Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
File: warwQ_4gnANFNiIF-Mx81hlRwn4.mft (raw, json)
Hash identifier: jJAeRteNf3RNXiOfM540l+GbRHyA3O6W1eF1KpEUE9A=
Subject key identifier: 44:F5:D4:ED:6A:EA:90:A2:8E:86:3F:28:9E:A0:95:23:36:0A:C1:8E
Authority key identifier: C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E
Certificate issuer: /CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
Certificate serial: 0195108FD2E8766E65F15674B154C95EFED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
Manifest number: 0CCD
Signing time: Sun 16 Feb 2025 21:00:15 +0000
Manifest this update: Sun 16 Feb 2025 21:00:15 +0000
Manifest next update: Mon 17 Feb 2025 21:00:15 +0000
Files and hashes: 1: oLyY8vvBAfeOhRsj9eexvuktQm4.roa (hash: scoM8Sq6POvOb7psz/VnzYZYQjNB2n1Y53tdfQTGFcc=)
2: warwQ_4gnANFNiIF-Mx81hlRwn4.crl (hash: mNgcZKZ1rRuQ7tKWW5fPTYwPDVwjs5voo/Xs5PzwSkk=)
3: yuwuNuzvATZfP3JuA06dTGzQ9o8.roa (hash: iaJVdCZsnNb9Cyubf2e2B713adANaUt93mNYt5mCPK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:8f:d2:e8:76:6e:65:f1:56:74:b1:54:c9:5e:fe:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
Validity
Not Before: Feb 16 21:00:15 2025 GMT
Not After : Feb 17 21:00:15 2025 GMT
Subject: CN=44f5d4ed6aea90a28e863f289ea09523360ac18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:99:25:e0:cd:72:87:57:2c:60:6a:43:b2:b4:
8d:4e:ba:3d:bc:3d:3e:9f:55:6d:42:56:35:6b:cc:
70:ff:4d:e7:0c:35:6b:32:36:b9:1f:7e:56:15:e7:
51:a2:ac:fd:a6:f7:34:6c:ba:e6:f0:12:41:dc:00:
c4:6f:2b:37:5c:ca:43:3a:e4:26:da:3d:55:fa:33:
8f:bd:2e:78:8c:29:c9:1c:7d:0b:ad:01:85:93:5b:
09:b0:b3:95:d3:ff:d8:2a:3d:b9:fb:37:43:f0:0a:
8f:c5:69:46:fb:86:7d:75:f5:37:09:60:3e:46:ac:
cd:32:2d:df:ce:bb:56:7f:77:69:4a:5f:d0:da:03:
8c:a9:83:d0:10:cd:f9:e8:29:d8:ab:54:d1:16:60:
38:1a:11:30:8a:94:65:d1:f6:43:8a:ff:5c:61:c5:
11:d9:df:9c:f9:4a:be:38:f9:32:01:f2:d0:f3:30:
5c:0b:05:21:af:73:28:7b:d3:8d:06:14:8f:58:f3:
33:7a:5f:9f:2e:54:fe:36:66:2c:01:6f:f5:0d:84:
dc:af:9e:9b:99:4d:56:55:24:46:78:b8:67:29:dc:
e7:55:a6:79:95:d1:54:53:81:5f:be:0d:25:58:8e:
d5:6e:00:70:b6:8c:a6:c3:26:94:cf:2f:a0:12:18:
b4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F5:D4:ED:6A:EA:90:A2:8E:86:3F:28:9E:A0:95:23:36:0A:C1:8E
X509v3 Authority Key Identifier:
keyid:C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:43:c9:4e:1b:96:33:66:39:09:31:ff:b8:4d:76:c8:c6:ba:
24:cf:eb:98:71:36:65:ab:41:68:c8:39:e8:e1:1b:c9:ce:39:
c5:d2:dc:af:4c:3d:43:d7:bf:99:fe:06:93:a1:21:a0:5b:bc:
09:af:59:54:ef:4a:6b:1e:d2:a2:5b:90:47:10:9e:4e:30:35:
6e:59:2f:f3:aa:a1:d1:48:b3:f7:55:9e:8c:75:a1:b9:e3:87:
c3:3f:21:62:94:49:dc:f3:e3:75:fd:f0:88:11:55:c2:f5:0f:
18:33:cf:b2:c0:76:e6:d1:73:db:19:4e:07:50:7c:d2:55:93:
8e:d5:80:b5:55:ff:74:bf:4f:43:b4:76:c3:fd:21:6c:66:c5:
54:de:54:c7:93:4b:b2:f1:39:fc:36:13:c8:77:87:72:af:7b:
59:7d:a6:90:ee:a8:f6:a1:c9:33:3c:6e:64:66:74:41:e6:9b:
61:25:7d:38:f7:43:27:82:72:a8:cf:df:67:2d:ff:f7:75:11:
46:85:cb:92:26:ea:a7:b9:f0:d3:e8:24:ca:34:a5:d1:11:fc:
bc:1b:c3:39:37:12:a2:4e:7b:a4:73:7c:1c:9c:1a:55:65:05:
16:bb:0f:03:21:3e:59:77:c7:ee:80:32:c6:09:91:61:89:28:
51:6a:d3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:20 2025 by rpki-client