Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
File: ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft (raw, json)
Hash identifier: A1fok0H4B81RipB5OmyFqGwJTNP4+n77ae5AXNNtDSU=
Subject key identifier: 53:3B:D5:72:A0:07:D2:B3:55:27:32:29:7B:FD:D4:CD:90:25:7A:C3
Authority key identifier: A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
Certificate issuer: /CN=a20cc67154b403145d139469886127ab629eb928
Certificate serial: 0194C350B30A09AFDE1C82AAD8F312994A4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
Manifest number: 0EA0
Signing time: Sat 01 Feb 2025 21:00:33 +0000
Manifest this update: Sat 01 Feb 2025 21:00:33 +0000
Manifest next update: Sun 02 Feb 2025 21:00:33 +0000
Files and hashes: 1: 13rU8nhg31f282Ufq4fY9epK_mk.roa (hash: 71Un032C55jpwedQZGjeiCXgaYcH9RkzCt+gCgI2Wak=)
2: DDq525mddfr-xwBo8-T-YcAlqlM.roa (hash: vbBu7r+JS7z7+nPsGEJDbq+t4cp8fYea0z6mgr+ClXE=)
3: ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl (hash: O030zMhD6C1d9cOJ9PrMs0OE9yNMn9HufKg4VWLAbiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:b3:0a:09:af:de:1c:82:aa:d8:f3:12:99:4a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20cc67154b403145d139469886127ab629eb928
Validity
Not Before: Feb 1 21:00:33 2025 GMT
Not After : Feb 2 21:00:33 2025 GMT
Subject: CN=533bd572a007d2b3552732297bfdd4cd90257ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1d:12:db:11:65:80:6f:62:a0:ae:9c:7a:07:
45:a0:6a:91:f0:4d:b8:4f:54:d6:60:6b:08:c4:fe:
7e:55:f1:dd:cd:2b:e0:56:f5:31:b6:88:6b:1d:e7:
19:ce:93:3f:66:99:92:22:2a:de:68:ef:df:0f:58:
0f:a9:a4:c5:52:38:da:15:ef:20:29:ac:21:f7:c3:
0c:46:a0:82:00:82:34:db:98:03:ad:da:73:e1:70:
9f:f4:05:0e:37:97:d9:72:41:7e:f2:d9:45:9c:cd:
e4:2d:6d:c6:51:b1:e7:d8:92:f5:17:65:c6:3e:e2:
42:02:eb:d4:bf:05:f5:dc:10:9e:5f:07:b9:bd:8a:
6f:b7:c3:c2:45:c5:3e:48:f6:61:50:8f:bd:96:61:
37:50:77:6b:a8:5c:32:2b:8c:c3:80:66:95:6b:a1:
0c:79:5f:f2:b7:7f:62:04:0f:3b:14:20:33:cb:b0:
33:ec:23:d8:ca:21:04:85:78:ec:a6:73:dd:69:3a:
f1:73:71:56:e8:b8:82:8b:3a:65:3c:9d:d5:54:44:
c7:6b:5b:25:5b:1c:90:ed:70:73:32:21:fb:2a:b2:
d5:f4:19:dc:2f:aa:e3:a9:1a:d6:07:a5:44:08:68:
8e:36:19:8f:22:07:f1:b7:36:ac:48:c5:a4:43:3b:
13:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3B:D5:72:A0:07:D2:B3:55:27:32:29:7B:FD:D4:CD:90:25:7A:C3
X509v3 Authority Key Identifier:
keyid:A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d4:a9:07:85:7d:80:48:ec:08:a2:ed:c1:71:59:fa:57:d5:
b0:6e:29:72:42:e4:26:9f:04:f5:60:a8:31:ae:6a:d0:c0:b7:
6c:46:de:ef:1f:d5:d6:3d:46:86:21:43:e0:2e:b5:7e:6c:4e:
47:44:d4:18:6f:90:57:f0:9d:d4:bf:b0:b0:64:a6:b1:b3:bd:
ba:f9:24:ca:19:fc:3d:c9:a1:f7:fc:32:89:10:cd:fe:ce:94:
9e:3c:b9:05:70:09:14:e3:66:29:65:21:de:4d:41:ac:cc:8f:
78:21:2e:b2:1e:15:07:bd:18:b3:8a:ee:ad:3b:32:55:72:97:
77:33:0f:de:96:a5:bf:a0:2d:ed:04:e0:4d:b5:db:98:f7:b2:
b2:14:e2:3e:b4:63:21:f1:15:00:cc:6f:09:d6:3d:83:88:31:
f6:43:b3:a1:50:3d:3e:cc:b1:32:de:e5:22:fa:be:fb:e4:8b:
0f:0b:99:86:10:7b:a2:d2:25:b8:3d:6f:85:93:db:f2:1f:23:
e1:ab:51:f7:d0:62:dc:4b:7b:f1:bd:c8:7a:5e:0b:ca:1b:fd:
19:aa:12:89:37:86:96:b0:52:e1:c8:6c:32:1d:d8:c0:25:8a:
b2:d8:d2:13:f5:96:78:03:57:c3:96:f1:28:bc:b0:21:70:f9:
9c:c5:2a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:52 2025 by rpki-client