Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.mft
File: vDWQTiTbDpkElaNEXnfRE27WGNc.mft (raw, json)
Hash identifier: 8HVbOyYW91r4qpoBHs7HWro5lbn4LZ2+FYdhUCX3ELY=
Subject key identifier: E9:80:0B:99:8C:24:2A:6E:FD:66:8A:03:0C:BF:A0:58:20:04:70:06
Authority key identifier: BC:35:90:4E:24:DB:0E:99:04:95:A3:44:5E:77:D1:13:6E:D6:18:D7
Certificate issuer: /CN=bc35904e24db0e990495a3445e77d1136ed618d7
Certificate serial: 0194C507EEEBF13AFD685D2E899120AB736C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDWQTiTbDpkElaNEXnfRE27WGNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.mft
Manifest number: 9D
Signing time: Sun 02 Feb 2025 05:00:18 +0000
Manifest this update: Sun 02 Feb 2025 05:00:18 +0000
Manifest next update: Mon 03 Feb 2025 05:00:18 +0000
Files and hashes: 1: Tyq3VKoV7toHz4LXY-F6FRKUTFc.roa (hash: RHBupRRuz7kLI26AVDq35ZlOcZY/SSv2fkkTHG+8t+o=)
2: vDWQTiTbDpkElaNEXnfRE27WGNc.crl (hash: c2GluKzYNJoB1ogrSRruDU16PbVTlS4C6nO0VK7HS0w=)
3: wwWaYglYvidSGODSVzyMsR7AE4k.roa (hash: GL1hAfbFxjEmGpVQaoVaKQIBWoyn5obmjisb8HeWcZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDWQTiTbDpkElaNEXnfRE27WGNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:ee:eb:f1:3a:fd:68:5d:2e:89:91:20:ab:73:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc35904e24db0e990495a3445e77d1136ed618d7
Validity
Not Before: Feb 2 05:00:18 2025 GMT
Not After : Feb 3 05:00:18 2025 GMT
Subject: CN=e9800b998c242a6efd668a030cbfa05820047006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:16:65:fe:b4:ee:a6:b4:9d:40:81:76:e2:7a:
bb:db:87:22:b6:33:8c:e7:9d:c3:66:b8:80:d4:1f:
5d:fe:dd:c3:35:ec:22:f8:ad:32:26:a0:f8:8c:9c:
f4:45:42:81:67:12:00:95:e3:30:f1:c7:4c:0f:9c:
ed:00:ac:62:9e:d7:69:ee:2b:21:a8:f4:c9:e5:d1:
04:68:15:68:f8:6f:7e:e7:fa:ff:99:c8:36:d0:8b:
92:e7:68:3b:48:da:bb:ef:90:66:17:e6:51:40:ce:
43:a9:5c:37:1c:52:0b:96:1f:13:3d:e2:86:d7:0d:
0e:de:d7:5e:52:33:00:4a:e9:7c:ea:58:cc:a5:11:
11:8d:07:26:85:1e:4f:79:dc:b1:5f:f5:d5:35:94:
d5:bb:a3:e6:3d:d4:be:33:c6:7b:47:02:24:c0:b5:
ea:a9:e4:99:43:86:ff:2b:8a:f7:42:7c:8f:4b:3b:
ef:89:66:a4:7e:6d:04:2d:e5:c6:8f:8a:f4:18:ff:
34:f6:e8:6f:85:21:b1:0c:c8:bc:02:78:6e:c0:e9:
9e:86:c5:3a:bc:e6:94:0e:7b:ea:e9:9f:a1:a5:b5:
31:8d:33:f6:6b:2b:2b:83:5f:01:e2:95:b7:22:88:
19:4a:f6:b7:ed:f4:6b:bf:4d:b9:79:59:56:53:9a:
89:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:80:0B:99:8C:24:2A:6E:FD:66:8A:03:0C:BF:A0:58:20:04:70:06
X509v3 Authority Key Identifier:
keyid:BC:35:90:4E:24:DB:0E:99:04:95:A3:44:5E:77:D1:13:6E:D6:18:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDWQTiTbDpkElaNEXnfRE27WGNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/632dc0-4d2d-40c2-ab65-c38b1f9d457c/1/vDWQTiTbDpkElaNEXnfRE27WGNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:38:d4:34:81:3a:fa:b9:df:4c:5c:44:93:b9:76:b4:29:db:
03:a9:09:84:cf:23:73:ad:fc:a7:97:6b:20:a6:38:5c:36:e9:
3e:37:00:9d:74:25:e4:2e:59:ca:60:3e:66:c1:c9:5b:29:07:
1a:ce:38:08:de:49:31:3a:97:9a:13:77:44:08:55:78:9a:0c:
6e:39:b7:03:4e:1e:90:36:7a:69:d2:94:f3:7c:00:f0:3d:7d:
a8:a3:b8:87:ae:86:99:c4:2b:4d:b8:84:88:f9:82:04:58:5d:
13:00:04:da:66:76:c8:bc:c1:f4:79:42:01:a6:4c:aa:85:48:
72:9f:1d:6c:8a:54:ff:9b:a2:a9:9c:57:a9:37:64:c5:26:86:
8a:66:89:ad:6c:c6:b0:e8:ca:85:05:26:18:7f:06:8b:74:f6:
f0:e8:68:43:7f:41:27:85:ad:b3:1e:91:6b:29:19:c3:b3:13:
0b:2c:88:8c:24:20:9a:55:94:50:d1:b2:ea:79:81:ab:22:79:
e0:46:c0:68:11:82:f1:36:e0:47:a8:d8:29:9c:2e:07:39:49:
f9:e0:3b:3a:ce:c7:3a:e2:3d:9e:55:19:e3:9a:57:0b:3c:bd:
1e:2d:82:e1:4f:ce:90:b5:7a:80:ac:31:ae:b4:c8:8f:99:06:
34:a8:fa:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:03:46 2025 by rpki-client