Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft
File: wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft (raw, json)
Hash identifier: IDiEqQvzoBwbHR5Me1aWZFz0a4LL8vvlOlXaCtHkYB4=
Subject key identifier: 42:97:48:DE:BF:4B:22:B9:AA:9A:62:0B:00:11:BC:9F:D7:0F:FE:E6
Authority key identifier: C3:03:7D:2E:7B:09:A0:FB:D1:08:16:8A:44:87:4F:6B:D1:68:9B:60
Certificate issuer: /CN=c3037d2e7b09a0fbd108168a44874f6bd1689b60
Certificate serial: 0194BB970343AD794F96FD4C4667FAA40DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwN9LnsJoPvRCBaKRIdPa9Fom2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft
Manifest number: 1245
Signing time: Fri 31 Jan 2025 09:00:23 +0000
Manifest this update: Fri 31 Jan 2025 09:00:23 +0000
Manifest next update: Sat 01 Feb 2025 09:00:23 +0000
Files and hashes: 1: fS3aIp_dstilOoZpsHs2fT3hEwI.roa (hash: ekL2u08a8PJkCPy3xwuS3H8hi/HVcBEIiMkXY+L534U=)
2: wwN9LnsJoPvRCBaKRIdPa9Fom2A.crl (hash: dR5gW3d2o2Au18JvIxhiV5KZatf3708+aom5NfkxQEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/wwN9LnsJoPvRCBaKRIdPa9Fom2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:03:43:ad:79:4f:96:fd:4c:46:67:fa:a4:0d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3037d2e7b09a0fbd108168a44874f6bd1689b60
Validity
Not Before: Jan 31 09:00:23 2025 GMT
Not After : Feb 1 09:00:23 2025 GMT
Subject: CN=429748debf4b22b9aa9a620b0011bc9fd70ffee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b5:36:ec:50:23:81:db:6c:cd:e3:1a:16:e4:
f3:bc:a8:f2:66:c4:c2:20:29:70:6f:60:77:6d:52:
b0:a4:62:a2:50:5c:ba:ed:ff:cf:3d:c3:9d:60:d5:
c4:8a:81:40:d8:c9:8e:cf:c3:65:d7:8e:83:6c:69:
04:da:ef:0d:a1:e9:20:0c:51:1b:90:7a:ea:a7:dd:
a9:78:54:f7:74:09:c5:df:ce:48:27:d0:05:9d:36:
a4:8e:79:3d:1b:29:81:55:c7:e0:94:8a:c5:82:da:
da:eb:c0:35:5b:a8:93:52:59:2c:9c:e2:c1:cf:18:
90:50:01:aa:9f:8b:a8:c5:d6:56:10:a5:8b:a4:2e:
93:13:c4:29:84:c6:3b:cf:db:af:fe:cf:92:45:c4:
17:4d:29:a3:9b:9b:58:10:9d:87:0c:e6:70:c5:29:
40:0c:0f:dd:fb:bc:c0:fc:7a:98:ef:ea:b5:bf:de:
29:00:5c:82:55:64:8f:6b:8e:c0:58:a7:3e:b8:58:
1f:91:44:6e:41:82:cf:f9:46:4f:6b:20:ba:a7:44:
c9:48:ef:e4:14:d7:72:1a:e0:0a:c2:52:01:45:eb:
53:5d:65:c3:95:ab:c5:8e:98:9f:04:da:b8:de:89:
b2:60:21:ff:2d:f0:9c:c4:37:e5:85:5a:1e:c9:1c:
ee:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:97:48:DE:BF:4B:22:B9:AA:9A:62:0B:00:11:BC:9F:D7:0F:FE:E6
X509v3 Authority Key Identifier:
keyid:C3:03:7D:2E:7B:09:A0:FB:D1:08:16:8A:44:87:4F:6B:D1:68:9B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwN9LnsJoPvRCBaKRIdPa9Fom2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ac:a7:64:e0:54:fd:f4:ab:25:3e:fc:16:75:97:c2:7d:25:
e9:39:46:3b:b3:f3:07:74:6d:75:54:cd:20:5d:32:65:13:10:
81:e4:59:43:f5:df:a1:88:34:7c:50:f9:67:c6:68:ab:b4:a3:
b5:4a:8d:68:e6:17:0e:1b:a1:aa:1f:79:cd:5e:ed:0f:52:df:
72:14:e5:c9:8e:71:57:92:00:d9:c5:24:ee:b5:be:e4:b6:5c:
fc:a3:c2:4f:c2:d9:41:20:75:b4:18:23:e9:40:02:2a:70:c8:
d1:c4:eb:46:cf:22:28:46:9a:d6:99:f6:e7:58:8c:a2:eb:92:
12:77:88:d3:c7:14:bb:2e:52:ef:c9:4e:91:71:4d:63:24:0b:
e6:8c:38:a8:78:4c:ed:92:15:6b:76:4a:85:64:ef:27:53:8f:
2a:5b:d2:35:62:ef:b5:a3:8d:89:3f:e9:27:2a:3c:74:60:de:
f5:44:43:c3:c6:bb:13:5f:c7:c8:94:43:0c:79:f8:cc:7c:8c:
5d:a3:0f:3f:3b:34:96:dc:8b:f8:1d:14:91:30:c1:3f:1c:ed:
8e:d4:0a:19:26:9d:03:83:1d:9f:67:60:4c:f4:58:b8:3d:ba:
c2:55:54:b3:46:47:0e:fd:10:34:aa:ee:1b:9c:55:8b:eb:27:
b9:09:48:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:21 2025 by rpki-client on console-fra.rpki-client.org