Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
File: oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft (raw, json)
Hash identifier: OCvJbyfNHdNxrPRvGk78hdHCPQwEBJywOvQcFYP883E=
Subject key identifier: 5F:00:96:FB:7D:BB:87:93:E8:65:0C:AE:25:39:D2:02:79:F7:4E:5F
Authority key identifier: A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D
Certificate issuer: /CN=a01012ec845500718cab76c9dd0af010890de26d
Certificate serial: 01951210C1E8A82185223382C28BC3E1E464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
Manifest number: 0DF8
Signing time: Mon 17 Feb 2025 04:00:42 +0000
Manifest this update: Mon 17 Feb 2025 04:00:42 +0000
Manifest next update: Tue 18 Feb 2025 04:00:42 +0000
Files and hashes: 1: 94JdYbCitrO6Jgv_ISBvhyruOI0.roa (hash: ALw/2LB5laoxpSR4lEunBO8y3yvQ4uuSEUEx3sv689w=)
2: oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl (hash: GqVDSqC4+rUgKGyQmD12cwVjLkjlLIfhwUvMlhX7iDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:c1:e8:a8:21:85:22:33:82:c2:8b:c3:e1:e4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01012ec845500718cab76c9dd0af010890de26d
Validity
Not Before: Feb 17 04:00:42 2025 GMT
Not After : Feb 18 04:00:42 2025 GMT
Subject: CN=5f0096fb7dbb8793e8650cae2539d20279f74e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2b:69:cf:dc:fe:83:9d:46:ca:bc:19:3a:4f:
2f:a8:62:0e:01:2b:4e:60:77:4c:96:b7:e3:72:f6:
ca:f2:58:23:22:cb:de:37:eb:1a:d3:47:5d:3e:9f:
e9:66:3e:a1:cc:5f:29:78:6a:b3:ee:c5:39:bb:a3:
a9:ca:e2:b7:66:13:98:4e:ec:dc:78:88:bf:88:52:
2d:33:09:3b:e3:6d:f5:24:36:59:f6:39:7d:7d:a2:
61:33:23:23:34:85:67:31:11:2c:4e:11:e4:9e:55:
8f:2b:42:06:70:6a:fe:f9:c2:9a:65:f3:12:04:bb:
a0:ba:40:e3:22:2d:95:7c:b1:fb:4e:c2:65:6f:a5:
94:9c:44:fa:5b:4d:dc:a7:0c:c4:1f:08:a0:08:b9:
59:74:3a:f4:85:df:92:27:4c:c1:db:38:d4:37:9f:
01:7e:2e:89:57:1e:0b:aa:4c:f7:68:1e:21:d9:41:
f7:dd:b4:ba:64:ce:2b:94:b4:55:ed:c7:e0:ec:e8:
bb:49:7c:de:56:b6:eb:90:48:d3:26:01:28:bb:f0:
30:7d:5f:f8:11:bd:a1:79:ad:d5:20:87:5b:3a:9b:
9c:69:08:7d:7c:b0:99:2c:1f:3c:d0:b2:03:2b:e1:
20:ca:00:2e:79:dc:db:08:cd:14:a0:31:08:6a:77:
09:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:00:96:FB:7D:BB:87:93:E8:65:0C:AE:25:39:D2:02:79:F7:4E:5F
X509v3 Authority Key Identifier:
keyid:A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:11:19:bb:03:0c:01:de:cb:89:c2:b2:f9:d5:56:fb:e6:d0:
c0:d5:12:3f:be:33:c7:11:db:f4:88:be:95:cd:b1:34:6c:99:
7f:d4:79:fb:79:c7:82:0c:7a:b6:4c:9c:f8:f0:63:3b:8a:02:
48:9d:6e:17:19:fe:68:6c:7d:6a:a1:13:c4:9c:9d:9e:7e:ea:
6a:51:7c:d7:39:b2:3e:8d:c3:d7:8e:6c:d1:ce:27:d3:a6:39:
9b:bf:48:d7:8f:e6:42:d0:f3:77:0f:59:6f:bb:27:a1:4a:b0:
68:5e:b3:6a:b1:d2:1e:c7:03:a4:38:a3:ca:e8:03:4b:82:b6:
23:31:54:c2:2c:42:11:b6:61:a0:4d:f3:e5:56:aa:6e:55:b7:
fc:0d:8b:ee:80:36:ee:60:0e:60:92:bc:b7:3f:0c:0c:03:08:
c5:b2:3e:ae:b1:ee:13:03:fe:9a:dd:52:58:da:b5:17:7e:0f:
cc:3e:30:ab:91:a2:2b:e4:33:58:c1:83:5f:20:b4:39:c7:71:
e7:c7:6b:52:60:5f:61:46:2d:14:23:38:bc:8e:e1:9d:db:35:
b5:92:c2:43:f0:2d:c9:84:d7:a8:42:e3:5c:8e:97:7b:f2:9e:
b6:68:17:6b:43:2a:6f:dd:85:f0:6b:03:56:9f:63:3a:5b:01:
dc:f1:4c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:31:27 2025 by rpki-client