Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
File: OtEfbBeesxQqSO5ksulM3p3TYXM.mft (raw, json)
Hash identifier: TIR0iQg4Un1YDSbie82OwtpaSiEqmw8HhOQRt9+uu6c=
Subject key identifier: CD:86:EE:50:1F:56:5E:89:49:20:78:7D:9C:DE:E4:FA:87:6B:7F:80
Authority key identifier: 3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
Certificate issuer: /CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Certificate serial: 0194C350CB0B17A2A94C5DDC2413AD0D9E69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
Manifest number: 142E
Signing time: Sat 01 Feb 2025 21:00:39 +0000
Manifest this update: Sat 01 Feb 2025 21:00:39 +0000
Manifest next update: Sun 02 Feb 2025 21:00:39 +0000
Files and hashes: 1: OtEfbBeesxQqSO5ksulM3p3TYXM.crl (hash: wDJN4oY8EuYfMuBx1FffuIjwhw1OD5j4TZpUsgmmES4=)
2: UcqTmJ89l8NUNjKYfDLMA156xvg.roa (hash: vHYUpfnZxXjHkU7oFNbi+l4QCTaNKF/HLN9VYPGDanA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:cb:0b:17:a2:a9:4c:5d:dc:24:13:ad:0d:9e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Validity
Not Before: Feb 1 21:00:39 2025 GMT
Not After : Feb 2 21:00:39 2025 GMT
Subject: CN=cd86ee501f565e894920787d9cdee4fa876b7f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:1f:e9:25:6f:25:cd:3e:09:8f:b6:56:6d:
36:f0:93:15:2f:54:01:65:78:17:7f:33:bc:ec:b5:
69:64:99:c3:3c:98:b8:7d:34:5b:10:fb:06:0e:68:
62:46:bb:dc:2c:16:c8:af:db:a2:14:cb:41:59:95:
a9:e2:d3:96:dd:36:62:a7:8b:e6:58:ce:53:e6:02:
5a:16:08:44:21:ba:3d:88:02:fb:7d:d4:a0:c9:34:
31:d7:9c:a5:c5:37:3b:32:fd:94:bd:67:42:fd:d0:
9e:04:82:f8:07:ea:7c:43:e5:f1:70:7b:4f:28:b2:
91:46:4c:9b:8f:e9:55:5f:be:ee:87:66:da:ee:3e:
bb:5b:24:6b:1c:1f:af:8b:42:73:5a:11:95:1c:50:
3e:c7:c4:f5:ec:2c:02:22:b1:06:8c:c2:a1:1a:5a:
75:39:e1:62:52:e8:58:df:31:59:2f:19:fa:9d:ba:
56:8e:f6:ba:c8:aa:cb:01:1a:7e:83:8b:73:be:60:
ea:5c:af:b9:cb:ff:36:db:0f:9a:2a:ae:aa:a2:5e:
06:8c:10:86:0d:e9:7e:c0:4a:c3:6a:4d:fd:0f:a3:
38:ee:92:85:71:51:0c:43:ed:3f:bf:7b:a1:af:12:
f5:21:3e:74:a2:27:45:4b:98:a0:7e:7e:cf:2c:d2:
a1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:86:EE:50:1F:56:5E:89:49:20:78:7D:9C:DE:E4:FA:87:6B:7F:80
X509v3 Authority Key Identifier:
keyid:3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:92:ef:e9:fc:a2:0b:99:f9:ad:e8:07:16:d6:b5:e3:2f:3d:
29:70:d7:e2:f0:4e:45:fe:e2:0c:96:2b:40:70:0c:1b:03:d3:
