Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
File: ODD00TlF8W-bdLEmR-oSzF0nSM8.mft (raw, json)
Hash identifier: D66XWDMqGtN6yl4jsxNUfNiFKVPQk00Bf8zyhWGEcBw=
Subject key identifier: 5B:D5:D3:2C:3E:BE:11:63:5F:A8:0B:AF:86:8B:37:CB:8E:8B:99:31
Authority key identifier: 38:30:F4:D1:39:45:F1:6F:9B:74:B1:26:47:EA:12:CC:5D:27:48:CF
Certificate issuer: /CN=3830f4d13945f16f9b74b12647ea12cc5d2748cf
Certificate serial: 0194C4D0E68E89760E847ECEAD82DA13BC4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
Manifest number: 0C25
Signing time: Sun 02 Feb 2025 04:00:12 +0000
Manifest this update: Sun 02 Feb 2025 04:00:12 +0000
Manifest next update: Mon 03 Feb 2025 04:00:12 +0000
Files and hashes: 1: ODD00TlF8W-bdLEmR-oSzF0nSM8.crl (hash: POjXij/TThaHKa1F/4mPyPu/IVulTy/geMqFarjmfts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d0:e6:8e:89:76:0e:84:7e:ce:ad:82:da:13:bc:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3830f4d13945f16f9b74b12647ea12cc5d2748cf
Validity
Not Before: Feb 2 04:00:12 2025 GMT
Not After : Feb 3 04:00:12 2025 GMT
Subject: CN=5bd5d32c3ebe11635fa80baf868b37cb8e8b9931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4e:4b:f5:63:21:75:7f:e7:3e:5b:ee:13:e8:
a0:92:7f:fb:7b:01:13:79:82:c6:cb:43:17:85:de:
5e:8b:0f:89:2b:c4:2a:56:93:33:31:a1:d6:d7:e1:
96:cb:d3:dc:33:f6:6a:15:a0:e8:bf:66:2c:0c:b0:
ad:7f:e0:f3:86:c9:a1:91:93:8c:b9:53:27:22:82:
b8:98:0e:91:93:b5:c0:cb:76:ef:35:af:fa:7e:e2:
d2:d2:b4:21:45:41:ba:b0:c9:7a:d0:e1:d5:73:93:
9e:9a:49:26:7d:d9:f4:df:32:e9:ac:64:7d:08:12:
56:7f:b4:03:94:92:d3:c9:d3:40:1d:b0:e9:5b:94:
cd:ba:96:23:a2:48:0c:be:69:f0:8b:c4:b6:09:df:
c5:32:a0:04:a3:f4:97:b6:08:42:75:f6:94:18:e6:
8f:cf:32:8b:2a:b6:53:2a:cd:92:82:5a:2a:d6:56:
e4:8b:8a:3c:a0:a4:c3:6b:11:90:70:77:1a:fc:b9:
19:60:e2:26:05:dc:2f:90:9d:5e:26:0b:05:2b:06:
db:37:73:e2:83:9c:0d:33:c3:e1:82:f7:81:27:49:
91:b4:4b:a9:bd:1d:cf:1c:50:48:2b:23:52:78:f5:
e1:ae:26:df:f2:93:90:ba:c2:df:db:96:7c:07:de:
55:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D5:D3:2C:3E:BE:11:63:5F:A8:0B:AF:86:8B:37:CB:8E:8B:99:31
X509v3 Authority Key Identifier:
keyid:38:30:F4:D1:39:45:F1:6F:9B:74:B1:26:47:EA:12:CC:5D:27:48:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:0f:8c:6f:67:21:52:b1:79:a5:7a:d6:96:72:1d:46:1e:bb:
2a:8d:3e:0f:01:8c:2e:c1:28:cd:cf:71:fa:20:32:54:e1:8f:
2e:a3:2f:14:64:f3:d0:90:72:5d:9d:50:8f:36:f0:81:7e:50:
e4:97:73:13:e4:8e:f7:8d:39:aa:f6:06:39:cb:ed:62:bb:83:
77:a3:7d:9e:18:da:4d:a4:d7:12:8f:b7:10:c6:7a:eb:54:98:
f2:7d:79:e5:9b:8d:7f:71:02:42:14:ba:2d:2e:55:a2:2a:92:
44:9f:30:03:fd:19:4a:ca:41:30:1b:17:80:95:70:26:7f:bd:
9b:a0:8e:00:53:45:2f:28:71:da:c0:51:39:88:66:b1:99:12:
41:fd:c4:4e:86:24:33:19:f6:76:79:27:a3:4a:82:7c:68:e0:
c9:ce:56:d4:09:ea:8d:9f:ca:b0:f6:cf:4e:58:01:aa:23:c3:
c4:a4:d6:41:d4:06:d4:0b:81:e4:53:d4:eb:6e:7b:1a:60:6f:
ca:0b:0e:2f:8a:47:69:f3:f5:ea:82:32:8f:0f:ed:56:0d:74:
34:2d:35:dd:b1:ba:ac:50:2d:9a:e1:86:3b:1f:bc:27:9b:0f:
f8:04:16:c9:42:78:f5:6e:cd:56:c8:d5:97:27:6c:0e:b2:b3:
c8:56:bf:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:50:18 2025 by rpki-client