Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
File: O8o0owNBd9CEM40zsIm34DzKOoo.mft (raw, json)
Hash identifier: 8QSWBTqNbizj/52UbiZOO2r/75g/VZ/bHQKYN+mZ6x0=
Subject key identifier: E5:58:4C:FB:7A:BB:37:C1:14:15:65:06:1A:1D:A2:2B:4E:B2:2A:52
Authority key identifier: 3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
Certificate issuer: /CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Certificate serial: 0194C4630784E7DD50417A4020729A835675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
Manifest number: 07F4
Signing time: Sun 02 Feb 2025 02:00:11 +0000
Manifest this update: Sun 02 Feb 2025 02:00:11 +0000
Manifest next update: Mon 03 Feb 2025 02:00:11 +0000
Files and hashes: 1: 9gtsAx5FJEnGGDpA05vpeEmKqKo.roa (hash: o4FWNQc0AMne1CzN76Z/FZhfpanxpLPH29H5fHhS0kY=)
2: O8o0owNBd9CEM40zsIm34DzKOoo.crl (hash: ZAF7Qi0mmmcqKdTp6GLPcZvqgnsSH5fThbCtR24ap/Q=)
3: hLarQu01JmUX4vnwkcXB98ezIuw.roa (hash: iDJuyq+rVzU9ZgKvDwW/L+MmLaOlvdq9nbxde1XNlsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:07:84:e7:dd:50:41:7a:40:20:72:9a:83:56:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Validity
Not Before: Feb 2 02:00:11 2025 GMT
Not After : Feb 3 02:00:11 2025 GMT
Subject: CN=e5584cfb7abb37c1141565061a1da22b4eb22a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:a5:f4:1f:c5:19:e7:29:b1:9d:ae:3b:8b:
d7:53:05:73:30:d1:73:bd:29:8f:91:b4:71:92:2c:
80:f7:79:b6:10:ed:87:4c:ec:98:dc:52:d5:98:5c:
4c:db:4a:94:98:50:3c:23:6c:07:89:f3:80:01:20:
46:94:c3:c3:2c:97:32:5b:da:76:ee:2a:e6:2c:fb:
86:0c:dc:f3:e8:c9:1e:43:14:c2:d3:9a:c2:b9:ef:
1a:8c:3c:90:b3:3f:df:93:e7:84:28:39:8a:2b:65:
70:67:84:2c:3d:0e:8e:b8:14:56:47:eb:60:72:db:
82:8d:8b:fe:00:16:2b:7d:39:08:fb:83:a9:74:61:
48:ee:a5:a6:57:50:18:3b:87:5b:ce:fb:0e:77:66:
4d:61:74:d2:e8:f4:34:cf:04:52:c6:38:33:6e:b1:
a2:39:a2:d0:de:ae:f4:e3:e7:53:b1:b8:50:d1:2b:
ac:d8:69:e9:ec:9f:66:03:72:06:48:64:ea:a6:6f:
2c:33:9d:51:96:57:ac:7b:a7:66:ec:b1:f9:99:ae:
bb:0d:b2:b4:83:5a:2d:fa:39:ee:3e:e3:14:f9:d1:
86:d1:57:ec:fb:15:10:ba:0b:60:56:63:ea:cf:78:
48:86:c4:8d:f1:3f:0c:93:d8:cc:6f:92:93:0c:75:
40:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:58:4C:FB:7A:BB:37:C1:14:15:65:06:1A:1D:A2:2B:4E:B2:2A:52
X509v3 Authority Key Identifier:
keyid:3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:79:16:7f:7d:42:d9:8b:57:2c:ee:5b:7e:58:d5:49:39:8f:
51:15:7d:4f:04:da:9a:21:32:dd:be:b0:39:ca:93:c2:d0:7a:
cc:16:23:73:20:13:a0:0a:e9:46:6c:00:dc:80:e5:78:7c:d2:
23:ee:f8:ed:5a:85:21:e8:76:f8:09:d4:2e:65:94:15:b3:9a:
75:05:aa:cb:33:e0:a8:d6:7d:15:81:f2:b1:22:cd:9b:65:09:
b1:7e:56:45:8f:de:53:40:a4:c2:a7:9f:66:3c:ce:c0:7b:70:
4f:4c:75:90:71:9d:85:75:1c:aa:f6:ec:96:d1:40:48:34:04:
95:0e:3a:5d:06:3b:4a:fb:9b:7b:59:f8:f3:c4:9c:67:85:6a:
a4:4a:ab:ee:b6:52:06:67:e0:8b:0d:fb:3f:73:74:97:ca:cf:
7d:ea:48:35:b0:ae:32:19:b0:e9:7b:09:af:52:d4:30:75:9d:
47:7a:9f:2e:92:0c:49:66:83:56:89:6d:9b:e0:1d:5a:33:45:
43:5f:af:47:9d:5b:d9:2e:c0:7b:c4:8c:96:1a:df:2a:00:d1:
b7:37:b8:4d:dc:26:b7:9d:6f:7f:f1:1e:e2:0b:86:5d:72:55:
e5:d2:1b:d6:7f:4b:2f:cc:ef:42:83:ad:6b:b5:f2:91:e7:7f:
63:b3:f4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:04:46 2025 by rpki-client