Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
File: oR8gWXnS-96VdWpGoPJznXgW1Fk.mft (raw, json)
Hash identifier: faNayrJ/CT/yeZyseF16eO/542+O8z3bKPlqaWCwmok=
Subject key identifier: 9A:41:94:68:5B:0C:73:16:C7:C4:E0:62:11:10:D8:55:25:1F:39:FF
Authority key identifier: A1:1F:20:59:79:D2:FB:DE:95:75:6A:46:A0:F2:73:9D:78:16:D4:59
Certificate issuer: /CN=a11f205979d2fbde95756a46a0f2739d7816d459
Certificate serial: 0194C507FD1947364CB5F2AE2C5B191EEF20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
Manifest number: 142F
Signing time: Sun 02 Feb 2025 05:00:22 +0000
Manifest this update: Sun 02 Feb 2025 05:00:22 +0000
Manifest next update: Mon 03 Feb 2025 05:00:22 +0000
Files and hashes: 1: 6vbfFj5TD4fDaSTru2yjQXF2OFk.roa (hash: oXfLAfaVHKOErMTF1H2nSkxbh4csWsQNcGxt19vZDpM=)
2: oR8gWXnS-96VdWpGoPJznXgW1Fk.crl (hash: iNxwJhmp5+rXBj8TTabsJfDL1n5S/pXAZfXY3Qqrs6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:fd:19:47:36:4c:b5:f2:ae:2c:5b:19:1e:ef:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11f205979d2fbde95756a46a0f2739d7816d459
Validity
Not Before: Feb 2 05:00:22 2025 GMT
Not After : Feb 3 05:00:22 2025 GMT
Subject: CN=9a4194685b0c7316c7c4e0621110d855251f39ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:88:9f:d8:f1:79:58:30:c2:c7:9f:e0:93:41:
a7:fe:3b:ce:30:17:57:ad:8e:b8:24:0c:25:dc:a3:
d4:ab:f0:6f:35:50:2a:90:28:7a:ad:e2:3f:be:16:
25:04:89:87:5e:bc:dc:a2:76:c0:5e:25:7f:18:7c:
2f:4b:06:18:a5:61:d8:a6:e6:45:42:34:2a:c0:4a:
3c:89:bb:bc:5c:de:2a:1b:83:ab:53:ec:ab:ec:bc:
a2:ed:a9:8b:38:06:64:5a:ac:c6:92:d3:34:31:69:
df:58:32:e3:08:3a:ca:c1:08:6a:12:9d:9d:08:15:
5e:bd:4d:22:0e:97:8c:cf:53:ba:72:ca:63:eb:23:
6a:fb:6a:ba:ef:d1:5c:52:95:be:18:bd:cf:78:6c:
78:a7:15:e2:ee:14:95:f1:ad:1d:4c:5b:29:ee:2f:
f5:a7:24:69:6c:a5:67:92:01:0a:b6:c1:e6:91:04:
aa:4d:c3:f3:2b:9b:10:0b:40:5e:f0:50:b9:7d:dc:
df:d4:1b:fe:08:3f:0f:53:ed:16:94:05:0a:25:5d:
54:7e:09:20:82:11:4b:f4:b4:b3:6c:ac:b4:b5:01:
9e:06:8a:6c:6a:cf:9d:7a:ad:4b:a0:88:66:1c:c2:
ca:b2:01:ce:68:aa:e2:37:6a:7e:7b:14:36:df:b6:
36:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:41:94:68:5B:0C:73:16:C7:C4:E0:62:11:10:D8:55:25:1F:39:FF
X509v3 Authority Key Identifier:
keyid:A1:1F:20:59:79:D2:FB:DE:95:75:6A:46:A0:F2:73:9D:78:16:D4:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:47:8d:99:8e:e2:22:4d:d2:4c:8f:66:9f:ae:86:6e:49:e7:
0d:26:cd:cc:96:1e:35:e9:be:6d:18:f9:17:59:0a:f2:9a:77:
c8:2b:da:ef:98:1d:7e:f0:4f:0f:e8:9c:d7:27:c3:62:73:f2:
a5:ef:15:0f:17:73:35:34:5e:e9:fb:1c:e6:33:95:85:31:3a:
64:84:c6:5c:28:82:da:9e:86:69:6c:db:d7:0a:69:fe:5e:e7:
8f:e0:8c:1f:bb:10:8d:7c:56:8e:17:bf:cc:04:28:d7:0a:55:
83:9a:de:5d:2c:18:b9:3e:d4:31:2e:20:7f:7b:5b:0a:aa:ac:
64:9b:10:8c:60:30:d4:43:6f:c0:db:76:c4:18:cb:52:f6:83:
a1:c3:ae:e6:21:02:20:63:24:c1:82:69:62:1c:7e:ca:05:9a:
37:f7:8e:b8:5b:e4:ce:5e:b1:2a:da:61:d4:19:86:a3:c6:8f:
d0:00:a4:b0:32:f7:8a:b3:66:62:7d:43:88:fc:17:17:0b:97:
a6:25:bc:fd:61:9d:3f:1f:ee:d5:51:0b:c0:62:a0:9f:a6:fb:
15:c1:08:36:3c:65:bb:13:46:e2:24:8a:13:08:dd:73:a3:9a:
4c:76:82:fc:de:e2:06:5d:81:22:3d:85:58:c4:e4:e7:08:b5:
f8:b1:95:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:57:12 2025 by rpki-client