Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft
File: W-j-iCe9xgk1VQngyegOqyH5zcM.mft (raw, json)
Hash identifier: IS+t4YzdQW2xIuNkOnammew1D2Q7v+ntO0etiYcjqQ8=
Subject key identifier: C3:B3:99:23:A5:73:08:F5:43:1F:F8:B9:57:B2:19:9E:D8:BC:5B:F1
Authority key identifier: 5B:E8:FE:88:27:BD:C6:09:35:55:09:E0:C9:E8:0E:AB:21:F9:CD:C3
Certificate issuer: /CN=5be8fe8827bdc609355509e0c9e80eab21f9cdc3
Certificate serial: 0195116BC210A733B5A50F3C628B472291C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft
Manifest number: 0890
Signing time: Mon 17 Feb 2025 01:00:29 +0000
Manifest this update: Mon 17 Feb 2025 01:00:29 +0000
Manifest next update: Tue 18 Feb 2025 01:00:29 +0000
Files and hashes: 1: W-j-iCe9xgk1VQngyegOqyH5zcM.crl (hash: yzHsFOr24vpmTjlojPAKXjro4T2+mzJsfV2L+fT7aiU=)
2: y8OPBhGIRdnRfns2wStFC7bDr4o.roa (hash: J10wvmClCuf9chJ2RyDKTPdaCtqaxXBdRLqjfTXblX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:c2:10:a7:33:b5:a5:0f:3c:62:8b:47:22:91:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5be8fe8827bdc609355509e0c9e80eab21f9cdc3
Validity
Not Before: Feb 17 01:00:29 2025 GMT
Not After : Feb 18 01:00:29 2025 GMT
Subject: CN=c3b39923a57308f5431ff8b957b2199ed8bc5bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:88:e1:1f:5c:9d:b8:c3:e9:39:a4:4d:17:a4:
72:4c:a5:94:66:65:1f:d0:1d:00:58:4b:e1:ca:6b:
f7:2d:16:7b:7b:61:c3:0a:52:12:20:77:8c:78:39:
f6:89:97:18:37:71:2d:f9:99:61:ed:5a:8a:b3:d7:
f9:84:a6:2b:ad:b0:3a:4a:33:e0:88:1a:81:74:cf:
e7:b7:39:fe:b9:49:c5:54:5f:86:eb:d3:6d:90:81:
57:f9:4c:1e:ec:df:e4:02:f2:f0:4c:9f:8c:a3:24:
43:11:1a:53:a0:19:ac:ee:71:62:83:59:2b:c0:90:
0b:cd:09:c0:f8:78:d3:7f:96:c1:d1:da:6c:b0:61:
bf:25:30:3a:86:07:bd:4e:a5:cc:2d:7a:a2:5f:25:
b4:d4:05:6f:1d:82:bd:d7:ed:27:7d:ea:63:7d:f9:
29:ff:27:35:72:1a:10:ed:d7:f2:1b:a4:02:70:7f:
7d:d6:f4:cb:e7:a3:42:3f:14:0e:51:14:cc:cb:ca:
9d:95:25:34:3f:a1:87:a9:6b:16:70:d8:cf:67:04:
d3:9a:b9:73:65:87:62:4c:23:9f:aa:0b:6c:08:fe:
ba:01:3b:57:7e:4c:e2:76:9f:4c:9a:14:b7:f6:7e:
b8:84:0e:8f:d3:9e:e4:26:70:13:d7:a0:07:7b:d9:
06:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B3:99:23:A5:73:08:F5:43:1F:F8:B9:57:B2:19:9E:D8:BC:5B:F1
X509v3 Authority Key Identifier:
keyid:5B:E8:FE:88:27:BD:C6:09:35:55:09:E0:C9:E8:0E:AB:21:F9:CD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:50:8d:43:59:ac:46:00:2c:d4:e7:e5:a4:f9:5c:60:e1:db:
5b:53:28:23:3f:fa:5a:5b:fb:a4:36:63:4e:e9:87:8a:b8:d2:
1b:a2:20:c4:d4:66:ab:8c:ef:b6:2b:9a:5b:91:1c:17:90:42:
07:24:d9:9e:6c:3d:4d:75:5f:06:48:74:54:c0:57:a8:a8:04:
62:b7:e7:5a:14:5a:cc:91:01:0b:0f:c7:9a:29:c4:ef:cd:29:
91:b8:04:7d:b7:d6:3f:d4:47:ff:36:65:8e:4c:a4:4b:82:97:
f5:c4:0c:6e:ea:2d:2d:53:20:d8:ee:df:35:cd:de:01:fe:e3:
7b:2e:60:44:82:c0:83:75:25:f6:be:52:d2:26:8f:78:da:2e:
df:97:00:41:d4:73:87:31:5f:94:cd:11:8a:4a:f6:d0:31:d7:
48:cd:11:e4:b8:69:b4:60:61:e1:41:e1:61:87:6c:8d:06:99:
30:1a:4d:0e:ca:9d:35:58:20:a0:dd:e9:94:5f:dc:f4:1e:83:
82:3c:95:8a:74:7e:ff:67:60:98:d1:76:e6:69:da:dc:f9:43:
fd:98:93:da:8b:ca:3e:f4:ff:9d:0f:cd:fc:9b:a8:71:b3:b6:
dc:3d:cf:39:ec:ef:49:57:ee:3d:e4:77:e6:c7:71:3d:f6:4a:
56:90:29:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:48 2025 by rpki-client