Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
File: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft (raw, json)
Hash identifier: O0I86/HetiiXMsSf/tnyRrFxBMYdWFoW27uOvQBPg30=
Subject key identifier: 4D:D5:CE:3E:74:AD:73:17:CC:CB:74:F4:F8:B4:51:23:59:0B:7A:88
Authority key identifier: A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
Certificate issuer: /CN=a018d68115dc4b730f157906b04426e599b3a8ca
Certificate serial: 01951135244B354596B859FFCF570E1B48CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
Manifest number: 0A1F
Signing time: Mon 17 Feb 2025 00:00:50 +0000
Manifest this update: Mon 17 Feb 2025 00:00:50 +0000
Manifest next update: Tue 18 Feb 2025 00:00:50 +0000
Files and hashes: 1: OwUS3NXybv4j2e2fp7XuRCsj9G8.roa (hash: 1wSHkE+/1+8ByWbwo11cGeXiOHBKl5OZ9BEstqVoHFw=)
2: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl (hash: 3KhFQSW4ddU2HxYW4I+Z7AF7sCdAp3QcuyI0mHlZlH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:24:4b:35:45:96:b8:59:ff:cf:57:0e:1b:48:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a018d68115dc4b730f157906b04426e599b3a8ca
Validity
Not Before: Feb 17 00:00:50 2025 GMT
Not After : Feb 18 00:00:50 2025 GMT
Subject: CN=4dd5ce3e74ad7317cccb74f4f8b45123590b7a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ef:a8:a8:90:45:ed:8e:e9:7b:6b:5f:30:d2:
55:65:17:9a:6e:6f:80:a4:a2:f3:a7:9e:86:e0:3b:
a1:40:3d:2e:27:2b:62:b1:65:78:e7:a5:bd:26:21:
cc:8f:6e:4a:fa:47:0a:29:71:64:89:fe:27:69:34:
35:0a:f3:c4:48:aa:3f:88:45:22:66:92:20:f6:49:
b1:80:51:51:03:7e:17:5f:06:81:c5:97:d7:d0:d2:
6c:23:de:13:20:1b:22:03:6d:98:97:8e:e9:27:3b:
23:b8:1c:c3:2d:fd:c8:8d:f0:34:99:db:8d:03:3f:
04:6f:d4:4e:da:4f:d9:8c:44:85:cf:7e:33:e1:14:
8e:06:40:16:74:68:eb:70:ea:b6:c6:08:f6:21:8e:
dd:7e:47:0e:c4:9e:9a:ee:6a:8d:6d:4d:06:1f:72:
f3:dd:9c:1d:54:78:b8:c8:1d:01:48:15:6a:f1:5b:
55:9b:39:ad:06:2c:1a:f2:5b:cc:8c:f1:65:73:a8:
6e:f5:cb:d4:02:1a:5c:b3:04:27:22:87:ee:e2:3d:
5d:d9:c3:73:2f:05:b9:c5:77:22:fb:dd:81:de:77:
1d:d2:dc:34:58:53:ee:d0:80:22:3c:f2:a6:09:44:
ac:72:99:39:0f:be:81:8b:29:7f:93:a7:be:f0:d6:
ce:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D5:CE:3E:74:AD:73:17:CC:CB:74:F4:F8:B4:51:23:59:0B:7A:88
X509v3 Authority Key Identifier:
keyid:A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:20:31:25:68:82:35:21:9c:c3:2d:ce:4a:57:ab:5e:55:92:
d1:a3:45:a1:77:39:aa:45:c0:10:a3:0c:03:8b:98:7c:45:cc:
fb:ea:f2:dc:fe:0b:3f:22:63:82:46:12:1a:f7:0e:0e:3a:a1:
ea:7f:0a:4a:a3:54:29:30:16:55:da:81:d0:ee:bc:8e:46:49:
b4:5e:56:c4:21:ce:e1:4f:cd:78:21:07:a6:d8:7c:52:c1:1a:
f9:f4:2e:bc:e7:e9:e3:7d:5b:50:ea:a8:76:ee:12:3f:fe:5d:
f4:d7:1e:85:28:77:3a:1c:2b:d0:14:3a:b4:1f:a9:a5:70:62:
9a:3a:4b:47:50:67:61:40:63:53:26:29:82:ff:90:5f:84:a4:
1e:9a:0b:20:a4:63:d3:d6:8d:c2:b3:8c:7f:4f:32:11:56:fd:
6d:e7:f8:2c:93:23:16:56:02:e9:f6:4e:ec:38:ed:3d:da:dd:
81:8c:04:67:d8:da:91:0c:40:4d:63:7f:cd:d9:c0:4e:4f:9a:
69:f2:63:a1:d2:85:a2:b1:a5:0f:65:61:44:44:b0:7c:5b:0a:
2f:07:b4:f0:bc:d5:53:17:64:3a:68:55:f7:b6:66:55:6a:5a:
80:0d:b1:4f:c1:42:01:36:1a:d8:ab:19:65:46:26:45:ab:31:
02:ad:09:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:15 2025 by rpki-client