Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
File: o1xUQ64gP2R-4wa573LaxQtd9RQ.mft (raw, json)
Hash identifier: g/trqMXS3ZpJYgGEhMW2qnBn67kbxRh0uGtGz7YMnBg=
Subject key identifier: 23:13:3B:54:65:CB:89:FD:3F:6F:CD:46:57:57:DF:A1:AA:84:7E:5D
Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Certificate serial: 019511A2E6EFA4C6D04E5D0507DA41332B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
Manifest number: 119F
Signing time: Mon 17 Feb 2025 02:00:43 +0000
Manifest this update: Mon 17 Feb 2025 02:00:43 +0000
Manifest next update: Tue 18 Feb 2025 02:00:43 +0000
Files and hashes: 1: TzcKOj9Zbs6KbPYh_IUNdJFuw_o.roa (hash: Nd8DGSNjI4U6VllZfkdb3mT7nzYndNyfiOfx/EMJxwE=)
2: VUbUkp8nNfi8QcLP1MtPwMzqOp0.roa (hash: VuYMTVLRYxWMtUC1yaRKRtUhGRVxqU/rFMLN7WkXA8A=)
3: o1xUQ64gP2R-4wa573LaxQtd9RQ.crl (hash: MG+Lh9yMSS/qmPRvNNSU20mY1x1HtISM5CJCmCzeoEw=)
4: sMVCu-0bJfKqyvTZHFvSmvFdXyE.roa (hash: aQQWCKTl2XdVtZ9D4c2Q6AEK4cq2JGEeV3mdBjyd4QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:e6:ef:a4:c6:d0:4e:5d:05:07:da:41:33:2b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Validity
Not Before: Feb 17 02:00:43 2025 GMT
Not After : Feb 18 02:00:43 2025 GMT
Subject: CN=23133b5465cb89fd3f6fcd465757dfa1aa847e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7f:0f:67:70:21:89:e1:e3:a9:a2:b2:9b:8c:
99:99:25:00:84:40:80:87:7d:91:a9:58:a2:0f:22:
b3:25:22:16:ca:8d:f3:53:5b:4b:0a:7f:87:d3:30:
57:00:83:6d:8a:ba:07:66:c2:20:af:c1:3b:2b:c4:
18:d0:2d:0d:a3:d8:f8:6e:11:2b:82:91:b6:a9:3b:
0c:3f:ba:9c:e1:9c:c9:9c:87:8f:a7:fe:c9:7c:82:
b6:4b:12:d6:3d:c5:a9:89:69:e9:12:fb:33:aa:0a:
00:79:23:fc:fa:8f:f9:87:44:97:66:63:ed:93:aa:
4e:16:66:bb:c9:10:79:48:7f:3b:b2:0f:74:97:31:
f3:af:85:13:21:aa:50:c8:80:94:50:bf:d7:ca:a7:
2e:d6:37:c5:15:5e:2c:5f:0c:b7:d6:4e:c0:4b:f0:
71:c7:e6:fe:6f:7f:f2:9d:d5:b3:1a:f5:8a:db:fe:
c7:96:21:f8:8b:ed:88:50:97:40:a8:0b:05:64:a5:
2e:dd:29:df:bf:66:c5:7b:f2:a2:88:09:a1:53:7d:
e7:ea:85:c2:5f:ac:cb:d8:c9:22:c5:3e:42:05:b1:
e7:50:bd:2c:c0:f9:e8:4e:e6:a4:b7:16:a7:8b:21:
b7:1a:5e:17:bf:0f:49:55:dc:71:77:98:f0:60:db:
d4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:13:3B:54:65:CB:89:FD:3F:6F:CD:46:57:57:DF:A1:AA:84:7E:5D
X509v3 Authority Key Identifier:
keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:f3:24:80:94:94:39:bc:91:73:82:aa:c3:53:cf:9c:1e:78:
50:de:ee:46:99:c1:60:1d:b3:58:ed:f3:a7:36:29:4f:25:26:
1f:94:06:a9:d3:74:dd:82:14:a8:f0:9d:e3:e6:91:f1:08:cd:
7b:bb:af:bf:c2:a7:f7:24:75:9c:f7:76:a6:93:9b:68:9a:ed:
8c:11:34:85:9b:c7:85:cc:0e:73:f4:a1:b6:e6:59:15:e9:ee:
b0:23:61:42:a2:2f:78:5c:0a:49:b1:1f:3b:51:81:7a:9d:0d:
82:a2:55:50:8c:61:37:24:ea:03:d6:b7:16:3f:a7:77:04:1c:
c9:55:d6:59:3f:a0:a5:45:20:2b:d5:12:59:34:d8:ac:91:ab:
4c:b0:cb:a6:d4:83:18:cd:4a:7f:c5:c9:20:6c:7a:9a:9e:99:
19:fa:57:75:3d:94:62:0c:26:9e:df:5d:08:0b:0f:5e:72:b2:
5e:5d:c9:c5:c3:1e:ae:5b:d3:dd:5c:9c:7e:3e:ca:42:31:28:
df:bc:6d:ce:54:31:93:66:3f:12:d2:cb:0b:bc:00:78:cc:31:
f9:4b:2f:05:4e:96:8e:7f:ea:70:8e:75:a6:80:96:43:69:22:
f8:a2:50:1e:d6:c8:1f:71:bc:b9:27:cf:f3:4a:e8:7e:6a:e6:
01:00:db:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:57 2025 by rpki-client