Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
File: OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft (raw, json)
Hash identifier: MbHpyAm61LuZHP3QmTug77xIjzjzXbXTqPHDe715+E8=
Subject key identifier: 93:73:C7:CD:C9:64:61:3C:82:D2:EA:94:92:79:40:0D:2E:73:C5:03
Authority key identifier: 39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D
Certificate issuer: /CN=39a4603b245b1d20849df88f16ee370cc0b4390d
Certificate serial: 0194C507FB0E7F6D689E6D510AAF57668263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
Manifest number: 1D
Signing time: Sun 02 Feb 2025 05:00:22 +0000
Manifest this update: Sun 02 Feb 2025 05:00:22 +0000
Manifest next update: Mon 03 Feb 2025 05:00:22 +0000
Files and hashes: 1: HAUk0L8nWB16tKZ41rvifWUUlnM.roa (hash: z7P8z3hdUqv0dJQpV8Dg51dK3XAE9P4Hf5LV3YuSIpA=)
2: OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl (hash: h8VPV+OiuNLoRfjzcfQqEb4KDjsLo/WLHxoNKpgvnq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:fb:0e:7f:6d:68:9e:6d:51:0a:af:57:66:82:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a4603b245b1d20849df88f16ee370cc0b4390d
Validity
Not Before: Feb 2 05:00:22 2025 GMT
Not After : Feb 3 05:00:22 2025 GMT
Subject: CN=9373c7cdc964613c82d2ea949279400d2e73c503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8e:80:c2:a4:af:9b:32:3a:cc:51:e8:a2:34:
64:1f:6f:70:be:71:86:4d:a4:8d:ad:29:ca:9f:65:
ec:03:63:63:37:1a:93:0f:af:1c:ba:c9:e2:dc:ac:
e6:e0:bd:6c:7b:7e:1a:97:c7:a3:51:e0:b3:25:c4:
02:31:6a:1a:d4:8d:2a:51:74:96:df:6e:09:28:36:
82:21:9f:06:20:64:81:1e:16:89:35:5f:c5:15:c7:
d3:46:65:e8:88:07:f3:ea:8b:96:92:13:21:76:df:
1e:d9:01:3e:ee:da:cd:03:29:64:67:59:4e:43:3a:
3d:a8:69:29:75:8f:bb:ad:17:c1:6f:86:06:bd:58:
3b:db:2e:de:6c:b6:48:41:3f:ce:1e:4e:06:60:0a:
eb:dc:da:8c:40:25:e6:67:0a:6f:e3:e5:b4:70:5d:
6d:ac:26:86:c6:9d:31:f2:13:2e:cd:1f:3c:70:13:
e6:02:67:44:41:08:fb:b5:7b:19:dd:02:17:19:e3:
1f:18:ab:1d:dc:af:d1:00:45:da:20:68:db:36:19:
2f:a0:20:bc:39:1c:a0:be:59:df:48:01:be:71:94:
37:ff:00:29:f2:bf:5f:99:21:7d:fa:40:a4:fe:0d:
43:d7:3b:69:ca:7f:e5:11:b3:84:1d:26:54:e4:f9:
8a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:73:C7:CD:C9:64:61:3C:82:D2:EA:94:92:79:40:0D:2E:73:C5:03
X509v3 Authority Key Identifier:
keyid:39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:28:e0:e2:43:d0:20:36:01:84:b5:5c:c6:50:a6:3c:f8:78:
1b:49:50:7d:dd:28:82:af:5c:d1:4e:69:3e:7e:03:5c:fd:ce:
