Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
File: wlEKilJdybHsCxVg0JCmQmjULsQ.mft (raw, json)
Hash identifier: MafeKlIqLg8OzZ4gkvs1SYpAs3QmMtnTiV4HgbNyeLo=
Subject key identifier: 0C:16:AF:D7:FD:B5:9C:84:D6:6B:2C:2C:F7:58:9D:CE:62:B3:C8:63
Authority key identifier: C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
Certificate issuer: /CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Certificate serial: 01951210340C586DFE43E68CB6B79DD22408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
Manifest number: 1401
Signing time: Mon 17 Feb 2025 04:00:06 +0000
Manifest this update: Mon 17 Feb 2025 04:00:06 +0000
Manifest next update: Tue 18 Feb 2025 04:00:06 +0000
Files and hashes: 1: FaPK4dABXX1JUG-DgodpiiYFyXk.roa (hash: 8EnGZIA4ScfpCaGufhHcnmIDRY1lMTTgXZqEJ9E7v2g=)
2: bYeYVYEdCXCzK3hGWezO0ZNHveg.roa (hash: UaiyZMeOYv/TRvUCkbZ9PcMP5ygVyQhx0p+DkQtZkYA=)
3: wlEKilJdybHsCxVg0JCmQmjULsQ.crl (hash: Fv0FGOSbPkXVYWDJ9b8BSJC3rOFBoU4YVPbD5+J0Wyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:34:0c:58:6d:fe:43:e6:8c:b6:b7:9d:d2:24:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Validity
Not Before: Feb 17 04:00:06 2025 GMT
Not After : Feb 18 04:00:06 2025 GMT
Subject: CN=0c16afd7fdb59c84d66b2c2cf7589dce62b3c863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:98:7c:40:c6:eb:eb:54:a9:96:60:40:ac:0b:
43:e7:dd:24:fb:6b:d2:e1:b3:58:c4:5b:03:f3:66:
c3:b8:85:04:5d:49:45:d2:5b:d4:25:7c:5a:b6:e3:
87:65:c6:2f:81:0f:f5:6d:7d:3a:4b:dc:ef:80:13:
96:9b:d9:76:48:dc:6c:ad:48:3f:1d:f8:ff:33:7b:
03:2a:dc:f0:ef:66:17:1b:55:fe:83:72:b1:c2:c1:
ca:5a:53:e8:a8:bd:a7:72:59:f2:69:9a:70:5e:7a:
d9:bc:85:fc:aa:cd:84:fc:59:66:2f:26:e1:4a:4c:
02:18:ef:ff:95:7e:37:49:03:66:d5:57:4c:77:ca:
37:15:0f:d9:3d:1a:db:95:91:03:e8:09:28:b2:3b:
f9:c9:a6:d0:10:2f:2b:2a:dd:f0:42:c2:9b:ed:23:
f9:8f:b4:8d:19:07:60:93:a2:10:86:ae:5e:14:ee:
ed:34:b4:cd:1f:e7:6c:75:5f:cf:7e:0b:6f:3a:34:
17:11:9c:49:da:2f:e3:3c:85:b0:c1:88:56:e4:61:
51:ff:54:a7:df:1f:a4:70:d1:e6:a3:6a:e5:27:09:
71:4b:de:5a:af:23:b3:c3:16:e3:80:50:1d:c9:d1:
82:43:ef:30:26:6b:0b:42:50:7d:fa:85:88:22:9b:
c4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:16:AF:D7:FD:B5:9C:84:D6:6B:2C:2C:F7:58:9D:CE:62:B3:C8:63
X509v3 Authority Key Identifier:
keyid:C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ee:77:bf:02:d2:8f:2d:d9:fd:57:6f:a8:f0:d2:5b:70:5d:
b2:24:93:b8:22:ed:32:6d:59:df:7e:7e:59:ec:cb:3f:bc:1e:
4f:a8:83:56:b0:b2:54:b0:48:7f:db:43:24:8f:a2:85:12:6d:
b5:60:9e:a9:6d:65:83:21:f2:b3:5b:f7:7e:0f:92:80:57:7c:
da:f5:2c:d9:20:ce:e2:95:b3:fb:20:51:d9:be:28:2c:e3:7f:
4f:fb:09:7f:3c:d0:62:17:7a:53:6c:45:da:39:41:1b:3f:b7:
d8:03:b8:8f:57:c3:55:dd:86:dc:28:b3:17:e0:5f:db:3b:d5:
2c:02:7a:85:c0:ec:aa:d5:bd:c8:92:27:e0:1a:74:65:e1:74:
4b:80:e0:4c:64:7b:0e:f0:6d:79:07:b4:fd:99:db:92:93:8c:
06:1e:c8:8c:dd:92:4e:66:84:da:cc:a5:f2:4f:82:65:d4:ff:
8a:f3:2d:b4:74:36:23:4c:d0:1b:4b:6d:8f:bc:21:51:05:9e:
47:30:7e:4e:b1:1d:6e:57:d5:a1:1f:26:29:5b:1a:38:e2:ea:
40:2f:e1:5d:22:6f:af:64:aa:03:ce:7f:72:c4:28:52:34:19:
fc:e6:79:06:95:5d:78:e7:33:0d:78:03:e0:03:d0:ed:c8:77:
8c:6d:40:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:24 2025 by rpki-client