Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
File: OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft (raw, json)
Hash identifier: 5pSJv6NVwKEH56upXHFLjfwjJVUlpgWDIubcQW9zfro=
Subject key identifier: F2:79:49:8E:1B:5C:E7:0D:59:04:32:8B:91:05:C0:E0:C1:A4:03:57
Authority key identifier: 39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37
Certificate issuer: /CN=398881e06383fd2c36e9f245c4bfa1301d15a537
Certificate serial: 0195108FFCF7B6AF160DE0C3FF8B128ED726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
Manifest number: 0920
Signing time: Sun 16 Feb 2025 21:00:26 +0000
Manifest this update: Sun 16 Feb 2025 21:00:26 +0000
Manifest next update: Mon 17 Feb 2025 21:00:26 +0000
Files and hashes: 1: OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl (hash: 6cLp1MCq3nvLZQcj8D5zy2+PI4YPbHXKxx+3PEchIqA=)
2: ZheJClH79M-pTRLGEsquKEEr6pM.roa (hash: eeP+fsrVhAPz7GiAy+y57uO8gQvXWPRMB7ruMgXE6Js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:8f:fc:f7:b6:af:16:0d:e0:c3:ff:8b:12:8e:d7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398881e06383fd2c36e9f245c4bfa1301d15a537
Validity
Not Before: Feb 16 21:00:26 2025 GMT
Not After : Feb 17 21:00:26 2025 GMT
Subject: CN=f279498e1b5ce70d5904328b9105c0e0c1a40357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ac:59:a7:44:4c:e6:93:6c:11:e2:fd:1f:1e:
17:f0:7c:96:b1:68:cd:c4:3c:9f:5d:6b:0d:34:38:
d4:83:9b:15:b7:12:0b:96:ba:3d:4a:98:1d:b1:ea:
ab:86:3a:5a:8e:23:67:75:5c:9b:69:a2:74:cd:31:
0a:d2:40:37:81:61:2b:a5:4a:e0:4b:89:fe:b7:a4:
2c:ce:c2:73:e9:a5:76:22:02:12:38:e1:9f:4f:a2:
7a:69:ee:0e:d6:2d:6b:77:e9:69:05:04:e2:3b:98:
d9:d9:d7:99:74:87:dd:a9:36:9e:4a:cb:77:54:0b:
a6:d9:44:ef:c9:d8:a5:07:c8:5a:46:82:02:57:a0:
ac:5c:10:bd:f5:3e:4f:e5:90:8c:a4:ad:d5:82:2b:
0c:27:63:d4:25:84:d5:76:08:e4:18:1f:53:ea:3e:
6d:01:6c:e7:cf:c4:44:35:08:6c:88:ee:a4:78:51:
c4:4e:00:d8:39:8d:40:01:21:60:73:b9:83:42:3e:
2b:ef:fc:85:57:5c:d8:bc:57:5d:bf:9e:86:9b:2f:
9e:d4:9d:7c:a3:75:63:a9:bf:c1:b0:cc:0d:59:9d:
31:ab:a1:f5:5d:e0:56:10:c6:6c:37:72:b6:5c:d6:
ef:5e:2a:2f:37:b8:70:d8:4b:ab:ec:42:96:a8:0f:
0d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:79:49:8E:1B:5C:E7:0D:59:04:32:8B:91:05:C0:E0:C1:A4:03:57
X509v3 Authority Key Identifier:
keyid:39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:1c:c1:23:2e:d2:38:7c:2b:33:8a:75:3a:67:a2:2c:04:e5:
40:22:14:cb:6a:3d:f2:ff:74:27:8f:44:68:3c:7d:5c:45:3f:
10:11:4a:77:a3:c2:5a:68:f1:23:0e:a1:13:a4:26:51:a9:72:
be:ae:d2:14:7c:ab:5a:e7:9f:33:b0:7f:2b:2f:b5:a0:44:aa:
0d:95:d0:db:c1:e8:30:1d:f1:39:0f:e3:96:6e:6d:aa:c9:9b:
71:fb:11:0e:a4:91:b4:19:7e:e6:4b:8a:94:08:27:53:e1:55:
06:13:45:c5:32:a7:51:ab:46:93:ea:d8:90:79:26:b8:33:dc:
28:6b:47:91:a9:bf:96:a8:bc:4b:48:5d:57:27:cd:ee:e1:a7:
0d:22:1f:73:44:bd:0f:63:17:d8:2f:84:c9:1f:8f:6a:a6:b4:
99:5c:1f:be:2a:68:89:e0:4b:47:2f:50:83:25:aa:56:6d:1a:
47:ca:b0:80:e6:8f:59:f7:7b:f8:86:b7:11:08:ae:6d:0a:ef:
7c:0c:f3:14:c2:e6:9d:21:bf:1c:06:d0:17:13:c9:07:69:84:
3a:c9:fe:78:eb:a5:eb:21:44:fd:8b:b2:c2:b5:26:cc:ef:0e:
3a:07:52:7d:9b:25:f9:83:bd:1b:d1:a1:2d:e9:30:99:d0:e4:
b5:b5:56:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:27 2025 by rpki-client