:b1:a7:91:15:f1:50:95:f8:ca:be:
25:aa:19:1d:a4:0b:34:3f:51:17:1a:38:ab:fd:5b:
85:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BA:9C:05:9B:A2:11:DF:91:4D:A7:93:09:BD:1C:68:4C:29:C9:25
X509v3 Authority Key Identifier:
keyid:A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:62:e8:a0:a4:ce:f1:7b:04:db:c6:cc:77:05:98:48:e0:34:
75:8b:d4:09:a8:3a:eb:40:16:34:ca:93:53:ea:0c:ae:15:04:
80:99:45:c8:ef:7c:9e:41:04:0b:a2:57:20:7b:36:23:a5:fc:
74:e6:c4:78:1f:39:5b:c1:c5:37:0a:8b:b2:f9:e3:be:be:d9:
46:9c:d8:09:76:af:b7:e3:66:35:a5:b5:d0:ee:e7:ac:30:5f:
0a:6c:c5:05:41:0e:4d:32:94:73:68:08:87:b8:1f:04:2b:88:
5a:a6:4a:6c:fd:9b:44:82:25:b1:74:93:a9:75:80:85:f5:6f:
10:73:5a:47:49:9f:e3:2c:77:0c:e4:6a:88:47:bf:74:bb:f8:
15:4f:7e:55:1a:bf:86:b0:a1:76:eb:90:69:57:b1:71:ff:ae:
1e:97:ea:d8:4e:db:7d:86:15:84:d5:ac:2e:85:6f:f5:b1:78:
5b:73:0a:8c:8f:cc:61:1d:8c:a1:a1:23:41:a6:08:13:3b:f9:
a6:3a:04:62:ac:b1:72:ec:17:d2:87:c8:79:5e:28:c2:4e:90:
55:14:69:06:8c:ca:ac:df:f7:83:1d:81:2b:b8:de:2c:47:18:
15:97:54:97:30:e6:3a:ad:66:1d:40:0c:97:79:bd:cc:f3:12:
f7:49:ef:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:32 2025 by rpki-client