Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
File: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft (raw, json)
Hash identifier: h728Q8qPCwbmf3LRp/Y/SDsMBDHe0oY0GkEp8FlSU7g=
Subject key identifier: CC:0A:DF:E5:DA:A1:7B:06:A4:F3:21:27:29:82:B4:46:96:29:44:4D
Authority key identifier: 39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
Certificate issuer: /CN=39ce4c0abe2785d46a5571852170370423b5c59a
Certificate serial: 019512472CF6696E315B31AF0E4C6FF4236C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
Manifest number: 0C85
Signing time: Mon 17 Feb 2025 05:00:09 +0000
Manifest this update: Mon 17 Feb 2025 05:00:09 +0000
Manifest next update: Tue 18 Feb 2025 05:00:09 +0000
Files and hashes: 1: 1C8ZLPGb7cs83tfkfpBebyBiX7w.roa (hash: tZDyBN3FPva2cn/hbdxMAaSyUjVLmEX+ROsYp3y9P/E=)
2: 2V2wgHU2PI3brwoPOMDaDc7IkC4.roa (hash: 5qFS24zNGXVe6S2Vcqz/MzGu4AiLpsxGOww3SFLkJW8=)
3: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl (hash: kkbDja3c0zjzgO4th8xAPrIzsEqtsZ9wjeZk28UAa0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:2c:f6:69:6e:31:5b:31:af:0e:4c:6f:f4:23:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ce4c0abe2785d46a5571852170370423b5c59a
Validity
Not Before: Feb 17 05:00:09 2025 GMT
Not After : Feb 18 05:00:09 2025 GMT
Subject: CN=cc0adfe5daa17b06a4f321272982b4469629444d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:32:6c:77:f5:2d:8a:38:89:93:a2:1b:33:e1:
f2:b7:97:6e:14:93:f3:fa:51:a7:45:00:df:1b:f5:
c3:26:3b:23:58:44:ba:22:56:0b:50:b6:20:16:98:
c4:38:97:1a:c9:d2:44:e5:c1:49:27:f1:b5:fc:91:
10:3d:0a:a6:fe:b9:05:96:ee:d7:04:63:ee:8a:ca:
03:c6:fa:dd:c7:cd:a7:79:03:71:0b:9d:d1:9c:d2:
b0:91:26:6e:72:23:e9:c4:05:ff:7e:10:ca:ac:fd:
bc:4f:17:7f:09:1f:8a:81:7b:91:5b:b8:b7:f0:a6:
a0:15:39:d9:0b:24:5e:ec:98:32:a6:85:85:55:56:
ed:02:87:0d:9d:fd:fe:f2:52:fb:f3:fd:ed:d6:49:
10:fd:40:24:2d:38:90:07:2e:05:bd:f5:8e:36:79:
88:bb:ca:11:a3:69:66:53:d7:39:4b:a6:33:97:82:
d2:1f:77:e1:d5:e2:d2:6e:eb:35:c0:70:84:5b:bb:
85:8e:23:e0:39:b0:a6:67:6f:35:d0:9e:6e:c6:08:
00:c4:2d:e5:30:a6:bd:3b:20:08:66:6a:c5:3a:85:
39:0c:df:bf:22:e9:d9:1a:20:87:41:3b:ba:07:5e:
e0:e7:3b:4e:a6:64:e7:d3:aa:49:c0:3c:f5:62:9f:
9b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0A:DF:E5:DA:A1:7B:06:A4:F3:21:27:29:82:B4:46:96:29:44:4D
X509v3 Authority Key Identifier:
keyid:39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:78:dd:eb:a9:ab:09:51:ec:fe:67:f7:b2:d8:fb:54:06:16:
65:ed:d9:b6:94:f8:82:84:a9:ed:e8:fe:2b:1e:28:4f:6f:03:
df:3a:fe:dd:b5:f5:9b:0d:bd:d6:ba:79:14:7b:23:db:23:ee:
13:84:93:f1:28:09:39:0c:28:15:17:d7:c3:f3:77:07:f2:b0:
31:e8:17:cc:c3:ae:40:aa:bb:c5:61:c2:a3:bb:9d:10:30:3e:
d9:b5:8c:1b:98:4b:0d:13:a0:e0:7a:3f:5d:de:4a:37:82:64:
2c:bd:45:e1:07:6e:60:56:d1:e0:bd:ad:90:c9:7b:0c:e1:ef:
c2:8d:8f:42:f5:9c:40:3b:51:3a:07:4d:73:34:2b:0c:ec:9c:
a0:c3:3b:1a:08:94:d5:09:ed:04:b6:8c:99:d6:1c:a0:3c:fd:
00:36:7f:c5:41:54:9d:64:73:52:17:ba:75:40:73:b4:6a:e7:
d5:c1:14:0c:77:9e:46:84:af:2c:c7:36:5d:a1:5f:38:7f:9e:
9f:c1:06:4f:9d:17:89:01:fe:9e:59:70:10:17:42:cf:0d:da:
48:fc:9c:88:c3:56:74:12:e4:56:43:23:52:ad:4d:d6:db:05:
b6:67:bd:06:c9:f4:59:b7:db:77:14:b5:bd:3b:5d:e9:09:eb:
46:a3:6c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:33 2025 by rpki-client