Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
File: oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft (raw, json)
Hash identifier: IonUbJRKggBxv1d64wfTuOSegPGGwANhRmA1tGulWyE=
Subject key identifier: 63:14:9B:72:7D:92:ED:D8:F5:0A:CE:19:C3:F6:92:23:0C:20:CC:08
Authority key identifier: A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51
Certificate issuer: /CN=a011a02e929c43f0199c8326302e24899c4a4151
Certificate serial: 01951247942FCC82D4C2B0A99EADDBBD541B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
Manifest number: 11C1
Signing time: Mon 17 Feb 2025 05:00:35 +0000
Manifest this update: Mon 17 Feb 2025 05:00:35 +0000
Manifest next update: Tue 18 Feb 2025 05:00:35 +0000
Files and hashes: 1: ZgCbU_j-D8W_yz4NxjG1uIsvyRs.roa (hash: XLCyo6svOneJBnox9Jy1GVfURxAN14ccdkNtugIRAH8=)
2: oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl (hash: ZM4hH1cmNszr76bxpLq35T5xGM8oLlJdOcuSaMilz+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:94:2f:cc:82:d4:c2:b0:a9:9e:ad:db:bd:54:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a011a02e929c43f0199c8326302e24899c4a4151
Validity
Not Before: Feb 17 05:00:35 2025 GMT
Not After : Feb 18 05:00:35 2025 GMT
Subject: CN=63149b727d92edd8f50ace19c3f692230c20cc08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:81:4c:bf:76:9a:cf:d5:25:db:07:53:40:7b:
83:be:e2:73:f8:ad:ee:b1:f5:44:ad:b8:5b:c7:bd:
51:66:52:b3:a3:f5:47:72:62:4b:c7:e2:9e:c2:03:
89:eb:5f:3e:5e:c8:87:44:55:0c:b8:1d:d0:a6:48:
0b:d5:f6:2a:58:84:94:22:75:3b:b9:bd:16:fa:b1:
5b:2d:54:39:1d:d5:9d:58:75:aa:81:9b:d7:9c:fc:
25:9d:17:b5:c6:2b:3d:16:ce:37:d1:c8:0b:6e:16:
5b:c9:57:be:05:5c:bc:72:c3:fe:c3:f5:15:49:9f:
9c:dd:66:c0:c2:7a:ea:3e:42:bc:0a:f4:5b:79:85:
b1:38:ae:c5:ab:82:45:c4:9b:d0:e6:bf:c2:02:58:
e1:a5:45:e0:49:be:cb:9d:7a:9b:44:d6:15:01:4b:
1f:1f:e9:1c:b2:2a:d1:ae:82:39:d5:a2:c7:11:af:
36:5e:24:e4:37:fc:a6:23:d1:95:53:d9:ae:71:58:
b4:7d:29:a1:94:46:1d:08:54:49:c8:4a:aa:bc:e4:
89:24:0a:77:db:19:95:a4:e3:05:39:da:db:9a:7d:
bf:26:cd:58:0f:7c:e2:ff:07:c3:74:fc:ce:90:32:
bc:72:37:70:d5:b2:05:03:56:5b:63:5c:e9:b0:7a:
ab:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:14:9B:72:7D:92:ED:D8:F5:0A:CE:19:C3:F6:92:23:0C:20:CC:08
X509v3 Authority Key Identifier:
keyid:A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f9:ed:21:af:4d:b4:67:fa:c3:11:e5:4d:4a:55:9e:ad:a1:
2e:e3:b6:03:2d:1c:36:43:74:af:d6:23:ea:6d:3c:a4:ff:9e:
25:cb:85:b9:78:a3:a5:6f:f5:52:f8:e3:be:02:49:54:9a:d1:
29:31:77:5d:72:f3:2f:95:5f:45:91:65:80:13:be:ab:b0:b9:
78:21:1b:2d:35:d2:7b:06:48:41:32:cc:c3:8b:65:20:14:e0:
55:81:99:b7:ff:ea:0a:a2:55:1b:92:51:1d:aa:25:bd:da:f9:
d8:4f:65:e6:e9:11:69:53:f8:f2:46:87:cf:17:7a:29:1f:67:
46:e3:be:a7:bb:20:ee:86:65:83:9c:be:c3:46:34:61:81:83:
98:eb:f3:61:55:a0:ce:a9:ab:43:4a:4f:4c:ec:fe:73:aa:eb:
8f:1a:01:e6:a3:98:9b:d8:0c:26:f1:6e:fd:3e:d0:57:99:b8:
a6:15:a9:20:1d:33:c9:60:2c:0a:23:30:76:9c:a9:2c:d4:db:
3f:2b:43:bd:5e:61:f1:3d:cd:f5:e4:24:b9:ca:df:6e:f8:46:
82:9a:d9:07:24:4f:cc:b1:9d:c8:f7:dc:83:a6:e6:b7:c5:9b:
73:65:e6:bc:52:4a:47:5d:27:4b:68:6c:51:37:ad:b9:fa:d1:
d7:d7:bf:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:15 2025 by rpki-client