Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
File: ova8jxY69JwD2a1p5xa0LFuW7nk.mft (raw, json)
Hash identifier: t4df8MYAKqIzf+lWoHQvksqIm/Vh2qGtpa+Z16FPQEI=
Subject key identifier: 30:0B:DB:88:56:F6:CE:0C:F6:1F:E9:CB:22:E8:27:E3:B8:36:F7:AA
Authority key identifier: A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
Certificate issuer: /CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Certificate serial: 0195113510695D6E63C09513CDBD72E687F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
Manifest number: 104D
Signing time: Mon 17 Feb 2025 00:00:45 +0000
Manifest this update: Mon 17 Feb 2025 00:00:45 +0000
Manifest next update: Tue 18 Feb 2025 00:00:45 +0000
Files and hashes: 1: 7Bmeidkfn6YfbmewKgjKoXuxpPk.roa (hash: WWQfoyMgy0p6lbikPKbuJ/C2nkuTZ1Iwu382Tvm165I=)
2: ivvK2rH3Da0XFb0CtPI6-c8j9iw.roa (hash: y+fDNhHN305IuCvhhyl0+Ku7rbokWctafP7Dlneuvb8=)
3: ova8jxY69JwD2a1p5xa0LFuW7nk.crl (hash: afEQoATzL/Z/1sPGOWsk7z2TuwSmPoEiqF3k80wn8k0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:10:69:5d:6e:63:c0:95:13:cd:bd:72:e6:87:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Validity
Not Before: Feb 17 00:00:45 2025 GMT
Not After : Feb 18 00:00:45 2025 GMT
Subject: CN=300bdb8856f6ce0cf61fe9cb22e827e3b836f7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:58:09:53:57:6a:de:89:ab:f2:01:fe:5a:79:
08:3f:fc:18:b8:59:c9:aa:8e:e1:a2:e3:6e:7a:a7:
4c:37:f8:34:03:37:b0:38:41:0b:7e:f0:03:27:18:
8a:d2:5c:48:47:31:4d:74:9d:6b:ff:e8:0e:32:74:
4f:06:8e:ab:01:66:98:fe:48:fd:95:8f:f4:d8:eb:
f2:8b:f8:a8:4c:07:1d:ed:f2:c0:ee:17:e4:24:2b:
46:9e:c5:2f:c4:3e:e4:56:5f:35:76:7b:6c:6d:6a:
45:d6:32:7c:64:e0:e8:05:9d:c2:ee:0f:8d:a0:28:
e7:62:7b:2f:01:0f:ad:84:e5:00:24:a1:21:97:bf:
ad:b1:e9:db:c8:1c:f8:8d:e4:51:cd:cd:0b:9c:a9:
57:21:86:65:17:89:40:f4:26:cc:85:be:26:2f:04:
da:ec:7e:7b:19:e2:62:86:b4:0f:79:c0:9f:75:e1:
8b:90:55:78:77:84:e0:91:ab:dd:ac:39:dc:d8:c7:
36:0e:fe:17:c7:61:c8:27:83:74:89:a8:b6:e8:ba:
9c:b2:f8:7d:c0:1b:ad:69:ed:29:cb:e1:38:f5:95:
dd:63:f4:7d:fb:79:0b:d3:65:80:c9:02:6e:ca:84:
7d:74:49:e3:ea:22:45:23:be:d0:f0:1d:8d:c9:0c:
c2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0B:DB:88:56:F6:CE:0C:F6:1F:E9:CB:22:E8:27:E3:B8:36:F7:AA
X509v3 Authority Key Identifier:
keyid:A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:47:92:c3:b8:cd:d5:e8:13:28:c6:ed:10:bc:fa:2c:a2:3c:
8a:02:6f:e4:af:d5:55:00:f5:b3:34:e5:d8:51:ec:6a:8e:c2:
e0:59:be:eb:d7:d6:1e:dc:db:bd:02:a1:07:6a:b4:a5:1d:7b:
a5:b9:ba:10:14:d8:fa:64:0c:2f:fc:25:1d:7b:15:71:d6:cc:
cd:73:3a:9d:b4:03:02:a5:fe:27:bd:cb:7c:fc:30:5b:2d:14:
3a:37:ca:16:01:73:87:b0:0f:f4:06:6f:f9:81:c5:32:f7:44:
27:3e:cb:e0:ac:5c:b3:26:4a:55:de:eb:36:0a:22:68:1a:b9:
da:37:96:4b:79:a3:d5:36:89:35:ff:da:14:02:f5:31:b9:a9:
72:93:94:68:5b:39:af:3e:eb:e4:0c:30:d3:3b:a8:e4:59:43:
01:c6:1a:42:ec:2c:cf:3b:8a:3f:4b:4b:47:c6:68:72:fa:b9:
e9:b6:f2:e0:58:76:cc:36:b6:ba:fe:46:bb:cd:19:9c:18:4a:
a2:e2:fc:c4:02:ab:c1:93:07:d3:12:6c:96:40:76:67:fe:2f:
6c:e2:0a:8c:96:63:25:6c:b1:e3:61:e6:4d:86:5c:8d:73:55:
76:27:9c:67:a7:a3:35:ef:27:3d:d5:e7:90:9a:d9:dd:66:0c:
f4:31:34:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:26 2025 by rpki-client