Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
File: OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft (raw, json)
Hash identifier: fK+OHeTmArNJp6F0LdWQziNJ1Z3heOPxPwrYe3tBD8s=
Subject key identifier: AB:A9:AB:B1:62:0C:9D:D6:9E:AF:4A:F2:6E:52:75:48:A9:E1:D3:E8
Authority key identifier: 39:8F:71:06:BE:D1:0F:E7:FF:C6:5B:BD:64:AD:BE:DC:9D:BD:52:5E
Certificate issuer: /CN=398f7106bed10fe7ffc65bbd64adbedc9dbd525e
Certificate serial: 019510C6D176C050D6850E915AA64FDC40C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
Manifest number: 13BD
Signing time: Sun 16 Feb 2025 22:00:19 +0000
Manifest this update: Sun 16 Feb 2025 22:00:19 +0000
Manifest next update: Mon 17 Feb 2025 22:00:19 +0000
Files and hashes: 1: 8iSreq9sFy4jQpPohIGSY5mGVho.roa (hash: JWocgKBNIhnSVWHkP0cAfvpMZaqkdklTc5KStlxqdMY=)
2: OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl (hash: QuR7NKsk5zvIipgaiH7H+81cXVAYc1EN77YZoEbX1YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:d1:76:c0:50:d6:85:0e:91:5a:a6:4f:dc:40:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398f7106bed10fe7ffc65bbd64adbedc9dbd525e
Validity
Not Before: Feb 16 22:00:19 2025 GMT
Not After : Feb 17 22:00:19 2025 GMT
Subject: CN=aba9abb1620c9dd69eaf4af26e527548a9e1d3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:13:b9:57:ed:93:15:a3:af:53:4e:27:49:0f:
c1:26:95:27:d1:e6:bf:db:01:d2:2a:1b:2d:be:c4:
38:f5:49:e3:57:5b:29:0a:56:95:b0:bb:c6:86:60:
b4:5f:77:54:41:5d:32:e3:ee:84:b7:c7:e3:c9:74:
4c:09:e2:18:80:c4:ba:93:fe:fc:9a:7c:cf:5d:fc:
d4:7c:17:ba:b7:47:f0:f5:bf:88:07:c8:63:24:b2:
33:09:65:1f:ca:9e:c9:91:34:1b:25:ca:9e:c5:67:
73:13:4a:1e:a3:6c:ec:0b:33:35:47:ae:3d:c5:a2:
c5:5c:74:c1:27:a5:06:7a:c1:1f:6a:c6:88:cb:0d:
67:24:0c:b1:7b:58:14:74:6f:5d:85:53:ec:70:e6:
6f:52:48:b8:a8:ec:29:90:d2:37:e9:db:89:45:dc:
e6:9d:b5:1c:6f:05:f0:39:df:c1:2a:d1:32:ac:45:
88:62:04:28:85:b3:73:6c:94:1b:33:72:43:f8:4e:
51:57:ed:5e:51:37:f1:10:67:7a:03:9f:93:8e:30:
0e:58:66:34:b1:f3:ed:b6:03:1d:84:fa:03:25:27:
b9:30:11:16:b2:3e:b5:67:67:4f:67:cd:72:78:fc:
d3:81:51:65:f5:f1:31:81:61:6b:4b:66:e5:e7:f1:
a6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A9:AB:B1:62:0C:9D:D6:9E:AF:4A:F2:6E:52:75:48:A9:E1:D3:E8
X509v3 Authority Key Identifier:
keyid:39:8F:71:06:BE:D1:0F:E7:FF:C6:5B:BD:64:AD:BE:DC:9D:BD:52:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:54:c1:48:0d:ab:09:d2:73:f7:d1:6f:0f:a7:ba:98:0b:f9:
8c:cc:fb:b0:e8:2e:1e:8a:da:95:9f:80:ec:07:b9:27:a6:41:
f1:37:16:48:c0:ec:96:be:3b:e9:ff:46:d5:1f:e8:20:48:fa:
70:5e:8d:92:67:4b:fe:f7:39:41:e9:f8:ab:41:87:2b:01:cf:
da:37:f7:37:d2:af:1a:e4:1c:79:4a:b8:e7:08:7a:8c:7f:8d:
cc:de:60:42:57:d2:9c:5c:50:b0:6e:a0:77:87:48:5a:a3:66:
a3:4c:4f:bd:8c:55:cd:ba:e2:02:4a:ea:61:c7:1b:32:c8:47:
50:c6:02:e7:42:20:ad:22:2f:76:45:63:c2:b2:20:00:87:f7:
4c:35:97:93:4f:ed:4d:d7:9f:44:71:cd:49:ab:8d:3a:a7:81:
d2:34:89:c3:55:49:3b:e0:68:67:a8:a2:14:7d:d5:2e:c0:ca:
f9:5d:aa:f2:d3:89:f3:65:20:04:36:52:be:59:6c:52:6c:28:
47:f5:cc:8b:5d:86:9f:4b:90:5f:3b:c1:b3:52:ba:9d:b6:64:
c2:d8:11:ba:5b:d3:81:2b:4f:1c:d4:84:08:b8:f7:3f:9a:84:
41:e8:f5:03:fa:e3:d0:2d:b0:ef:9d:59:20:ae:90:c4:e2:66:
68:f5:ad:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:23 2025 by rpki-client