Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
File: RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft (raw, json)
Hash identifier: tIPeJ/A/WS9WyGtDs3CtFhh3veWvGQkV6oziQZlb1Cs=
Subject key identifier: 5B:E1:CC:8D:05:CF:EB:9B:01:84:4B:C9:69:60:AF:A4:14:B3:C9:8D
Authority key identifier: 45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
Certificate issuer: /CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Certificate serial: 019510C728D8FF82E26F4CD35C79FD4EBCF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
Manifest number: 145A
Signing time: Sun 16 Feb 2025 22:00:42 +0000
Manifest this update: Sun 16 Feb 2025 22:00:42 +0000
Manifest next update: Mon 17 Feb 2025 22:00:42 +0000
Files and hashes: 1: HJuvWWI1qAqft10oKlJtZleuo2g.roa (hash: u8HfwrfCCFHcB5jvs7dyE9ffRxdRXb4g1HqA18Sf8YE=)
2: RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl (hash: goqYHQP1a1SIorF3ptJxzlQHBQLyqrT8FtIFw1W14F0=)
3: wtjN78Y_d1b6O6UDtSU2B1I3v9Y.roa (hash: ReqT7jsHEoa7AvfRGw7Yv2wPcS9GQjwhHtVeUywingA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:28:d8:ff:82:e2:6f:4c:d3:5c:79:fd:4e:bc:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Validity
Not Before: Feb 16 22:00:42 2025 GMT
Not After : Feb 17 22:00:42 2025 GMT
Subject: CN=5be1cc8d05cfeb9b01844bc96960afa414b3c98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:88:02:89:41:a8:74:69:1e:5b:9a:03:c6:e5:
a0:46:17:a9:ff:e6:8f:f3:78:7f:5f:9f:ea:c5:b9:
96:83:4f:94:ab:7b:da:33:59:03:77:24:ba:e5:d9:
c2:ae:99:bd:39:f5:ad:10:9a:72:0c:cd:75:a1:05:
ed:df:ec:c2:5a:6c:a8:22:cb:8b:30:2d:a2:5a:d0:
cf:c0:6b:22:63:88:65:88:be:16:a0:46:26:0d:c5:
ab:52:7b:e4:65:7a:4c:d1:c6:3c:f1:54:17:54:08:
b8:63:e3:67:0f:9e:89:00:9a:e9:07:8b:9e:86:42:
77:c7:7b:0c:58:41:89:b1:22:fb:b8:5f:64:6e:bf:
b5:da:a1:23:11:86:ec:5f:0d:df:6d:86:e6:08:c4:
95:40:53:fb:bd:77:1a:ec:55:c2:37:96:19:aa:38:
ca:75:00:e0:66:3c:a3:3e:95:25:8c:4f:98:2d:d1:
8e:d3:17:3a:be:8a:d3:d9:96:d8:c0:09:3c:a2:ba:
43:dd:80:2c:5a:a8:4f:99:fc:9d:c9:e4:6f:2f:16:
4e:a5:b5:e4:dd:4d:09:55:9e:95:7d:90:d1:4c:3c:
72:00:ac:b9:d4:9d:0b:ad:fd:fc:9b:94:4d:33:47:
88:f4:30:4b:1c:4d:dc:9c:c0:e5:23:4e:c6:e3:f8:
7c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E1:CC:8D:05:CF:EB:9B:01:84:4B:C9:69:60:AF:A4:14:B3:C9:8D
X509v3 Authority Key Identifier:
keyid:45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b5:ab:cd:52:96:b3:3a:87:e6:cc:d7:1e:11:b9:c3:cb:66:
46:c5:b4:4f:d6:29:36:9d:d5:b4:6a:3c:05:7d:a0:3c:9b:37:
a2:74:85:a0:50:07:14:a0:db:db:ba:db:ae:4d:45:1e:59:8a:
d7:92:ea:0a:2b:b9:dd:5a:ca:c3:fd:b6:be:cf:94:22:1f:94:
67:af:48:7b:99:7d:c3:d5:9a:57:9b:5a:8f:ca:b7:03:c0:83:
32:4f:5e:fc:d9:57:2c:78:85:af:d8:67:1c:65:69:8b:79:64:
ce:d0:71:6d:58:56:f0:ab:f6:b9:d9:bd:8b:3e:65:23:44:49:
c7:0b:d0:60:30:db:9f:1a:73:b5:b8:6d:7f:24:9d:77:f4:93:
e5:58:e3:63:12:b7:86:e4:42:25:39:aa:e7:e2:ac:d1:31:38:
6f:13:18:6d:d4:21:32:98:b2:3f:ba:d9:53:60:8b:ec:ad:7e:
ed:6e:2b:cb:e0:e5:ff:6a:ad:e0:8e:50:58:81:cc:40:19:fa:
ec:17:75:32:98:0e:2f:8d:80:3e:e0:fb:d4:3b:48:32:e3:3c:
04:ad:11:12:1d:ed:44:6c:33:1c:bb:58:79:4b:bb:1c:50:06:
40:86:47:c2:3d:fb:45:d3:0f:a4:9a:c1:18:5b:86:59:81:a0:
53:fe:93:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:37 2025 by rpki-client