Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
File: OA3Z5zVccsdR__TxddrOfap7nL8.mft (raw, json)
Hash identifier: ba3WilEHJ6fGTJcdJt6lXoisyPwvXJhxQQMFp54i8w0=
Subject key identifier: 9C:99:65:80:BE:4F:CB:9A:B8:03:BC:C8:67:74:AB:A1:DC:42:EB:D8
Authority key identifier: 38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
Certificate issuer: /CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Certificate serial: 0194C4D1687F6EC7B3D8942715EDE2FE4B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
Manifest number: AD
Signing time: Sun 02 Feb 2025 04:00:45 +0000
Manifest this update: Sun 02 Feb 2025 04:00:45 +0000
Manifest next update: Mon 03 Feb 2025 04:00:45 +0000
Files and hashes: 1: OA3Z5zVccsdR__TxddrOfap7nL8.crl (hash: X4OouLjfGP0ooO64VPSrPL519gDJK4cwczdjyqXHkcM=)
2: kXbHyNgTaS4VSl7iNXExbL4omTQ.roa (hash: OHwa8ZLjzHYPPIqn4XloQ0JQlOD6SyKesyHnojZd1NI=)
3: ojtOox8Wt7SMQ6_zO5wsZAGpkD4.roa (hash: peaSBJk7FlakYQEu3Xb5IumLjSrReNSbyW/hip0rUPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:68:7f:6e:c7:b3:d8:94:27:15:ed:e2:fe:4b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Validity
Not Before: Feb 2 04:00:45 2025 GMT
Not After : Feb 3 04:00:45 2025 GMT
Subject: CN=9c996580be4fcb9ab803bcc86774aba1dc42ebd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:43:0b:8f:05:46:82:29:43:74:c2:27:93:56:
7c:65:be:7c:5f:50:9e:db:02:71:f4:f8:28:b1:f5:
9c:f2:69:b2:73:e4:64:3f:e8:72:48:b9:93:1d:6f:
c4:a6:7b:30:d8:a9:b3:be:6d:5e:63:7e:c0:77:db:
80:53:ea:00:96:5f:0d:dc:25:d7:c5:4f:73:64:77:
82:41:ce:91:7d:19:9b:7e:c0:55:8e:1d:00:56:32:
71:82:58:74:e3:14:a3:89:9f:69:47:0a:45:0f:a7:
65:81:81:be:08:5f:a3:c6:e3:a1:db:a5:77:7b:b3:
0a:91:ce:f7:79:91:87:ea:1b:fd:06:58:1a:d7:cf:
1f:fe:82:85:ee:05:a5:30:a3:49:61:3e:e0:49:4a:
02:04:97:fa:b4:14:f3:c1:d0:a7:75:c6:30:89:bf:
37:6a:90:50:a3:2d:d4:6f:79:90:74:ae:e9:a1:d3:
d9:72:a0:af:98:03:be:95:c3:c2:45:cf:c3:fa:25:
db:4c:e0:31:e5:5e:71:c7:2b:98:e1:5e:e4:90:35:
0c:ed:cb:ee:d7:01:cf:ed:7f:0a:54:47:30:ab:2a:
b8:21:51:15:40:63:8f:30:0e:48:2c:cb:85:35:96:
67:e1:de:78:79:a5:af:ae:f3:05:e5:68:19:a6:ae:
d4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:99:65:80:BE:4F:CB:9A:B8:03:BC:C8:67:74:AB:A1:DC:42:EB:D8
X509v3 Authority Key Identifier:
keyid:38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a8:4e:31:1e:e9:17:d7:4f:be:2c:dd:8b:d7:c9:39:90:47:
57:c1:f6:10:ce:4e:ac:fc:e3:ed:49:eb:46:de:b7:4e:7b:26:
c7:1f:a1:b2:f9:0d:92:e7:55:f3:b3:21:b5:7b:c1:74:a9:6e:
c6:e4:58:bc:f4:f1:52:14:cb:c0:19:91:b9:cc:37:e1:aa:72:
03:f7:3d:87:cf:f3:0d:a7:9f:70:31:7f:dc:42:9e:30:e1:0c:
d4:86:72:27:28:0f:06:4e:14:e0:2d:8c:f8:97:c2:0f:94:e8:
40:65:a5:6a:c8:81:e5:69:85:73:12:b3:3d:52:77:f6:e6:1a:
2c:95:34:17:2b:47:b8:75:5e:53:54:b8:08:37:e3:a9:89:25:
f3:83:58:1d:36:31:4a:0f:35:45:a6:c4:43:fb:cb:73:ed:d9:
dc:9d:cc:63:f0:4a:b1:dd:ee:80:96:ce:ca:dc:6d:01:33:08:
1c:37:2b:62:39:11:d0:c9:ea:04:e3:6e:f0:12:d1:ce:7e:ca:
ae:c1:4b:f1:20:ef:dd:3f:b4:1d:85:f5:94:c4:5d:33:a6:bc:
ff:95:a2:4a:9b:b8:aa:a5:75:87:4f:f8:71:b2:47:7a:ff:04:
a7:6b:6a:fa:79:15:0f:ac:1b:2d:55:d7:e9:7f:94:fe:c9:76:
35:72:52:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:04:55 2025 by rpki-client