Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
File: w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft (raw, json)
Hash identifier: gNdb/F5shjhia0Cyxtij0jAiCAvNdPyYhEOQ24w9gtE=
Subject key identifier: D5:07:C6:65:67:6B:98:01:E9:70:20:99:34:62:BB:39:E6:23:7A:E2
Authority key identifier: C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF
Certificate issuer: /CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf
Certificate serial: 0194C350A6329E7B3F87CA65033C9910ED0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
Manifest number: 1430
Signing time: Sat 01 Feb 2025 21:00:29 +0000
Manifest this update: Sat 01 Feb 2025 21:00:29 +0000
Manifest next update: Sun 02 Feb 2025 21:00:29 +0000
Files and hashes: 1: 4mL1zKKLOxGn25fl7m9On5y2ZYA.roa (hash: 9EgYMO8cQ5z/aiE1aC8zT4GRbu01MVUJ2bPVFVsvu8U=)
2: jdL88fKfBRcDZQd2LJ3KQAGZWz0.roa (hash: Rtx6TLOA/PMGBKD0sU4jO9D8OJMlb2E7ArhYwQT50vQ=)
3: w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl (hash: VTfbAMgelZuxc/AH4KVE0uy8kCpQtPj2Pz5aoP4B6Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:a6:32:9e:7b:3f:87:ca:65:03:3c:99:10:ed:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf
Validity
Not Before: Feb 1 21:00:29 2025 GMT
Not After : Feb 2 21:00:29 2025 GMT
Subject: CN=d507c665676b9801e97020993462bb39e6237ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3c:1c:01:67:c3:cd:e2:15:9f:71:6e:46:65:
fb:55:c5:d1:24:b5:a6:16:48:b3:59:c5:c0:f6:8c:
41:7e:58:a4:a8:c2:30:b7:c0:63:5d:ba:06:b9:f0:
9e:13:73:43:37:84:0f:ef:a8:90:55:c8:23:1a:e1:
88:a6:af:31:75:8d:c1:7c:10:c5:59:85:5e:d7:72:
0a:93:6e:2c:15:40:13:d5:15:87:56:99:d3:d5:f5:
25:37:07:17:bf:df:0e:f4:ec:95:c4:7c:1b:a0:be:
89:91:8e:25:53:88:d1:df:f2:8c:93:c4:e7:0c:39:
e1:93:7a:12:a2:8b:65:ea:b0:48:c5:1e:30:36:45:
93:03:17:06:a5:a1:bb:dd:54:fe:fd:94:f7:33:7a:
29:16:87:b0:ac:32:cc:ab:1c:25:89:ce:bc:31:e4:
5b:a1:25:44:c3:2a:04:ce:62:5f:29:ae:83:3a:f5:
1a:1f:bc:0a:0e:1a:d5:25:5e:41:dc:25:4f:56:7a:
05:e7:e8:03:08:cb:1b:c1:44:19:99:c1:9b:67:fc:
bd:e3:58:dd:06:ae:80:21:52:75:dc:04:60:af:76:
0a:d1:a8:22:10:ff:bb:65:bf:5a:fc:68:1a:0f:b4:
0a:31:53:de:26:ec:7e:af:12:8a:c9:99:06:a4:03:
cc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:07:C6:65:67:6B:98:01:E9:70:20:99:34:62:BB:39:E6:23:7A:E2
X509v3 Authority Key Identifier:
keyid:C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:65:ec:82:3c:96:bf:22:c3:24:f8:3e:b8:15:be:94:8d:e7:
