Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft
File: WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft (raw, json)
Hash identifier: Y0ARQICJ5QMkbc5KI/C9eQMvuyUlOFiIpVCFacWI7OU=
Subject key identifier: 57:14:CF:63:1B:6C:34:81:98:69:AD:D1:53:F4:B4:DF:D3:22:C3:C9
Authority key identifier: 58:3E:E3:C2:EC:4A:19:02:5C:03:92:AD:1E:E6:A4:64:1B:CD:D0:C8
Certificate issuer: /CN=583ee3c2ec4a19025c0392ad1ee6a4641bcdd0c8
Certificate serial: 01951134EE0580FB73D6E5FA0C3F2ED18CF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft
Manifest number: 0A36
Signing time: Mon 17 Feb 2025 00:00:36 +0000
Manifest this update: Mon 17 Feb 2025 00:00:36 +0000
Manifest next update: Tue 18 Feb 2025 00:00:36 +0000
Files and hashes: 1: D1M0sjr1PH8Yys4-1MS43KjOpQM.roa (hash: 2Q7ZkQbIGE2fBfzNEEGOF12hD07hA4SM+mHj72HM/gU=)
2: WD7jwuxKGQJcA5KtHuakZBvN0Mg.crl (hash: jV0aIWpcZ0XAWQUbPYWWaDnU21xnV2gEfKVQDRNf8QY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:ee:05:80:fb:73:d6:e5:fa:0c:3f:2e:d1:8c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583ee3c2ec4a19025c0392ad1ee6a4641bcdd0c8
Validity
Not Before: Feb 17 00:00:36 2025 GMT
Not After : Feb 18 00:00:36 2025 GMT
Subject: CN=5714cf631b6c34819869add153f4b4dfd322c3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:74:51:8e:a1:35:66:58:a2:3f:c8:57:67:f5:
60:3c:38:d7:6e:66:06:78:5a:56:f8:32:c6:77:2c:
fd:20:68:78:9a:22:38:c9:aa:b1:41:00:e3:75:7f:
26:0d:c3:5d:d5:d1:db:ba:39:59:c8:40:e7:2f:c8:
9e:fa:e9:69:57:3c:1f:1d:42:7f:ed:7f:5d:51:76:
a7:4b:2d:c4:06:3e:fa:2e:bf:5f:7b:40:db:13:0d:
8d:a6:7d:c5:ed:e5:b0:ea:06:c7:73:e4:67:1d:93:
ce:e3:16:bc:de:6c:15:6b:94:3a:d1:4c:85:75:98:
4e:f2:f5:a8:d0:5a:64:c5:d6:86:aa:d6:ee:78:32:
1c:38:8a:58:ec:4a:94:b7:5e:24:07:eb:77:be:3b:
28:99:f8:ed:b4:70:3c:57:ca:e6:ed:1d:8e:9c:6d:
ff:1d:d8:02:5c:e0:38:63:c2:1b:da:3d:93:90:22:
df:99:d0:df:57:9c:85:e4:1c:12:ac:55:46:be:03:
81:92:af:50:4f:87:55:8b:9c:af:1b:ee:17:ff:12:
e5:16:dd:a1:c3:84:f0:7e:b9:98:28:ae:94:09:ba:
29:69:c7:ee:10:43:ad:fa:52:4b:da:2c:84:fb:a5:
ce:3b:63:b2:cc:5b:99:10:7c:eb:d8:4b:d4:d2:2c:
67:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:14:CF:63:1B:6C:34:81:98:69:AD:D1:53:F4:B4:DF:D3:22:C3:C9
X509v3 Authority Key Identifier:
keyid:58:3E:E3:C2:EC:4A:19:02:5C:03:92:AD:1E:E6:A4:64:1B:CD:D0:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:30:08:19:31:e2:83:2c:46:02:4e:12:99:eb:02:02:dc:97:
c3:35:8a:5d:65:a4:92:db:4f:93:81:0a:f8:aa:13:f7:68:1a:
6f:f0:33:7c:61:f2:f5:6a:45:2b:a9:23:14:e5:2b:0f:71:5b:
e0:63:d8:3f:14:bb:5c:25:ab:05:a6:07:89:a5:8a:12:13:25:
0c:24:73:ab:79:81:98:f7:1b:74:ac:f8:e8:d8:0e:de:5d:89:
61:86:bd:84:68:a0:78:f8:6f:8a:c2:f2:f2:61:f9:46:a2:47:
0f:23:4c:94:3e:18:df:9a:38:75:e0:2c:60:dc:af:72:ae:74:
28:6b:15:4a:5b:b4:1b:aa:f2:30:52:05:08:76:af:68:8f:1b:
af:54:3a:04:5e:bc:a6:b7:40:09:5e:ea:88:47:bb:42:0c:88:
33:85:9e:50:db:2c:3d:e0:88:c9:65:83:5c:a4:7e:3e:75:1d:
43:07:a2:18:a8:e2:dd:a2:df:b2:c4:fc:36:13:a1:42:92:b4:
47:1c:7f:f4:12:15:fe:e7:8f:28:f2:91:aa:71:69:de:29:e2:
62:f5:ca:cf:c0:46:bf:14:5f:23:a9:e3:25:7b:26:31:a6:55:
35:86:17:a0:e9:72:db:a0:9a:fe:fa:45:36:73:87:a1:cf:b9:
a8:18:64:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:46 2025 by rpki-client