Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
File: ORl1rVfOt2WtlIvl60w4LcdIRMA.mft (raw, json)
Hash identifier: QZlgyKEBYv2DGGak+eeM5RLVSsUiIAhWVb2zYvS7hBo=
Subject key identifier: 63:95:41:D7:5B:1C:B9:85:F2:34:37:D9:F4:EE:0D:05:9A:49:91:57
Authority key identifier: 39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
Certificate issuer: /CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Certificate serial: 01950FB4BF605E93C6DB3EA25E8C443ABCE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 17:00:58 +0000
Manifest this update: Sun 16 Feb 2025 17:00:58 +0000
Manifest next update: Mon 17 Feb 2025 17:00:58 +0000
Files and hashes: 1: ORl1rVfOt2WtlIvl60w4LcdIRMA.crl (hash: hRe18J6mhjJDGJsWiiI47kFbqCSt3Lhx964OHJcneIg=)
2: o3nfz0qPyoHeZ7QZgpyfuh3VEII.roa (hash: Z7vtFpZz5Q9L6wA4avMeuFaOqLOX0o+KOJVRi4dDip4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0f:b4:bf:60:5e:93:c6:db:3e:a2:5e:8c:44:3a:bc:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Validity
Not Before: Feb 16 17:00:58 2025 GMT
Not After : Feb 17 17:00:58 2025 GMT
Subject: CN=639541d75b1cb985f23437d9f4ee0d059a499157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:87:0f:8e:9a:87:e3:b7:db:fd:a5:b5:d1:08:
86:37:43:93:35:cc:d8:b4:e7:e2:7b:d3:5e:65:d9:
26:29:58:72:90:1b:8b:f1:d5:25:6f:15:4e:88:a6:
9d:2c:c8:c8:ed:6d:fe:b1:b3:3b:36:a0:e4:3b:83:
29:17:40:26:d4:11:d7:8c:62:b7:af:03:b1:90:0e:
71:7d:b8:a2:63:f2:1a:d0:85:5e:67:49:57:d5:3f:
f3:3f:a6:72:89:fa:14:66:f0:6d:62:df:c8:99:a0:
ee:fb:5c:76:73:37:25:9a:81:65:76:9a:db:5b:78:
b8:1e:5b:b1:26:a3:44:fa:c3:5f:9f:71:13:a3:15:
97:1d:6e:b0:e4:2a:f6:34:b8:19:0e:bf:09:fe:fc:
41:86:a0:9f:e0:84:9a:d5:8f:95:65:77:89:9e:9e:
f2:8e:a8:f7:d5:01:27:03:68:40:ce:ea:f4:a5:95:
2a:93:89:c7:59:8c:2b:8b:8c:53:68:46:dd:d3:4e:
57:42:0f:f2:45:97:ce:ac:6a:b9:6a:0f:28:a3:19:
3e:4e:37:bb:14:7a:a6:fe:7c:f4:53:6f:c9:a9:88:
aa:e2:10:5e:fc:bf:21:60:9b:28:8e:88:73:81:9d:
b0:68:2e:33:0d:76:42:6b:21:8b:52:2f:a1:9f:0a:
c7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:95:41:D7:5B:1C:B9:85:F2:34:37:D9:F4:EE:0D:05:9A:49:91:57
X509v3 Authority Key Identifier:
keyid:39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:8d:da:c4:10:7e:d3:a9:7f:f3:3b:af:e7:3e:b0:57:61:e9:
f2:90:38:41:d7:70:a2:fa:c8:af:27:e1:3d:ff:fc:d6:c7:31:
5e:b1:76:3a:13:c8:13:18:e7:2a:d7:b4:93:9b:35:ac:b3:ed:
d8:52:d0:1a:6e:42:b5:7c:b0:77:af:5f:ce:71:20:5f:bd:a2:
df:20:48:00:31:d4:16:13:a9:af:46:52:b8:b9:b1:56:b3:ef:
9f:a2:2f:a4:14:10:d6:2c:17:ea:61:a4:1d:33:89:48:cc:38:
56:a3:b1:86:d2:6c:b0:3c:e9:a8:a8:80:4b:8b:f1:1c:5e:c7:
f0:d6:35:58:67:c4:33:c6:f0:b7:c0:e4:d6:21:81:6a:b8:e3:
39:c7:39:53:01:bf:3e:fc:c1:23:33:ec:21:1d:b9:67:d1:ca:
b9:0d:52:2a:26:6a:4b:60:29:34:c4:03:36:90:de:df:b2:9f:
ca:f0:23:dd:79:a8:51:42:88:a1:7f:f3:77:6b:1c:6a:2f:ca:
e4:5b:2a:11:39:31:65:0d:99:d8:99:cc:ce:d9:42:c3:ff:fb:
ad:29:36:1a:ff:b0:e8:2e:9e:37:69:3f:2e:15:24:1f:46:41:
04:3a:4e:9c:2f:d3:1e:b8:5e:69:81:fc:29:5e:0c:a4:7a:68:
64:40:e2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:31 2025 by rpki-client