Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
File: 0KpKGno60j-q4q6un6YZTwISgSk.mft (raw, json)
Hash identifier: 39lH7p6YkoeNC+U7JQodZ6I2YCZ5AUElBhFvtN1TUwI=
Subject key identifier: E7:0F:2D:4E:FB:84:E4:4A:4D:40:4C:A7:B1:40:EA:6B:E3:EA:66:28
Authority key identifier: D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29
Certificate issuer: /CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129
Certificate serial: 0194C507C1280F2213EF7B332A7B858667E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
Manifest number: 4A
Signing time: Sun 02 Feb 2025 05:00:07 +0000
Manifest this update: Sun 02 Feb 2025 05:00:07 +0000
Manifest next update: Mon 03 Feb 2025 05:00:07 +0000
Files and hashes: 1: 0KpKGno60j-q4q6un6YZTwISgSk.crl (hash: OwHp1sngntMX8s/WoNt0+WMzj4x/ci+L4VJ9Y4eufWo=)
2: BPcKYotNA4ZeZvm82W73v75zPQs.roa (hash: oHpWOGTj/PoKbHsHCYFs8uXPSnbHGEoV8KY7k9zJBk4=)
3: GkxGrjdz0A7AWmifnWDimQZWI38.roa (hash: tHXJR2KGAG4wHE8bdFOYoF9Jdtd+4jQD2aXhMHJzWK8=)
4: OFO40pbXY33B4_R6m0vxzmJtlaE.roa (hash: OKgJmR90SzKnzfJWjgu0f1y4g1wd7HW3UjBatZfs5A8=)
5: ief4j2bb-cAvwzzS1T0xB8OgxGk.roa (hash: cv2vWMrY2M65pVapU15+XFEE8tVsd4Na8PnjBxEQRuA=)
6: wkwsgzJc2eo9ng8QQ8kvMc3qjbc.roa (hash: +iuoTytPo6r5GmeijHeI4hmWR8iJmhnqPLAkE9k79sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:c1:28:0f:22:13:ef:7b:33:2a:7b:85:86:67:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129
Validity
Not Before: Feb 2 05:00:07 2025 GMT
Not After : Feb 3 05:00:07 2025 GMT
Subject: CN=e70f2d4efb84e44a4d404ca7b140ea6be3ea6628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:10:1f:dd:82:ba:94:f9:20:24:98:5d:77:e8:
8a:7d:48:7f:73:c3:2a:a6:63:9e:2f:e2:20:1f:cd:
d0:f4:7c:8e:e9:02:d0:bc:ea:10:da:ef:ee:54:7a:
4f:03:98:31:33:19:26:f0:cd:83:57:9e:2d:de:14:
37:26:b9:76:69:60:e3:b3:38:9f:a4:0c:7e:52:ce:
2d:2b:72:44:1f:75:fe:bb:d1:aa:48:f1:9d:03:24:
2a:ba:08:3d:69:a4:0f:e4:77:b8:68:69:a8:ac:de:
f9:58:75:59:10:37:08:c2:ff:9b:75:8b:5a:0f:5e:
1c:e1:19:50:c2:16:58:78:f6:e1:9e:19:72:84:3d:
10:ae:f9:1b:ad:1c:c4:2d:aa:1d:ae:3b:a9:ec:b8:
05:08:40:5d:b7:bb:e3:9c:14:58:fb:b2:f5:bb:bd:
69:c9:be:aa:66:27:78:3b:91:7f:f2:22:c7:e4:d6:
0d:28:bb:43:12:a8:f0:d3:1a:03:ee:6d:6f:71:36:
6b:c8:08:42:10:17:9e:7b:ca:4b:b0:09:d9:70:65:
25:0d:b2:a1:3c:26:09:63:d6:b8:3a:64:75:56:b2:
b1:99:9b:e4:eb:28:c7:59:e2:b1:8d:e8:c2:b6:2e:
a5:82:e8:57:c4:36:5c:13:4b:8c:63:ea:c8:6a:fa:
55:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0F:2D:4E:FB:84:E4:4A:4D:40:4C:A7:B1:40:EA:6B:E3:EA:66:28
X509v3 Authority Key Identifier:
keyid:D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1e:87:b1:db:07:15:33:87:50:07:37:4f:48:46:a5:1a:60:
04:d3:a6:30:48:25:1b:61:14:ca:1d:5e:71:fc:21:be:a0:bb:
34:97:bd:ec:a0:50:2e:6c:60:e4:a2:56:64:9e:54:bb:45:68:
5d:6f:82:6f:06:e2:60:7c:86:47:01:3d:30:a1:c2:16:b4:f8:
19:57:98:ac:5b:d2:66:d0:87:19:52:63:24:6b:23:d3:96:c7:
70:a4:56:3a:45:74:4b:99:a1:6e:15:a9:ff:7f:1e:31:66:7e:
95:92:30:10:2f:32:b9:e4:0c:d9:4f:01:b9:28:cc:9b:80:d8:
18:a1:5a:1f:c2:77:e8:7e:3b:83:de:c7:b9:9f:65:63:7f:8c:
b9:39:fa:41:7c:da:a4:17:ca:61:e6:41:6b:88:de:e2:07:59:
03:71:ea:ac:d1:97:e3:3f:55:3f:a6:88:70:27:7c:a6:3a:88:
91:34:c8:1a:af:40:ad:79:3e:a2:9f:d3:6f:af:95:30:02:9e:
14:02:cd:c7:0b:df:43:41:bf:a3:75:13:e3:af:6f:62:ca:8c:
c8:8f:be:bc:c0:03:cb:27:42:87:42:8a:0e:89:56:aa:30:a8:
f0:8f:bc:cf:5f:41:ee:e9:e2:0b:20:d8:9a:d4:8b:24:a7:5f:
0b:83:dc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:07:07 2025 by rpki-client