Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
File: oDXttQZCEUQxra7YvFBeaFWcrUo.mft (raw, json)
Hash identifier: JrH09kb3om7mH2nonKLMZSLUxKlAXoAICE4cHpESc/c=
Subject key identifier: 8D:46:B9:72:CC:00:A0:5D:7B:40:F6:64:EC:4C:42:CC:84:60:8B:80
Authority key identifier: A0:35:ED:B5:06:42:11:44:31:AD:AE:D8:BC:50:5E:68:55:9C:AD:4A
Certificate issuer: /CN=a035edb50642114431adaed8bc505e68559cad4a
Certificate serial: 019510FDCB3E1E080BCB76CEC74B6745FB8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
Manifest number: 0165
Signing time: Sun 16 Feb 2025 23:00:22 +0000
Manifest this update: Sun 16 Feb 2025 23:00:22 +0000
Manifest next update: Mon 17 Feb 2025 23:00:22 +0000
Files and hashes: 1: oDXttQZCEUQxra7YvFBeaFWcrUo.crl (hash: fDS3UUOORYY/MsBpgHK248tsttRPLuyONbOAi8ixtkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:cb:3e:1e:08:0b:cb:76:ce:c7:4b:67:45:fb:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a035edb50642114431adaed8bc505e68559cad4a
Validity
Not Before: Feb 16 23:00:22 2025 GMT
Not After : Feb 17 23:00:22 2025 GMT
Subject: CN=8d46b972cc00a05d7b40f664ec4c42cc84608b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4d:9e:36:22:ce:11:e8:79:4c:fa:43:d3:2a:
15:ef:97:ca:87:3d:37:8a:0c:51:27:bf:ae:85:53:
df:63:e8:1c:d4:b9:9a:42:cc:dc:32:e6:cb:f2:dc:
48:c0:66:75:b8:1b:99:5f:d9:06:74:cb:e2:30:ea:
24:cc:79:88:d9:62:95:ef:90:e6:24:90:80:63:25:
e0:55:50:35:6f:8f:29:2c:44:b8:73:14:88:4b:d3:
7c:5d:75:9d:f6:d9:a4:29:fa:21:2d:17:e9:f3:d0:
06:b6:f2:17:2a:08:bd:02:a1:b2:8f:44:f3:bc:dc:
99:af:d4:81:18:41:d6:33:7b:ab:3e:d3:31:82:41:
b6:38:1b:4f:37:67:2c:ee:15:30:7c:f9:1b:d8:f4:
78:fa:93:0c:49:b9:42:09:a8:6b:6d:39:0f:37:cb:
ae:e8:c0:63:94:7e:e3:c2:d8:e7:20:c4:92:2d:0e:
70:d9:41:e7:73:da:35:4c:fa:ce:79:0d:5f:a1:7c:
dc:1e:ca:36:28:71:09:97:d2:17:66:2b:81:7b:c3:
c8:61:58:5b:07:60:09:af:56:0e:5d:eb:69:20:2a:
b6:26:12:09:b0:e5:6c:ef:4b:bb:06:e6:3f:7a:57:
6e:d8:7f:cd:0c:a8:cd:9a:c5:ab:64:7b:38:e3:0d:
d8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:46:B9:72:CC:00:A0:5D:7B:40:F6:64:EC:4C:42:CC:84:60:8B:80
X509v3 Authority Key Identifier:
keyid:A0:35:ED:B5:06:42:11:44:31:AD:AE:D8:BC:50:5E:68:55:9C:AD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ac:b6:b7:9d:ce:c1:9a:b2:32:67:f9:ab:c2:eb:3e:91:cb:
13:18:7a:f4:d2:c4:0f:78:c0:2d:56:7b:ac:86:8d:0d:12:71:
0a:c6:61:25:3b:8d:2c:47:a8:9e:8e:af:4c:9a:7c:8c:20:7d:
ac:9c:24:11:61:fa:3c:19:15:56:84:de:80:16:09:7c:00:af:
34:c1:e0:fd:ef:5a:9c:cf:63:24:28:47:62:3f:66:5f:aa:79:
80:8b:40:c2:80:32:89:07:e9:13:92:40:bb:8e:0f:83:3b:00:
71:d3:b3:66:a0:c5:27:84:74:e6:00:ef:ee:fc:8b:e9:a9:67:
98:8f:8c:1d:21:9d:81:cc:12:24:0f:45:00:2b:b4:b3:03:f0:
16:71:6e:45:d1:d2:bf:8b:44:d4:45:46:88:35:ff:6a:3e:80:
8a:cf:3c:9c:e0:e3:df:eb:78:c6:f8:11:c4:6c:2c:c4:9b:21:
56:05:38:06:99:c6:21:b7:83:6e:6f:28:fb:26:17:15:4d:50:
9c:fd:98:78:c3:2c:b3:9b:48:41:e0:9e:99:e5:03:12:4b:8f:
c7:93:f9:78:40:de:2f:d7:ec:5f:09:00:71:38:c0:0c:1f:c7:
91:ad:9b:00:6d:12:bb:34:37:11:a3:e3:93:ba:81:38:36:f3:
ae:57:eb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:25 2025 by rpki-client