Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
File: OlOeUB3_N83JLL7gzduS7S6BwTw.mft (raw, json)
Hash identifier: YuRv2zzEFoLMY1kX4ov2YXkHsE6akKdAUfIAUdtd6jI=
Subject key identifier: 0D:E9:F2:F1:46:57:4A:8A:B7:9A:C6:4C:32:8D:9E:5A:F0:48:DE:47
Authority key identifier: 3A:53:9E:50:1D:FF:37:CD:C9:2C:BE:E0:CD:DB:92:ED:2E:81:C1:3C
Certificate issuer: /CN=3a539e501dff37cdc92cbee0cddb92ed2e81c13c
Certificate serial: 019511A2E2AB6A09155446B84D967D33A143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
Manifest number: 1455
Signing time: Mon 17 Feb 2025 02:00:42 +0000
Manifest this update: Mon 17 Feb 2025 02:00:42 +0000
Manifest next update: Tue 18 Feb 2025 02:00:42 +0000
Files and hashes: 1: OlOeUB3_N83JLL7gzduS7S6BwTw.crl (hash: PwicKj4PdlbTi4Xr1x0Q6aiOB7tiebJmd2YWIee/fuI=)
2: atjesNZQ2ZNfTEAkHa8X7G1spoI.roa (hash: ztzd1xVIo16Gew42+wgHm3Qb1gPLUkf9BdSdxy5xsYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:e2:ab:6a:09:15:54:46:b8:4d:96:7d:33:a1:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a539e501dff37cdc92cbee0cddb92ed2e81c13c
Validity
Not Before: Feb 17 02:00:42 2025 GMT
Not After : Feb 18 02:00:42 2025 GMT
Subject: CN=0de9f2f146574a8ab79ac64c328d9e5af048de47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3d:d4:d3:ec:3e:e6:b1:12:f5:3b:0d:7f:26:
e2:b4:b9:eb:13:fa:7e:21:21:74:37:92:48:2e:1c:
f8:70:5c:a1:9b:f6:d9:d7:5c:09:2f:3c:fb:6a:ee:
b9:9b:af:1c:90:35:2b:7e:f5:2a:74:9c:73:b4:54:
38:0a:c4:0d:ca:1e:eb:4b:a2:34:91:eb:a8:2e:65:
00:58:d2:d5:4e:8b:fd:4d:56:15:e2:5e:5e:ff:db:
90:65:c9:b4:90:79:43:41:62:3c:1e:af:06:87:d3:
f2:a0:84:f9:cf:6d:bf:29:1d:d0:e3:52:33:10:47:
1a:81:95:de:89:ff:dc:3d:95:86:a0:0e:d2:f8:bc:
72:2f:50:1a:dc:6e:a2:48:03:cb:ad:e3:28:be:95:
19:be:7c:0e:2e:12:9b:0b:10:c7:31:f7:c0:ee:8a:
f4:2f:dc:16:1d:c0:d4:7b:b4:d5:8e:10:94:f2:34:
34:2d:36:88:cd:67:24:d7:b3:20:da:d1:3e:99:81:
00:88:e5:9c:cc:46:86:d2:16:db:f3:ef:a5:ad:13:
61:37:ff:23:b6:83:0d:71:6c:82:76:d3:f2:ce:e1:
ec:e4:4b:fc:f0:eb:95:1f:52:2e:84:11:fc:9e:57:
cc:66:a6:46:01:6d:11:76:76:b4:0e:c9:4e:d1:51:
66:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E9:F2:F1:46:57:4A:8A:B7:9A:C6:4C:32:8D:9E:5A:F0:48:DE:47
X509v3 Authority Key Identifier:
keyid:3A:53:9E:50:1D:FF:37:CD:C9:2C:BE:E0:CD:DB:92:ED:2E:81:C1:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:6f:c4:ee:4b:4b:bd:1d:63:87:0a:52:80:e9:17:71:f5:61:
2b:78:dd:e1:c4:1a:43:e0:d9:14:93:f8:e1:45:f4:88:fb:cb:
07:16:f2:09:00:46:19:58:58:50:d3:d1:21:a6:02:19:6e:49:
c6:01:c6:28:e3:cf:da:77:be:f7:c8:1a:b9:a4:b5:8b:f8:d0:
0d:03:2f:ab:91:2a:68:86:f0:d9:c6:2d:4a:8f:ba:ce:3b:13:
af:19:cc:df:e5:99:14:01:1a:16:66:46:1e:ce:48:59:26:fb:
25:11:24:c4:d8:cf:44:17:06:90:f9:59:1d:69:d1:f7:21:da:
e6:89:13:66:93:18:d9:6e:62:02:03:e6:e7:07:0a:a3:a9:aa:
af:73:91:8c:5f:54:b8:02:8f:20:05:bd:7d:4a:4d:79:6e:65:
8b:7a:a6:04:80:4d:c1:7d:d4:5e:a9:ef:65:ab:ac:9f:f4:86:
a6:d0:c3:7f:60:9c:74:8d:1a:f2:67:1f:6b:ed:94:14:58:d0:
4a:a2:72:30:54:f4:c7:e4:15:3e:1b:2d:da:ca:cc:89:89:4d:
fd:f3:1a:46:94:38:47:ec:4d:ed:47:23:ca:98:8e:a7:04:68:
ca:8a:ca:f9:26:b6:4f:b5:96:c2:22:6a:62:56:bf:a0:84:93:
99:01:29:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:06 2025 by rpki-client