Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
File: O-LwFktmp2eVhgtOo1hvrVY7rEc.mft (raw, json)
Hash identifier: 4ZrbU51dLUJKZw/D01Wq+jCNSj++sz4M9N01ZIMnA9c=
Subject key identifier: 70:46:92:2F:E1:42:A7:13:47:84:9C:D9:4B:EC:14:A7:DB:71:F3:45
Authority key identifier: 3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
Certificate issuer: /CN=3be2f0164b66a76795860b4ea3586fad563bac47
Certificate serial: 01951021E9A424E10BEA9A0BF32173E4150F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
Manifest number: 145D
Signing time: Sun 16 Feb 2025 19:00:12 +0000
Manifest this update: Sun 16 Feb 2025 19:00:12 +0000
Manifest next update: Mon 17 Feb 2025 19:00:12 +0000
Files and hashes: 1: O-LwFktmp2eVhgtOo1hvrVY7rEc.crl (hash: r53xFbVt3tdYmp0u58w1p+UZBeDr2jzxGGb90Pkx0Zc=)
2: bnVoAcKQpBUpBdJ_G4E6sEiT0wk.roa (hash: D5MR6IRxVzBiemlQt2yPaFHtcO6ch7oL0gJFMCA2LTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:21:e9:a4:24:e1:0b:ea:9a:0b:f3:21:73:e4:15:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2f0164b66a76795860b4ea3586fad563bac47
Validity
Not Before: Feb 16 19:00:12 2025 GMT
Not After : Feb 17 19:00:12 2025 GMT
Subject: CN=7046922fe142a71347849cd94bec14a7db71f345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:19:34:75:c8:2f:db:61:34:c5:95:d3:ad:cc:
2b:5d:61:05:0f:e8:1a:91:b1:b9:ef:3b:8c:88:8d:
cd:fd:4c:e5:52:ab:98:58:1c:8b:83:84:37:2f:18:
e9:92:6e:69:58:c4:85:a2:21:82:4e:b9:70:3d:1b:
c2:4c:f1:04:dd:b4:96:eb:97:bd:df:fa:28:3e:36:
1d:65:d9:1a:ab:7a:bb:6d:fb:e7:41:8b:6f:d3:de:
ca:aa:cb:13:74:f7:99:77:a3:37:77:dc:9f:f7:7f:
e4:93:52:76:63:4d:07:73:9c:1b:bd:04:a2:97:94:
5f:93:f2:2a:d7:a6:4d:fa:87:b2:b9:73:b3:cb:a1:
78:e1:a9:25:5b:4c:6e:34:36:23:bb:de:49:12:62:
14:85:6a:a8:4e:4f:bc:04:be:86:54:fa:a7:b8:a6:
c2:23:3c:67:ee:26:9b:8d:bb:21:13:f5:ab:ae:58:
22:7d:93:fb:d4:d5:6d:4e:a3:83:77:b8:9b:e6:72:
71:86:97:76:a6:1d:e8:7d:df:69:49:aa:3e:05:f3:
db:2a:40:bc:56:87:ec:83:07:ae:89:96:e5:49:3d:
95:0c:07:af:0c:85:4c:d6:9c:5f:34:ee:1f:f5:ce:
e1:8d:e9:ac:85:af:36:58:e0:34:64:15:72:94:d2:
c3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:46:92:2F:E1:42:A7:13:47:84:9C:D9:4B:EC:14:A7:DB:71:F3:45
X509v3 Authority Key Identifier:
keyid:3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ba:3e:70:1f:fa:0a:a2:3f:c2:5f:4c:95:e7:18:b9:5b:aa:
82:e4:5e:d8:c7:95:5b:3c:c1:18:4c:3c:80:b0:fe:dc:df:ff:
1e:a5:af:58:18:5a:4c:44:7d:08:e0:42:c7:21:8c:06:1b:be:
f3:16:f1:83:c0:a4:3b:96:59:ac:f5:b1:5f:32:d7:ce:fd:e6:
61:f6:f0:13:af:9d:3c:2c:2d:86:02:4e:eb:e2:ed:fe:f6:70:
88:84:34:eb:4c:d4:4b:ed:79:90:86:ff:71:18:e6:35:a1:fb:
ac:c6:25:14:1c:63:d5:41:a0:2b:45:68:0f:02:01:e8:35:57:
7b:19:1f:00:1f:7c:59:28:96:a7:67:c0:7c:5e:7c:25:13:64:
77:d8:ac:a7:f2:47:53:5b:6d:89:12:11:27:3b:e3:6b:6c:f3:
91:61:97:2c:e2:ca:5d:c7:19:f3:fb:1b:34:fe:d6:b1:07:e9:
26:9f:f1:7f:84:43:1d:32:44:86:de:09:13:0d:71:fa:49:ae:
18:8b:da:e4:ed:4c:f9:07:3c:80:43:ff:a2:56:fc:42:a2:a3:
b8:50:be:23:31:4f:cb:77:f2:cf:f2:0e:23:4d:96:d0:eb:63:
c0:63:ae:97:25:4b:2f:c3:6a:8b:a8:fd:46:b9:02:31:09:3f:
a4:2f:09:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:00 2025 by rpki-client