Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
File: 4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft (raw, json)
Hash identifier: j4dRN1J9aPnNGcSMQhAMqIdAOvYW5TGFctPJI8tZM/M=
Subject key identifier: 32:FE:2C:7D:3B:9D:71:35:3A:E8:E5:84:A1:A5:70:B1:13:D8:2E:C8
Authority key identifier: E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99
Certificate issuer: /CN=e0e3976d9ecb8309a8181fbd025ca52fef161999
Certificate serial: 019510FE2445E9399467252E305A44188C16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
Manifest number: 0871
Signing time: Sun 16 Feb 2025 23:00:45 +0000
Manifest this update: Sun 16 Feb 2025 23:00:45 +0000
Manifest next update: Mon 17 Feb 2025 23:00:45 +0000
Files and hashes: 1: 4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl (hash: Q/A2xZxye92lrkiKpffwWbnQqzPBWp6PrYG/NrxM7Ek=)
2: cK4llrkBdLlV4HeILjRyQ98esEM.roa (hash: MuU2BWlfRFj75k9zGngWfQu7w/ZtaYOQ1aHN3Tj8NDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:24:45:e9:39:94:67:25:2e:30:5a:44:18:8c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e3976d9ecb8309a8181fbd025ca52fef161999
Validity
Not Before: Feb 16 23:00:45 2025 GMT
Not After : Feb 17 23:00:45 2025 GMT
Subject: CN=32fe2c7d3b9d71353ae8e584a1a570b113d82ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1d:38:62:a0:56:3a:2b:29:b0:2e:bc:be:10:
f5:c9:3d:4a:a6:59:eb:75:c0:00:76:ab:09:6d:cf:
65:34:4d:3f:d6:2f:14:ff:bb:a2:f4:bb:45:79:d2:
de:7e:29:69:52:e7:36:b2:77:43:0a:96:4d:fe:da:
f1:67:bc:c8:3c:08:0e:33:d7:7f:81:44:ea:e2:ca:
12:6f:1b:f1:e9:6f:75:9a:a9:f9:da:d5:05:f2:16:
38:9d:bf:79:40:42:9f:e3:1f:48:92:21:81:a5:cb:
81:b2:0a:27:2c:b8:79:5e:45:eb:2e:4d:ba:3f:b6:
d1:48:9a:61:fc:2a:0c:24:1b:b1:2b:d8:d4:b6:00:
20:83:16:6b:8f:a6:7a:b7:9c:b6:17:a8:31:71:f2:
f6:b9:c2:6c:ae:80:46:f6:7f:10:9e:7f:02:37:b3:
d7:f8:3d:7a:aa:51:87:19:f3:ed:a1:1a:ff:f8:55:
a8:e6:01:5a:f0:3b:4b:30:32:45:26:78:86:38:b2:
d7:88:d4:98:79:2d:14:49:73:47:e0:10:f6:c0:0c:
46:e1:bc:f9:42:33:1a:18:76:9f:7e:54:a5:14:d6:
1e:48:6c:03:de:2d:bf:20:55:b4:23:0d:1b:1f:60:
af:ef:28:ff:fe:a2:be:8b:0e:88:d9:ec:51:19:7e:
ee:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FE:2C:7D:3B:9D:71:35:3A:E8:E5:84:A1:A5:70:B1:13:D8:2E:C8
X509v3 Authority Key Identifier:
keyid:E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:6b:28:d4:86:f1:8e:ca:c7:74:42:88:c6:84:9b:15:6c:df:
d9:cf:0d:25:d0:76:8e:3c:a4:cd:81:11:aa:0e:bb:3c:d2:a0:
c6:01:0b:dd:91:39:a8:98:87:e4:d6:0d:ae:38:27:be:34:de:
a1:f5:63:40:0f:41:ca:79:79:46:93:82:a3:ed:03:fc:f9:04:
04:d6:b0:a5:3b:63:18:00:b9:6d:54:a3:ef:10:b8:f3:02:64:
0b:be:b5:4f:e9:b1:37:37:6b:3b:16:ce:5f:72:38:77:e5:85:
d1:43:54:96:dd:f3:7e:8f:b7:01:52:7e:62:e5:48:c9:c5:9c:
3c:f4:85:ba:d2:fc:5c:8d:3d:fc:51:ec:0c:53:04:49:19:09:
18:89:a6:ec:ed:5b:a4:24:f2:07:3b:80:f9:84:ee:a4:82:d4:
26:5b:17:48:71:ad:8c:f1:e1:e2:c4:c7:e8:ed:45:89:cd:e2:
f9:4b:00:82:1f:9f:98:29:ff:ee:a0:b5:1f:57:54:47:47:51:
65:c7:e1:2c:75:01:cb:16:86:62:de:f8:a2:60:7d:8a:81:30:
6a:ab:e4:83:27:f7:58:2f:57:3d:ef:fb:09:b6:8d:56:cb:99:
87:08:ed:3f:5b:ca:28:6e:fc:8d:5a:ea:b4:35:c3:f2:c9:75:
75:f1:06:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:35 2025 by rpki-client