6b:73:3b:3e:c8:b0:29:54:4a:e7:3b:37:18:c9:b9:0e:34:06:
9d:8d:41:2d:56:96:64:71:4b:a2:bf:8c:0f:9e:dd:21:85:57:
db:2f:47:e6:86:e7:bd:ee:8f:a0:3d:3b:54:a4:9b:2e:4c:17:
dc:50:8c:4b:5b:7c:0f:31:04:5f:ad:f1:fd:41:4c:67:16:2e:
30:b8:e2:a1:e9:74:1e:62:6f:f0:16:3d:13:f4:cc:3b:32:c7:
e4:f7:ed:08:bf:fb:f2:78:af:0f:cd:bb:4c:67:c5:00:aa:e1:
c7:47:5d:50:29:5e:6f:dd:2f:15:5b:dd:44:73:b9:75:f5:c3:
b5:e6:90:63:9d:fb:ac:6e:8a:02:80:de:05:93:84:66:ee:8f:
e4:3e:eb:8d:fc:c1:6b:85:8f:b1:e6:45:f3:70:c8:1c:5d:2f:
29:89:d8:18:48:f5:7f:b4:fd:c0:69:97:42:2d:9f:fc:c0:42:
27:c7:3a:5d:85:59:fd:94:2b:1c:50:f4:dc:9b:4d:9f:81:b9:
41:01:fa:bb:34:73:86:f9:1d:f4:a0:2b:85:16:ac:03:46:68:
c4:e5:76:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDUMsLF6KpTF3cJBOtDZ5pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDExZjZjMTc5ZWIzMTQyYTQ4ZWU2NGIyZTk0Y2RlOWRk
MzYxNzMwHhcNMjUwMjAxMjEwMDM5WhcNMjUwMjAyMjEwMDM5WjAzMTEwLwYDVQQD
EyhjZDg2ZWU1MDFmNTY1ZTg5NDkyMDc4N2Q5Y2RlZTRmYTg3NmI3ZjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYIf6SVvJc0+CY+2Vm028JMVL1QB
ZXgXfzO87LVpZJnDPJi4fTRbEPsGDmhiRrvcLBbIr9uiFMtBWZWp4tOW3TZip4vm
WM5T5gJaFghEIbo9iAL7fdSgyTQx15ylxTc7Mv2UvWdC/dCeBIL4B+p8Q+XxcHtP
KLKRRkybj+lVX77uh2ba7j67WyRrHB+vi0JzWhGVHFA+x8T17CwCIrEGjMKhGlp1
OeFiUuhY3zFZLxn6nbpWjva6yKrLARp+g4tzvmDqXK+5y/822w+aKq6qol4GjBCG
Del+wErDak39D6M47pKFcVEMQ+0/v3uhrxL1IT50oidFS5igfn7PLNKhiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2G7lAfVl6JSSB4fZze5PqHa3+AMB8GA1UdIwQY
MBaAFDrRH2wXnrMUKkjuZLLpTN6d02FzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RFZmJCZWVzeFFxU081a3N1bE0zcDNUWVhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy83ZGJmMzYtMjQ4NS00OTM1LWEwYzct
ZWY5MWQ4YjViMDgxLzEvT3RFZmJCZWVzeFFxU081a3N1bE0zcDNUWVhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy83ZGJmMzYtMjQ4NS00OTM1LWEwYzctZWY5MWQ4YjViMDgx
LzEvT3RFZmJCZWVzeFFxU081a3N1bE0zcDNUWVhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5Lv6fyi
C5n5regHFta14y89KXDX4vBORf7iDJYrQHAMGwPTa3M7PsiwKVRK5zs3GMm5DjQG
nY1BLVaWZHFLor+MD57dIYVX2y9H5obnve6PoD07VKSbLkwX3FCMS1t8DzEEX63x
/UFMZxYuMLjioel0HmJv8BY9E/TMOzLH5PftCL/78nivD827TGfFAKrhx0ddUCle
b90vFVvdRHO5dfXDteaQY537rG6KAoDeBZOEZu6P5D7rjfzBa4WPseZF83DIHF0v
KYnYGEj1f7T9wGmXQi2f/MBCJ8c6XYVZ/ZQrHFD03JtNn4G5QQH6uzRzhvkd9KAr
hRasA0ZoxOV28g==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:35 2025 by rpki-client