Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
File: WtYtZLAg5sARSELydiZePAfT6lw.mft (raw, json)
Hash identifier: +9jnVOuXo48+3sFvhrvVTUr9g+/L60UIbLAO/sM0FMc=
Subject key identifier: 9A:61:9F:4C:C6:C9:17:7B:42:A9:0A:EC:AF:17:1A:A2:56:84:A2:1E
Authority key identifier: 5A:D6:2D:64:B0:20:E6:C0:11:48:42:F2:76:26:5E:3C:07:D3:EA:5C
Certificate issuer: /CN=5ad62d64b020e6c0114842f276265e3c07d3ea5c
Certificate serial: 0194C42C4FC8C5FCFF6F94A6A236D3DCB05D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
Manifest number: 40
Signing time: Sun 02 Feb 2025 01:00:25 +0000
Manifest this update: Sun 02 Feb 2025 01:00:25 +0000
Manifest next update: Mon 03 Feb 2025 01:00:25 +0000
Files and hashes: 1: WtYtZLAg5sARSELydiZePAfT6lw.crl (hash: INconjgSLQK/qNP67fSuZ/QTN13f3BHGlI4z1z3YYpU=)
2: lZfbUbYtdAwEvAPz9QgaQ6AiUzc.roa (hash: 95YPoU3EnMBScsmNlHgLSHa16IwnjsnV9FN8H0xyPaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:4f:c8:c5:fc:ff:6f:94:a6:a2:36:d3:dc:b0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad62d64b020e6c0114842f276265e3c07d3ea5c
Validity
Not Before: Feb 2 01:00:25 2025 GMT
Not After : Feb 3 01:00:25 2025 GMT
Subject: CN=9a619f4cc6c9177b42a90aecaf171aa25684a21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:19:2f:ed:e3:ad:78:53:8b:ec:02:d8:df:fc:
4c:35:13:44:fe:64:c0:9d:af:8f:22:5b:79:3c:3e:
3a:fb:d0:81:8f:d0:63:45:a4:a9:07:cc:ac:aa:47:
9d:00:ec:06:16:64:85:3c:a5:3f:b0:0b:b9:5a:e0:
b4:d1:81:24:32:93:e3:33:0a:bd:27:60:1c:76:4d:
33:c5:ec:d6:d2:02:eb:a5:37:16:f4:08:44:7a:bc:
e1:85:83:ff:a7:a1:8a:4d:76:f1:5c:7b:1b:06:1e:
63:52:49:29:13:4d:e8:eb:f6:79:0a:9b:e6:b4:7c:
45:c4:54:fc:ba:9f:cb:82:96:92:14:70:56:cc:9f:
d7:95:1a:f0:4f:fa:76:09:2c:22:df:f3:a1:d6:37:
81:c4:e6:f2:65:94:ac:88:f9:6c:84:72:d7:92:18:
c3:7e:4b:42:fb:73:b1:04:8b:c2:9e:5f:04:c4:88:
7f:fe:ce:7e:1c:71:7e:ff:f9:f8:94:13:fe:96:e2:
b0:a6:a1:2d:f5:eb:a0:44:2c:83:db:b9:ad:75:2e:
73:71:bf:41:ec:39:39:5a:bd:c9:32:bc:ad:10:6c:
85:74:8d:e4:29:02:a9:84:6c:7b:4d:a7:24:ff:e6:
81:35:e1:29:b9:6b:16:d2:86:36:35:7f:94:89:e7:
ee:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:61:9F:4C:C6:C9:17:7B:42:A9:0A:EC:AF:17:1A:A2:56:84:A2:1E
X509v3 Authority Key Identifier:
keyid:5A:D6:2D:64:B0:20:E6:C0:11:48:42:F2:76:26:5E:3C:07:D3:EA:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:1b:af:5b:3c:44:de:ff:5a:09:04:9e:27:f2:57:24:53:8f:
d2:b5:55:ce:fd:f0:f2:21:68:0c:6c:be:1b:4d:17:63:20:6c:
be:4c:ce:15:b8:44:c6:95:e3:ea:f9:93:78:9a:8c:ed:53:5d:
84:67:ca:8f:8d:96:42:2a:91:05:6a:84:a5:34:ed:d3:ce:07:
86:ab:94:38:32:83:1e:83:c4:51:cb:74:51:4b:d2:22:ae:55:
64:c8:0f:53:70:08:55:73:4a:fd:50:f6:5d:7a:cb:9f:41:a0:
e2:0e:a1:32:83:a0:9d:e1:f2:2a:58:f5:50:6f:6c:aa:d6:60:
86:8f:61:30:fd:dd:76:f9:62:0e:d5:01:5b:a2:a6:50:8d:ae:
05:21:03:50:4a:bd:e2:a2:ea:c5:50:c2:4a:26:df:af:95:62:
0c:5b:64:45:4a:33:f0:77:a8:6e:47:65:96:cc:fd:d7:4f:bd:
fc:24:fb:51:27:97:40:c5:6b:be:ae:ee:52:77:b7:d1:c0:d3:
2a:5a:97:ee:19:27:a6:8b:dc:c5:af:60:0e:b4:4e:f7:76:36:
40:6b:ad:a2:1c:47:10:ec:94:af:b8:9c:98:91:84:d6:d9:dd:
68:d6:25:d3:71:36:d5:a9:92:c0:c0:49:ac:3b:81:a6:52:9a:
d1:6e:9c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:08 2025 by rpki-client