Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
File: 1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft (raw, json)
Hash identifier: WS5Oo19Mou/3DI5KloujnyiibxZQ0RIpxaTcwmI1774=
Subject key identifier: 34:EC:22:F1:DA:6D:FE:CB:80:16:37:01:15:4B:25:D8:54:AD:D0:06
Authority key identifier: D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C
Certificate issuer: /CN=d70af942465ff265b896f0d1b762490f27dc322c
Certificate serial: 01958B848F4A6A8EB7B54571F0BDC0B7A85C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
Manifest number: 1140
Signing time: Wed 12 Mar 2025 18:01:15 +0000
Manifest this update: Wed 12 Mar 2025 18:01:15 +0000
Manifest next update: Thu 13 Mar 2025 18:01:15 +0000
Files and hashes: 1: 1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl (hash: HNUqPSFuecuB0MaLLETqSanB8V5YuMS0GJlaapZjsh4=)
2: do1YRGxwXBzhu7NScxWRh1sCTkI.roa (hash: tvb6mnRRTkKS3vhIPuaGGEBZgzp8Y6OmqBEm+R+Kc5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:8f:4a:6a:8e:b7:b5:45:71:f0:bd:c0:b7:a8:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70af942465ff265b896f0d1b762490f27dc322c
Validity
Not Before: Mar 12 18:01:15 2025 GMT
Not After : Mar 13 18:01:15 2025 GMT
Subject: CN=34ec22f1da6dfecb80163701154b25d854add006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ad:a4:3d:71:ae:c2:aa:80:a3:9d:7e:42:51:
8f:a8:36:52:67:88:27:ad:62:d4:85:fa:e3:78:4b:
7f:f8:d4:44:08:73:34:9d:44:bb:6d:6a:24:42:15:
60:0a:e6:64:bf:b1:f7:9b:17:01:7a:ba:2c:da:f1:
14:5f:56:f9:5c:1c:a0:7e:3f:42:cf:af:82:05:ab:
1a:d2:90:48:c0:75:27:b1:a1:c5:b8:7a:e7:9a:81:
ab:e3:79:93:39:33:8d:d3:94:00:17:71:8c:24:01:
d2:34:a4:6f:ad:8e:b8:94:17:15:db:12:d4:9f:c5:
62:18:bd:6e:99:08:af:06:38:32:89:78:c6:1e:f5:
d4:c7:b1:2c:f3:c4:e3:af:83:25:c0:ec:f5:2b:a8:
da:b2:48:46:10:66:b1:39:b7:cb:ae:5e:a3:ad:a5:
41:89:fa:b5:36:64:1d:0e:93:c1:e4:c2:d2:d5:69:
d4:3e:37:8a:e2:e6:79:f2:0c:38:ae:7f:b6:68:17:
44:28:43:77:4e:07:0f:69:17:b6:25:3a:78:6e:8d:
71:cc:13:36:70:b3:9b:9c:f7:2a:cf:62:b3:a8:0e:
f4:65:c0:f4:3e:10:50:30:c5:0f:fd:a3:51:5a:a5:
ed:36:18:bb:62:8a:ba:8d:65:40:61:24:98:63:9c:
40:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EC:22:F1:DA:6D:FE:CB:80:16:37:01:15:4B:25:D8:54:AD:D0:06
X509v3 Authority Key Identifier:
keyid:D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f8:68:f6:b6:60:cb:58:e0:02:6e:17:46:cb:23:2d:26:f0:
0b:d9:f5:5c:80:90:de:73:5c:6a:a6:f2:1b:19:ab:69:11:73:
80:1c:89:11:33:fc:75:bf:f7:af:fa:a4:74:62:b9:34:57:dc:
2e:02:71:c0:bd:57:86:0d:fa:ba:1e:39:3d:5e:e8:e3:c6:92:
b2:bc:56:d2:59:32:97:79:74:b1:4d:58:1c:6b:60:67:00:4d:
ef:ca:cc:cd:a7:ff:dd:5a:2d:a3:2b:7e:c1:47:6c:05:8e:11:
81:7d:39:55:18:95:0e:49:81:7c:17:ef:1d:e5:bd:ff:0b:ac:
19:df:ca:9c:2e:07:d1:ff:77:a5:7e:34:9d:d3:6a:47:52:40:
f4:5f:e5:6c:f2:be:30:66:df:06:7f:69:4d:d6:b1:d1:e3:cd:
e1:35:1f:ff:e3:74:4d:84:b9:f4:8a:79:7e:e9:70:98:ae:07:
f6:fd:b1:7f:d8:c1:46:28:62:ef:44:ad:ad:e4:56:e7:39:da:
6b:74:b3:4a:f3:4c:16:81:2c:03:e6:e2:fe:e3:e4:10:6f:08:
94:20:05:3d:ed:a1:50:2c:ff:76:3b:9b:f2:52:dc:43:c2:e0:
82:d9:75:39:d7:d5:56:72:e7:52:34:88:c5:f5:b8:be:e9:1c:
92:fa:71:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:27:14 2025 by rpki-client