Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
File: OJsvo2UTg6f8aoatulbHxiB9dWg.mft (raw, json)
Hash identifier: XO5u8bsU/KrcYZBumFGBnj7qsYw5jE7AMAwpl+yZ7XE=
Subject key identifier: 6A:19:7B:6E:B2:21:AA:3B:4C:33:BE:A5:19:31:A8:73:33:6A:C3:BD
Authority key identifier: 38:9B:2F:A3:65:13:83:A7:FC:6A:86:AD:BA:56:C7:C6:20:7D:75:68
Certificate issuer: /CN=389b2fa3651383a7fc6a86adba56c7c6207d7568
Certificate serial: 019510FDE03E7DE3F4B3DE5C6B51787086CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
Manifest number: 0C3F
Signing time: Sun 16 Feb 2025 23:00:28 +0000
Manifest this update: Sun 16 Feb 2025 23:00:28 +0000
Manifest next update: Mon 17 Feb 2025 23:00:28 +0000
Files and hashes: 1: LVniV-fBUsD2XHyiKXh59lNaKck.roa (hash: e7ROoJyN3pM39RDR+x9hRmjX8OTAnl8OOTQ8mCyFwtU=)
2: OJsvo2UTg6f8aoatulbHxiB9dWg.crl (hash: 9EP9V+5bQvrg4UsFCWXgMCGscJJPv18Vuqokb1oGHtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:e0:3e:7d:e3:f4:b3:de:5c:6b:51:78:70:86:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389b2fa3651383a7fc6a86adba56c7c6207d7568
Validity
Not Before: Feb 16 23:00:28 2025 GMT
Not After : Feb 17 23:00:28 2025 GMT
Subject: CN=6a197b6eb221aa3b4c33bea51931a873336ac3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ce:56:f4:e4:6f:bb:f1:55:d5:99:d2:fc:10:
ac:45:37:24:dd:89:66:c6:3d:a1:1e:f9:f5:27:0c:
66:07:b4:c5:c4:a7:07:a0:1f:9f:da:a5:32:10:9e:
d4:8e:af:b9:16:7e:b4:57:ea:bc:b1:06:ae:ff:32:
5d:9f:4c:09:2a:a2:4c:31:12:26:4a:fb:b9:58:d4:
84:3b:48:54:91:90:de:93:8c:ba:ce:1f:c7:01:a7:
73:75:a5:46:79:35:53:9c:83:fd:7c:d4:b3:1c:09:
40:69:b4:58:cb:08:31:c8:88:64:d7:2c:61:58:e7:
fc:d5:e1:e8:23:bc:23:d3:af:86:fd:4f:08:2f:a1:
42:3e:40:8a:b8:3c:d0:19:5f:f4:55:48:a9:91:02:
48:ca:5b:fa:13:ff:09:ac:61:57:da:5e:08:db:7b:
4e:1d:4e:c5:1d:eb:cc:00:78:c1:4f:e9:bd:12:9b:
68:fe:33:84:7e:b1:97:bb:ea:13:94:30:9e:f1:e8:
83:e8:6b:9d:7a:20:c2:c2:00:c1:d6:08:91:37:04:
20:99:7a:0d:8a:84:1d:7f:3c:0f:1b:79:6b:d2:8c:
be:72:b3:89:3e:99:24:61:06:99:2a:46:56:a2:b5:
83:0a:46:7b:62:59:2b:8e:03:b9:d7:3d:07:9c:bc:
5f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:19:7B:6E:B2:21:AA:3B:4C:33:BE:A5:19:31:A8:73:33:6A:C3:BD
X509v3 Authority Key Identifier:
keyid:38:9B:2F:A3:65:13:83:A7:FC:6A:86:AD:BA:56:C7:C6:20:7D:75:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:41:85:dd:89:28:63:61:50:98:18:0f:17:00:92:9f:ac:36:
43:73:48:d6:fb:30:84:95:b1:1c:d0:6f:0c:3a:77:18:48:7e:
1a:60:be:17:d0:71:17:73:67:41:3d:77:33:05:10:e2:41:41:
08:18:71:48:12:71:bd:aa:5d:70:5f:d0:ab:4d:ea:44:2d:92:
ac:5c:93:c2:e4:a0:a0:21:77:f4:52:0d:7b:4b:21:f3:09:35:
d6:b4:a0:15:cf:21:0b:92:50:d0:60:43:3a:27:7a:2f:e0:8c:
0e:ec:55:13:0a:af:c1:71:7f:6a:aa:fe:1e:78:5c:34:9e:90:
3a:61:c4:3b:0c:57:74:bc:74:6d:c7:93:50:13:d5:cb:65:2f:
26:fe:7a:98:cc:3d:6d:ad:e9:e4:d8:64:91:cf:23:ea:ad:66:
df:22:81:da:29:ff:27:88:82:4d:c1:97:5a:9f:26:e7:f5:9e:
64:81:56:7e:a9:6d:e3:4b:19:c3:58:c6:9f:4d:4f:83:de:74:
b1:68:d7:8e:69:c1:8d:17:a4:3e:87:43:ce:ee:c1:7c:ec:bc:
95:05:e3:89:a4:67:bd:f9:a9:61:ed:bc:70:7a:9e:ac:4d:26:
b8:a3:e1:38:ba:78:d0:de:35:01:b9:bd:3a:39:1e:88:e8:1f:
c9:b6:0e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:54 2025 by rpki-client