Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
File: fWjefEcC_lCTLX7NovJ4OR9Lms4.mft (raw, json)
Hash identifier: 3UZ8VCsHGkRgT4BzHhai47eEbqg6ZtCBKdGcghSA3Uw=
Subject key identifier: 9A:19:EB:6D:A0:AF:A0:3C:3C:EF:28:09:75:47:45:84:D7:59:E2:5C
Authority key identifier: 7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE
Certificate issuer: /CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace
Certificate serial: 0194C42C310C617D0D7AB8A227734E9FD5AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
Manifest number: 039C
Signing time: Sun 02 Feb 2025 01:00:17 +0000
Manifest this update: Sun 02 Feb 2025 01:00:17 +0000
Manifest next update: Mon 03 Feb 2025 01:00:17 +0000
Files and hashes: 1: fWjefEcC_lCTLX7NovJ4OR9Lms4.crl (hash: n5p8nNPGMSAhxL0xZs/PAgUWaKv+qpEAG0ZWFCBmCKM=)
2: mDBp1oBkdS9R1kWQaeI8ZMPDoX8.roa (hash: A++zVXL1KytgjPo0U8Uvn5ms+5UtCdFa04StDMBXv54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:31:0c:61:7d:0d:7a:b8:a2:27:73:4e:9f:d5:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace
Validity
Not Before: Feb 2 01:00:17 2025 GMT
Not After : Feb 3 01:00:17 2025 GMT
Subject: CN=9a19eb6da0afa03c3cef280975474584d759e25c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ac:17:a3:51:54:d8:5a:d3:b8:63:82:62:16:
f0:8b:91:f1:c3:74:78:57:71:13:5c:f4:2c:26:4b:
96:c2:57:c8:17:b2:db:96:11:26:38:61:09:c4:cb:
5c:65:51:25:5d:8e:cd:8b:9d:3c:5f:86:d6:21:31:
c4:65:44:b5:d0:81:7b:4d:4d:1c:c7:71:f0:63:ec:
3a:d1:77:84:92:93:a9:2b:9d:38:76:58:98:ef:d2:
3a:cb:87:59:05:ff:aa:15:24:42:f9:7a:32:2e:13:
62:99:cb:e3:a3:7b:f4:ca:3e:65:9f:ee:3b:c3:25:
b8:23:16:cd:93:6a:c9:98:2f:fe:f9:75:d8:83:4d:
90:6d:7e:cb:39:70:1b:66:9b:43:2a:74:13:a2:2e:
1a:ca:75:bb:f8:f1:d9:71:85:6a:a6:f2:1b:63:3b:
85:16:b2:f4:a4:ed:0e:05:c0:ff:bc:d1:38:a3:11:
c3:52:06:c8:a7:50:37:db:82:02:d0:e7:71:8a:76:
38:8d:1c:77:c5:0d:d2:f1:5d:c8:0d:91:cb:a1:ce:
67:9b:93:08:c4:bb:d3:73:b2:e4:76:bf:d9:f8:60:
a5:28:2c:39:cf:8c:ce:df:b1:3a:25:b7:07:88:c0:
a0:d1:35:0d:04:b2:ac:3c:12:1a:d2:15:79:5a:a5:
f2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:19:EB:6D:A0:AF:A0:3C:3C:EF:28:09:75:47:45:84:D7:59:E2:5C
X509v3 Authority Key Identifier:
keyid:7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:24:d1:b6:46:6f:56:c5:20:c1:6b:ee:58:8e:c1:4b:a6:ba:
02:6d:44:4e:f7:63:2a:8f:73:f7:ec:67:43:39:36:20:76:96:
71:f2:7b:28:c4:9c:9f:b3:72:e6:49:b8:02:16:ec:9d:c6:aa:
46:70:54:3d:56:54:71:5a:4e:8f:6d:bf:4d:2f:66:5c:00:e9:
96:d2:75:19:00:b5:7b:8f:c3:ba:24:5b:c7:16:75:30:75:97:
9e:58:92:b6:f5:5f:da:a4:65:43:f8:8a:48:98:6b:91:73:9e:
ea:d4:ae:89:9d:5e:05:5a:4f:fa:a5:f5:34:ec:9f:db:64:c1:
ef:16:98:ac:27:6b:f2:66:57:b7:11:43:ec:84:b5:5b:de:0c:
76:73:d1:fe:07:de:da:fa:46:cf:b7:53:ff:c2:fa:bc:13:a3:
ba:1d:46:92:b6:81:54:dc:b4:6f:ec:7e:8b:66:ad:0a:2c:0d:
36:62:c0:bd:2c:6d:a9:17:4c:0c:a6:2c:75:05:43:5f:9a:cb:
9f:12:d2:f3:5e:4d:b1:9d:97:28:e8:bf:ec:2a:6d:4e:66:8e:
28:52:ce:14:83:be:39:8a:69:b2:21:36:57:e0:f6:72:df:6e:
7b:3c:c9:c2:bc:5f:e0:4c:6d:d4:0d:89:38:f9:7c:e9:be:98:
e9:23:b7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:59:24 2025 by rpki-client