Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.mft
File: o6mFw54-kRuYDpOgZkAVfp4FLSM.mft (raw, json)
Hash identifier: LMm6XiQG27oK62f85qUrhoTyRkgMtHL/7sHPvBDPal4=
Subject key identifier: 73:A8:B7:05:56:DF:D2:AE:2A:1B:C8:A5:DB:5F:1C:74:3B:C4:73:B6
Authority key identifier: A3:A9:85:C3:9E:3E:91:1B:98:0E:93:A0:66:40:15:7E:9E:05:2D:23
Certificate issuer: /CN=a3a985c39e3e911b980e93a06640157e9e052d23
Certificate serial: 0194C4D126A99FB6AA5768E75977E7D967AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6mFw54-kRuYDpOgZkAVfp4FLSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.mft
Manifest number: 0F9A
Signing time: Sun 02 Feb 2025 04:00:28 +0000
Manifest this update: Sun 02 Feb 2025 04:00:28 +0000
Manifest next update: Mon 03 Feb 2025 04:00:28 +0000
Files and hashes: 1: 3REEAprnZIBusO6q6WWrCX9P-HM.roa (hash: vH8qgeYWcERpU9E7qeOHsrxBazYwgyfC550mI+D0FkE=)
2: PYHZmBGQVm6qfdBJdxdjvraE_TE.roa (hash: 1636pEj+Ysk8BXs8R24x5ID69mQlJkn8VfyV6uxXy1w=)
3: o6mFw54-kRuYDpOgZkAVfp4FLSM.crl (hash: DeX0+hL3agae00lFeNlIdc0fB0qZSNPvD94HmDrJXkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6mFw54-kRuYDpOgZkAVfp4FLSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:26:a9:9f:b6:aa:57:68:e7:59:77:e7:d9:67:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a985c39e3e911b980e93a06640157e9e052d23
Validity
Not Before: Feb 2 04:00:28 2025 GMT
Not After : Feb 3 04:00:28 2025 GMT
Subject: CN=73a8b70556dfd2ae2a1bc8a5db5f1c743bc473b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:1f:b3:a1:2d:7a:0c:da:fb:33:4c:bf:92:
6a:9d:5d:63:56:4a:71:5d:78:fc:fa:f6:0a:b3:dc:
7d:d1:df:5e:82:59:d5:a4:40:97:20:96:bd:2c:27:
47:90:6a:3e:98:25:3e:35:46:50:c7:5f:3c:02:b6:
52:05:44:b6:5f:b2:e1:48:53:8a:ac:92:12:c5:3f:
6c:19:d3:e9:13:f5:a5:bb:29:bc:22:d5:5a:9a:d5:
ba:c6:68:84:1c:64:a0:58:e5:3c:4f:93:f8:df:e1:
8d:ec:39:c9:51:04:1e:59:70:15:f1:dc:8c:6d:62:
bc:9e:38:4d:cf:2a:a8:e4:f8:99:bc:44:a8:d2:04:
be:f9:26:20:91:52:bf:30:82:51:ea:78:64:75:68:
8a:e8:35:15:b9:52:af:ea:6b:08:b5:08:12:f6:68:
b1:a0:9f:a2:91:50:49:22:6b:a5:60:aa:b1:16:88:
2e:41:30:01:16:fa:07:7a:f0:d9:bd:7a:d7:ef:ee:
c3:26:c2:25:b4:d3:7e:05:79:9f:98:54:4b:c2:c5:
5b:a8:fd:4b:84:95:ac:31:b8:16:19:c0:37:93:f9:
42:43:83:75:65:f9:a9:c4:74:cd:5a:b2:2d:b7:a5:
6c:26:cb:7c:a9:2f:06:17:c3:2d:d4:7c:05:c7:60:
71:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A8:B7:05:56:DF:D2:AE:2A:1B:C8:A5:DB:5F:1C:74:3B:C4:73:B6
X509v3 Authority Key Identifier:
keyid:A3:A9:85:C3:9E:3E:91:1B:98:0E:93:A0:66:40:15:7E:9E:05:2D:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6mFw54-kRuYDpOgZkAVfp4FLSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:7b:21:91:fd:85:71:55:a9:5d:b2:0a:ed:75:d8:da:a2:0b:
3e:6f:79:c0:2c:6e:93:58:e6:46:0d:02:c1:f5:b9:ec:96:7e:
d5:21:5b:4e:87:35:d9:a8:7f:04:fc:77:85:1b:7b:9d:07:09:
2c:e1:57:57:b5:b0:04:e8:f1:34:c7:bb:19:2a:bb:a9:e3:e7:
76:37:23:15:cb:58:bf:7d:44:4a:47:bd:3c:8c:ad:f2:0b:68:
62:4f:de:2a:67:e9:6a:de:78:85:0f:5d:42:8e:50:ec:47:06:
c3:69:5d:05:0b:56:43:cc:a6:48:b4:9e:3d:9e:8c:ce:d0:ad:
7d:00:1a:5c:0d:e6:8d:db:cd:22:d6:8e:e6:63:58:97:a6:90:
87:6e:fb:e0:f0:f4:18:2c:37:5f:ee:75:1f:ce:5d:66:16:76:
6e:14:4a:ef:c8:3b:0f:01:aa:e4:f1:ec:46:f8:64:eb:a5:75:
0d:8f:fc:a4:ae:f4:4d:22:85:ec:32:73:1b:c1:e1:b3:1e:16:
77:5c:86:84:49:10:cb:c7:f1:d3:fb:de:d2:af:20:8e:a8:9f:
fa:13:1e:1f:29:25:18:06:6a:e3:f6:b3:46:5c:f0:82:27:a1:
00:04:43:af:47:2c:08:35:f5:8b:0c:cf:fe:38:94:61:bb:92:
26:6e:55:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:55:23 2025 by rpki-client