5d:19:d5:55:1e:01:b3:39:15:f4:99:89:41:3e:10:89:b9:f4:
99:d8:01:6f:b7:1f:83:b6:88:99:f6:73:e0:1a:97:35:63:12:
c2:78:23:c2:9c:db:e9:9b:b8:d3:11:af:c4:80:72:b2:e8:03:
79:5f:c8:e9:8f:1b:55:a1:74:65:aa:09:39:c1:fa:b7:bd:94:
88:1f:d0:7b:a9:ab:64:ea:6e:6e:8f:a0:e6:f1:82:a7:0b:e9:
17:66:ad:7c:01:d3:04:03:79:77:a5:b2:6f:70:69:99:8e:77:
8e:fa:3f:78:e6:23:45:d0:39:64:9d:d0:1d:86:34:3b:9e:1c:
7d:a8:d5:29:36:cd:d8:5b:4c:38:76:75:3e:55:db:f7:88:e5:
5b:e1:26:73:ad:f6:f7:d5:13:3d:a5:37:0b:57:63:91:27:ad:
e9:1a:8e:7c:f7:52:43:f7:7b:51:90:81:e8:cb:c2:91:aa:bc:
8e:9f:9e:a0:ba:af:92:18:fd:c0:20:f8:15:12:8c:8b:8e:28:
93:b1:22:fa:82:a2:1f:44:11:22:fe:79:31:30:8e:5e:a5:8f:
45:64:cd:14:d1:7d:a0:15:57:06:26:e3:19:29:e2:43:f6:78:
4d:41:f3:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDUKYynns/h8plAzyZEO0NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYjQzNTFlMGE0OTVjMjZlZmRjNmU0MTVmMGJiMTg5ZmJi
ZDZlZGYwHhcNMjUwMjAxMjEwMDI5WhcNMjUwMjAyMjEwMDI5WjAzMTEwLwYDVQQD
EyhkNTA3YzY2NTY3NmI5ODAxZTk3MDIwOTkzNDYyYmIzOWU2MjM3YWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszwcAWfDzeIVn3FuRmX7VcXRJLWm
FkizWcXA9oxBflikqMIwt8BjXboGufCeE3NDN4QP76iQVcgjGuGIpq8xdY3BfBDF
WYVe13IKk24sFUAT1RWHVpnT1fUlNwcXv98O9OyVxHwboL6JkY4lU4jR3/KMk8Tn
DDnhk3oSootl6rBIxR4wNkWTAxcGpaG73VT+/ZT3M3opFoewrDLMqxwlic68MeRb
oSVEwyoEzmJfKa6DOvUaH7wKDhrVJV5B3CVPVnoF5+gDCMsbwUQZmcGbZ/y941jd
Bq6AIVJ13ARgr3YK0agiEP+7Zb9a/GgaD7QKMVPeJux+rxKKyZkGpAPMIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUHxmVna5gB6XAgmTRiuznmI3riMB8GA1UdIwQY
MBaAFMO0NR4KSVwm79xuQV8LsYn7vW7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzdRMUhncEpYQ2J2M0c1Qlh3dXhpZnU5YnQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zN2UzNjMtODRkMS00NzBlLTk2YTIt
MGVmMWNhYzc0MThkLzEvdzdRMUhncEpYQ2J2M0c1Qlh3dXhpZnU5YnQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zN2UzNjMtODRkMS00NzBlLTk2YTItMGVmMWNhYzc0MThk
LzEvdzdRMUhncEpYQ2J2M0c1Qlh3dXhpZnU5YnQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2XsgjyW
vyLDJPg+uBW+lI3nXRnVVR4BszkV9JmJQT4Qibn0mdgBb7cfg7aImfZz4BqXNWMS
wngjwpzb6Zu40xGvxIBysugDeV/I6Y8bVaF0ZaoJOcH6t72UiB/Qe6mrZOpubo+g
5vGCpwvpF2atfAHTBAN5d6Wyb3BpmY53jvo/eOYjRdA5ZJ3QHYY0O54cfajVKTbN
2FtMOHZ1PlXb94jlW+Emc63299UTPaU3C1djkSet6RqOfPdSQ/d7UZCB6MvCkaq8
jp+eoLqvkhj9wCD4FRKMi44ok7Ei+oKiH0QRIv55MTCOXqWPRWTNFNF9oBVXBibj
GSniQ/Z4TUHzxQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:53:31 2025 by rpki-client