f1:71:e3:38:60:8c:e7:c8:d3:5a:a0:1d:f7:ed:d1:74:34:ed:
04:d0:26:18:66:3e:8b:b3:15:f9:e4:41:19:d8:d6:74:8a:93:
4e:f3:da:97:fc:6c:e5:98:f6:91:73:d0:5c:08:73:99:a4:28:
a2:00:14:35:8e:a9:b7:55:77:fa:26:ce:3a:d9:f0:77:1f:ee:
0d:c8:f2:56:f3:55:d3:7f:a8:aa:e6:b0:60:bd:c3:af:f5:b3:
29:8d:54:62:e6:c9:79:8d:2b:fc:b9:6b:e3:fa:58:b0:1b:4d:
80:3d:e3:39:51:d0:55:07:3d:9d:68:67:65:ab:e3:13:76:06:
b8:22:93:bb:1f:13:bb:4c:fa:26:a4:a0:33:16:a5:bc:96:eb:
63:9c:33:db:d1:ae:fc:d3:25:83:db:4d:5a:ac:76:93:c8:b7:
85:ba:f1:1d:80:ad:b8:7d:e7:98:70:a9:09:3a:c0:20:dc:54:
00:b8:1c:6f:a2:3c:9a:fc:7d:6d:4b:80:75:2d:c2:93:e9:e0:
84:c7:9b:26:22:44:b8:9f:f4:63:ca:a4:ea:5e:25:ef:40:a9:
ff:07:19:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTFB/sOf21onm1RCq9XZoJjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YTQ2MDNiMjQ1YjFkMjA4NDlkZjg4ZjE2ZWUzNzBjYzBi
NDM5MGQwHhcNMjUwMjAyMDUwMDIyWhcNMjUwMjAzMDUwMDIyWjAzMTEwLwYDVQQD
Eyg5MzczYzdjZGM5NjQ2MTNjODJkMmVhOTQ5Mjc5NDAwZDJlNzNjNTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3I6AwqSvmzI6zFHoojRkH29wvnGG
TaSNrSnKn2XsA2NjNxqTD68cusni3Kzm4L1se34al8ejUeCzJcQCMWoa1I0qUXSW
324JKDaCIZ8GIGSBHhaJNV/FFcfTRmXoiAfz6ouWkhMhdt8e2QE+7trNAylkZ1lO
Qzo9qGkpdY+7rRfBb4YGvVg72y7ebLZIQT/OHk4GYArr3NqMQCXmZwpv4+W0cF1t
rCaGxp0x8hMuzR88cBPmAmdEQQj7tXsZ3QIXGeMfGKsd3K/RAEXaIGjbNhkvoCC8
ORygvlnfSAG+cZQ3/wAp8r9fmSF9+kCk/g1D1ztpyn/lEbOEHSZU5PmKBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNzx83JZGE8gtLqlJJ5QA0uc8UDMB8GA1UdIwQY
MBaAFDmkYDskWx0ghJ34jxbuNwzAtDkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2FSZ095UmJIU0NFbmZpUEZ1NDNETUMwT1EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi81ZTE3N2YtNWY1Zi00MjE0LWE4MTEt
ZmNmMTA1ZmQyMDRjLzEvT2FSZ095UmJIU0NFbmZpUEZ1NDNETUMwT1EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi81ZTE3N2YtNWY1Zi00MjE0LWE4MTEtZmNmMTA1ZmQyMDRj
LzEvT2FSZ095UmJIU0NFbmZpUEZ1NDNETUMwT1EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPyjg4kPQ
IDYBhLVcxlCmPPh4G0lQfd0ogq9c0U5pPn4DXP3O8XHjOGCM58jTWqAd9+3RdDTt
BNAmGGY+i7MV+eRBGdjWdIqTTvPal/xs5Zj2kXPQXAhzmaQoogAUNY6pt1V3+ibO
Otnwdx/uDcjyVvNV03+oquawYL3Dr/WzKY1UYubJeY0r/Llr4/pYsBtNgD3jOVHQ
VQc9nWhnZavjE3YGuCKTux8Tu0z6JqSgMxalvJbrY5wz29Gu/NMlg9tNWqx2k8i3
hbrxHYCtuH3nmHCpCTrAINxUALgcb6I8mvx9bUuAdS3Ck+nghMebJiJEuJ/0Y8qk
6l4l70Cp/wcZWw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:06:15 2025 by rpki-client