Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
File: oLsXGJY93ZEot2_T2CE6FWXvhW0.mft (raw, json)
Hash identifier: 3aAxfWLpYFR8WpRyEfAN2NERmoe97cI5rAjFT+gvTgw=
Subject key identifier: EA:AE:04:0C:36:67:C7:1E:70:06:85:6F:15:76:D5:9C:34:92:A7:8B
Authority key identifier: A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
Certificate issuer: /CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Certificate serial: 01950FB44C935A20F5B710617F07A0D74A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
Manifest number: 1454
Signing time: Sun 16 Feb 2025 17:00:29 +0000
Manifest this update: Sun 16 Feb 2025 17:00:29 +0000
Manifest next update: Mon 17 Feb 2025 17:00:29 +0000
Files and hashes: 1: 3AKmduEBocJ2JnN0jXYWS-8GbOY.roa (hash: iBJD1wTxS+O8/2QNKHhH8F14y6hfViRbWeFBsKe3/pI=)
2: kIIfJ-bgIB8FEHmlLuoBBuJNtKA.roa (hash: d5x0f5Yxm3xcFQXy2bPoyZU9c7+8Vyq9PQskQziwEEU=)
3: oLsXGJY93ZEot2_T2CE6FWXvhW0.crl (hash: gpCiQ2lwJ7yLnzJN5sve7LScCSxDsb8l8q2DQG+z7V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0f:b4:4c:93:5a:20:f5:b7:10:61:7f:07:a0:d7:4a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Validity
Not Before: Feb 16 17:00:29 2025 GMT
Not After : Feb 17 17:00:29 2025 GMT
Subject: CN=eaae040c3667c71e7006856f1576d59c3492a78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:89:d3:8c:2e:5d:e9:b6:45:4a:0e:76:c3:51:
5b:67:6c:2f:2e:d9:83:f2:c2:a4:c8:7f:06:3b:d6:
ae:6e:41:3c:5f:09:d0:5d:ed:81:c7:c2:cb:22:52:
28:09:62:4a:cb:fc:5b:e9:6a:64:07:90:00:0d:76:
3b:68:3e:f0:09:0b:84:80:59:56:7f:99:46:24:21:
fd:57:c1:98:21:07:12:e3:9b:dc:b1:4d:f0:15:68:
17:6e:15:db:4d:ee:e8:53:b8:e4:6b:7e:96:d7:74:
fd:bb:ec:84:ee:52:2e:4b:d7:50:0e:23:26:34:0e:
9f:45:42:fc:79:57:98:57:84:8f:c0:8b:ee:98:9b:
1c:1b:ca:36:25:f4:9c:e7:e0:3f:68:1f:46:c6:1d:
fd:c2:81:41:91:ef:14:e3:53:29:19:8b:f6:e7:86:
88:de:d0:69:77:92:bb:f6:ff:d5:48:a2:a0:b1:05:
e0:0e:92:a0:63:de:6f:97:6f:29:23:9c:5f:3b:3a:
a8:6c:5c:82:42:1b:48:f2:27:cc:3d:18:6a:38:27:
30:07:d4:61:ec:dc:fa:20:66:b7:4c:a3:d6:c3:13:
8a:48:98:c3:19:f1:d0:81:f7:7b:eb:bc:11:bd:4f:
50:37:6b:3b:9e:be:58:4f:ef:bc:63:17:1c:7c:25:
fd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AE:04:0C:36:67:C7:1E:70:06:85:6F:15:76:D5:9C:34:92:A7:8B
X509v3 Authority Key Identifier:
keyid:A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a6:79:71:08:e5:59:37:6d:43:96:60:49:eb:e9:1e:f0:91:
13:5d:cc:7d:85:8c:18:54:22:72:a4:48:e1:bc:08:db:0a:62:
ee:75:82:dc:1f:5f:a7:05:09:0a:ac:14:b4:05:04:4d:ef:36:
e4:38:bf:b1:33:bd:75:bc:25:1a:2d:04:ae:a6:9b:70:2a:71:
f3:c1:18:df:b0:5a:87:f2:c9:fc:d5:e4:26:ce:5b:f2:5d:5b:
64:0c:0a:05:c8:cf:65:fc:37:4f:6a:0d:fd:e8:f1:78:d6:38:
65:f3:b1:1b:7b:2d:c3:f9:55:ff:aa:20:fa:30:eb:c6:32:61:
ad:89:1e:3f:67:78:55:ee:a2:0b:6b:20:dc:7e:64:07:98:f7:
98:50:4e:44:87:03:34:71:ad:37:7e:7c:2b:28:99:eb:28:65:
f6:54:ca:c2:a0:4e:1c:90:c2:61:16:15:1b:b2:cb:b8:1e:3c:
06:e7:68:ee:9c:33:e4:e6:82:ae:3d:05:75:0c:a0:d6:53:c7:
a5:05:33:7b:fc:11:66:88:8a:86:ff:9a:e0:30:a2:11:8a:73:
81:20:3a:e0:dd:ac:d3:c4:6d:7f:99:ba:7e:c9:4a:bb:e9:02:
66:25:98:cb:fb:06:b6:64:07:33:e4:7b:03:77:12:99:e4:e3:
1d:27:4a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:11 2025 by rpki-client