Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
File: we5gO3itcrp4VWgsorgGrA5-mP0.mft (raw, json)
Hash identifier: ZAi5S6git3MQeF5a1ITUjyTtI7CEUWSoI6yreK858wc=
Subject key identifier: 11:ED:82:88:2D:9F:52:34:B9:6D:BB:AE:72:A9:72:DE:69:C7:B6:E5
Authority key identifier: C1:EE:60:3B:78:AD:72:BA:78:55:68:2C:A2:B8:06:AC:0E:7E:98:FD
Certificate issuer: /CN=c1ee603b78ad72ba7855682ca2b806ac0e7e98fd
Certificate serial: 0195116BC0D8D41CDB64ECA59EDC81C0B731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 01:00:29 +0000
Manifest this update: Mon 17 Feb 2025 01:00:29 +0000
Manifest next update: Tue 18 Feb 2025 01:00:29 +0000
Files and hashes: 1: 8P5ffqPLJKYYNJnQChMlI7ALdn8.roa (hash: HRZiFpkQQ+Nr6MCSY7lvsFCZFVTwCo1gLy31/BQbop0=)
2: we5gO3itcrp4VWgsorgGrA5-mP0.crl (hash: FmmnvqguCNKtye5kn+NH20CwrGfIvqwCC0JDbHw+m/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:c0:d8:d4:1c:db:64:ec:a5:9e:dc:81:c0:b7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1ee603b78ad72ba7855682ca2b806ac0e7e98fd
Validity
Not Before: Feb 17 01:00:29 2025 GMT
Not After : Feb 18 01:00:29 2025 GMT
Subject: CN=11ed82882d9f5234b96dbbae72a972de69c7b6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a4:d7:06:b6:42:76:58:28:a3:e0:d1:3f:a3:
54:0b:dc:92:60:d7:c7:1a:e9:19:d7:94:99:7f:1f:
46:d6:18:0e:20:7e:6c:36:a5:b7:7b:f9:ff:8f:66:
93:d1:17:a1:ac:2c:28:eb:db:76:be:47:76:d5:7f:
5b:bb:4f:82:86:8b:e7:a0:da:86:7b:bf:85:4b:fc:
e5:c7:c9:df:c9:cd:ed:bd:d5:8c:55:c5:82:29:c4:
e0:5b:f5:2c:49:ac:fb:f6:36:28:0b:33:f4:33:9e:
0a:81:d2:54:e1:50:61:14:43:c1:e4:5d:3c:a9:6f:
ba:c9:72:85:e9:9f:b9:03:fb:64:c6:6a:0c:57:28:
56:56:d4:24:07:98:d4:23:fd:8a:f0:f3:e1:4e:b8:
06:95:dd:9c:2a:47:23:a2:b7:e3:bb:3a:9f:a6:c0:
ac:ec:19:af:c3:1a:aa:57:a1:87:11:69:1f:11:f4:
e1:73:e0:41:23:c4:35:8c:26:28:78:2f:4f:62:71:
e1:4e:fb:7c:2c:55:35:dd:cb:9c:e3:4d:4f:7f:03:
db:d9:a5:8f:95:ab:84:66:33:c2:e9:05:67:95:a2:
29:57:27:96:06:f2:21:db:3c:69:c8:7e:3b:ea:3b:
02:4f:9f:e5:7d:ed:cf:34:bc:27:39:0d:92:76:44:
6b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:ED:82:88:2D:9F:52:34:B9:6D:BB:AE:72:A9:72:DE:69:C7:B6:E5
X509v3 Authority Key Identifier:
keyid:C1:EE:60:3B:78:AD:72:BA:78:55:68:2C:A2:B8:06:AC:0E:7E:98:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:2e:76:6f:a7:6a:ce:db:db:6a:4d:b5:9e:6a:b3:51:4c:d3:
88:e4:7b:8b:9d:97:23:90:69:90:b6:95:8c:4c:95:53:36:bc:
03:5c:64:6d:7e:9a:6e:3d:98:24:a2:06:96:9c:a9:25:03:ed:
34:10:25:fb:96:55:ff:88:f2:3e:2c:36:cc:24:81:dd:c0:76:
0f:07:14:10:b1:30:a3:8c:2b:bb:6c:85:49:3b:8a:a1:77:19:
b1:48:4e:b6:8a:84:d2:3f:ef:76:3e:c6:89:25:dd:50:78:f7:
76:12:96:39:43:3c:5a:fd:0b:42:c9:3f:d8:17:2d:82:e2:9e:
57:11:0c:ff:50:c6:58:bf:bf:ec:4c:e5:6e:cb:d1:f9:a1:f6:
ab:ef:a5:c0:75:87:0a:66:4d:75:3e:cf:9a:91:bd:e3:51:85:
1d:51:7b:bc:07:81:a6:31:60:1e:72:c2:47:87:ff:6b:9f:36:
6e:47:28:b8:31:a7:ec:7d:cb:90:d6:10:f9:de:e5:df:61:6f:
eb:71:80:96:f8:48:37:2e:db:73:f3:f2:4e:39:cd:4e:5c:58:
57:84:93:24:8a:83:a3:7c:cc:fa:f8:5a:3c:e2:95:80:96:64:
94:7e:21:db:47:6a:2a:96:b0:85:45:d3:46:bb:a2:d4:52:c8:
8a:4b:fa:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:48 2025 by rpki-client