Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
File: OBLJfb0yGVtq-pEUC1UgteDCxb4.mft (raw, json)
Hash identifier: hTiT9/bO+3YKhcrShmQWyC57rO7qEhbEb1HOCe9wSMA=
Subject key identifier: BB:9F:B7:72:88:CB:4B:2B:7B:2F:B3:4B:AB:87:80:A0:7E:0B:DC:44
Authority key identifier: 38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE
Certificate issuer: /CN=3812c97dbd32195b6afa91140b5520b5e0c2c5be
Certificate serial: 019510C77B19C270A8ED5E9301068A8F501B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
Manifest number: 119B
Signing time: Sun 16 Feb 2025 22:01:03 +0000
Manifest this update: Sun 16 Feb 2025 22:01:03 +0000
Manifest next update: Mon 17 Feb 2025 22:01:03 +0000
Files and hashes: 1: KgcCICa_-hixWZTTUELiCMTd1qc.roa (hash: aB/2vvsZVUV2pqutYR0WS2bhu7nsx+1f1yx0LZyC04o=)
2: OBLJfb0yGVtq-pEUC1UgteDCxb4.crl (hash: QMbaaeCCLlTaXCcMx21L74w89Hz2GNMrxEJjOmXRvCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:7b:19:c2:70:a8:ed:5e:93:01:06:8a:8f:50:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3812c97dbd32195b6afa91140b5520b5e0c2c5be
Validity
Not Before: Feb 16 22:01:03 2025 GMT
Not After : Feb 17 22:01:03 2025 GMT
Subject: CN=bb9fb77288cb4b2b7b2fb34bab8780a07e0bdc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a5:06:f9:78:88:ff:f9:87:25:ba:23:21:a7:
12:99:5c:31:49:b6:1f:10:b1:70:0f:ae:59:2a:ea:
6e:2f:88:39:0a:ac:7c:3e:f6:82:e9:f8:dc:5b:3e:
8e:09:73:10:49:3e:b6:3a:ca:65:24:7a:02:d3:f3:
9b:b6:a1:18:64:13:c5:e5:44:03:1f:38:df:78:e6:
5d:af:ad:a5:ee:2d:0a:8c:4c:af:5d:eb:62:a2:96:
67:b1:87:76:af:99:a1:7b:69:e8:f5:4f:c8:32:52:
85:85:fb:15:18:16:7e:36:80:4e:3a:d8:12:d3:f5:
37:5e:6c:e0:33:b3:7f:4d:4b:d3:e8:40:11:80:58:
3b:ce:e0:f1:08:43:18:75:8f:9c:2b:c3:2e:70:b6:
1e:d4:61:73:14:f3:bf:1a:fd:2b:65:f2:f9:6d:f0:
2e:04:95:8b:0c:22:db:d2:e3:78:e8:a7:98:d8:0b:
96:c4:2e:b5:0d:34:5a:5a:96:95:4b:ff:53:00:79:
82:4b:08:ec:d6:bb:d1:28:98:1c:b3:10:2a:59:a3:
28:c9:54:b4:7c:8a:5e:3c:43:b6:b8:19:20:3f:f0:
03:a7:62:7e:f5:11:75:10:ee:d7:19:ce:dd:d0:b8:
c7:b6:bb:46:ce:85:75:7b:a3:8d:cd:bc:5c:4e:72:
6f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9F:B7:72:88:CB:4B:2B:7B:2F:B3:4B:AB:87:80:A0:7E:0B:DC:44
X509v3 Authority Key Identifier:
keyid:38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:90:c3:15:f7:d9:9a:29:91:2d:b3:34:0f:de:3b:d0:5f:04:
dd:16:51:d8:50:f7:b0:eb:47:d4:00:8b:85:c3:7c:ae:2c:20:
46:ce:a2:f3:b1:3e:23:9b:76:ba:89:11:f9:0e:99:c9:43:89:
6b:fe:c4:0f:5f:9b:9f:bf:77:f2:ad:6e:97:df:53:44:96:be:
95:d7:c0:e8:3f:6d:70:a2:4a:cd:a2:ca:b6:37:15:7e:43:b8:
92:9f:c0:fc:41:a3:0c:af:cd:fe:90:d5:fc:ea:b6:4f:cc:01:
10:6d:e7:7b:fe:d0:a6:3c:df:df:c8:5a:0d:1e:ae:29:d6:68:
49:8e:3a:5b:24:9d:c5:9f:33:02:24:12:d4:f1:4c:13:90:14:
e3:0e:67:3a:cf:91:02:aa:97:86:03:e5:87:40:3f:81:f3:8c:
f4:7d:45:98:70:11:d3:6b:b2:15:61:80:b7:b2:27:0f:d4:e3:
4e:fa:a2:db:04:fc:d5:3e:92:cf:98:a8:14:c9:3f:bd:57:6d:
99:7a:6e:41:98:9c:32:e6:3d:49:a6:c5:45:98:b7:66:b5:3d:
1e:ad:2c:65:e2:58:2b:3c:6f:06:91:80:31:8a:25:e8:4b:80:
70:eb:7a:40:5a:ba:54:26:69:1a:2d:37:7b:8c:7f:38:e3:57:
69:ec:69:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:04 2025 by rpki-client