Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
File: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft (raw, json)
Hash identifier: oOMjYVb/6KIheci4cN0yXqmFvmy2Ek3zj8m68Q2g+Io=
Subject key identifier: 73:D8:81:69:F2:5C:EA:2D:ED:B0:56:9F:8A:77:78:CC:2D:A2:C8:5A
Authority key identifier: A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
Certificate issuer: /CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Certificate serial: 019511D9C994DAE72627825BCCB96F504BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 03:00:40 +0000
Manifest this update: Mon 17 Feb 2025 03:00:40 +0000
Manifest next update: Tue 18 Feb 2025 03:00:40 +0000
Files and hashes: 1: Ev171PKLiWyg9kWmqIzwQq3r8Lw.roa (hash: 9HZVrssgfd6EYDzaTv+YXjEtSu5iA8YmquhpuH+g1ns=)
2: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl (hash: ZEpfKWOGysMKykKaY5LHvZ59/CXAcy4X6QSSgp+k41c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:c9:94:da:e7:26:27:82:5b:cc:b9:6f:50:4b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Validity
Not Before: Feb 17 03:00:40 2025 GMT
Not After : Feb 18 03:00:40 2025 GMT
Subject: CN=73d88169f25cea2dedb0569f8a7778cc2da2c85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:83:c9:00:50:6a:47:28:81:9b:5f:dc:25:64:
0f:46:ba:1b:7c:15:ea:2f:90:5f:44:94:6c:22:42:
8f:f1:aa:98:2a:8c:6e:6d:4a:7b:93:da:99:54:23:
e3:00:17:1d:4e:fa:34:d1:aa:ba:34:3e:de:8e:75:
cb:67:52:4d:c3:1e:07:05:04:33:01:43:93:90:5a:
ed:10:36:26:e8:e4:60:2c:56:58:72:ad:5c:31:12:
4a:6f:f8:9d:51:bc:0a:41:0f:9c:63:ee:3c:f8:ab:
d8:88:d3:2e:41:7a:15:21:e5:64:a3:48:a1:e3:bc:
7e:75:25:5a:52:c0:1d:f2:2a:65:96:6c:e3:23:42:
44:89:a4:49:47:d8:de:2e:1a:fa:d9:78:d5:49:31:
a3:c2:7c:84:5b:e8:de:aa:16:dd:ea:8b:8d:42:31:
c1:11:70:e0:fb:3e:6d:a3:4f:a2:14:7a:5f:d8:e6:
34:b0:1d:a2:bc:8e:68:ce:5b:1f:b4:50:9b:f4:b6:
06:f3:76:c2:b3:84:4c:e7:e1:05:9f:a2:47:18:57:
62:e0:3e:d8:95:07:91:86:43:4f:4a:56:07:c6:52:
b2:9b:ec:82:57:7f:ab:e6:c5:90:04:ab:1f:62:97:
de:c7:a8:4a:c7:e7:2b:45:c5:2f:a5:ff:a0:ac:ee:
fa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D8:81:69:F2:5C:EA:2D:ED:B0:56:9F:8A:77:78:CC:2D:A2:C8:5A
X509v3 Authority Key Identifier:
keyid:A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:38:3b:41:c2:fa:30:1a:35:83:b7:6c:48:aa:b1:0b:3c:16:
33:f0:50:42:3d:0b:50:40:23:6d:eb:d8:df:55:72:7e:91:ee:
dc:bd:15:f9:ff:c3:bd:12:1c:eb:90:79:3b:06:e3:8c:28:5f:
e5:87:35:80:01:67:d1:2c:bb:83:97:17:13:ce:89:dd:50:70:
5d:7f:f5:0b:ac:a2:8a:a3:2f:a3:3a:6c:44:3f:30:eb:6d:c2:
f6:a0:77:26:69:9a:3e:f1:bc:04:db:fb:e0:33:91:4f:38:b1:
e2:6a:d6:8b:61:d4:44:cd:8c:9c:e5:37:d7:00:c7:5f:05:1b:
ca:ab:21:27:b9:45:4d:2a:76:a3:bb:43:8f:24:93:6b:bd:02:
48:82:83:13:3a:70:af:72:c9:c5:05:e2:96:8c:7a:c1:05:1a:
1b:23:fc:e7:3d:5b:b2:b7:99:85:c0:9a:a0:bf:1d:b3:f5:24:
13:9a:93:9e:ae:9f:c5:81:bf:b3:71:d6:fa:e8:a6:a3:a5:47:
a0:c6:ce:ed:7a:b3:da:a6:a8:e8:7b:0e:f6:87:44:80:29:ff:
55:f4:1f:35:eb:6e:65:1c:46:c8:6f:7d:35:9d:66:a3:c5:73:
f3:9d:b5:4d:27:aa:c7:fe:d6:17:77:97:df:4c:be:a1:8b:25:
ef:b1:50:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:40 2025 by rpki-client