Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
File: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft (raw, json)
Hash identifier: WdJes6trdP08FfI9mtmJywz/AyvwAZTukYZ0WPYoPpg=
Subject key identifier: E2:85:61:39:1A:E7:E2:AA:0D:78:90:18:AD:1F:0A:2E:28:73:6E:6A
Authority key identifier: 59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
Certificate issuer: /CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Certificate serial: 0194C507D4DD359BD05FE937E59B555C1619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
Manifest number: 0FAB
Signing time: Sun 02 Feb 2025 05:00:12 +0000
Manifest this update: Sun 02 Feb 2025 05:00:12 +0000
Manifest next update: Mon 03 Feb 2025 05:00:12 +0000
Files and hashes: 1: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl (hash: COcRz6t93IJchuJaBMzorWsO5GzF2P0XYM04t84HM9g=)
2: dNOgTjs7jrbB9SKSSUszlaLVAjo.roa (hash: 8MLaPme8W4wf5oENh8ADBmwmizbYMot4/vQ2rLYnm0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:d4:dd:35:9b:d0:5f:e9:37:e5:9b:55:5c:16:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Validity
Not Before: Feb 2 05:00:12 2025 GMT
Not After : Feb 3 05:00:12 2025 GMT
Subject: CN=e28561391ae7e2aa0d789018ad1f0a2e28736e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:40:96:96:9b:c3:e2:82:a4:24:06:13:20:8e:
4b:30:6f:ff:51:ae:35:9d:3d:fa:14:0d:7c:4f:52:
76:ef:09:d6:73:d0:2e:1e:b4:52:30:17:3b:28:16:
f0:79:d2:fd:58:59:97:c1:23:f5:68:5c:78:49:47:
78:7e:7d:03:86:24:9b:5c:a9:75:58:b7:c1:0a:5a:
38:2e:32:37:78:15:5f:33:2b:65:04:06:73:9b:68:
0b:57:7e:d6:6f:16:ec:7b:ba:48:2e:75:0f:e6:e0:
34:89:19:6b:e1:e3:cc:22:b7:4d:bd:62:59:39:72:
8a:23:a4:91:cc:45:ba:7d:c6:45:95:e6:10:0c:1d:
2b:ae:d2:b3:8b:d7:bb:74:01:c0:41:4b:de:b8:23:
03:49:55:c4:1b:78:7a:21:a7:f9:4e:8b:98:dd:79:
5d:00:11:85:e9:b6:37:2d:c2:88:e2:da:6f:5b:b9:
64:39:10:43:85:71:63:36:1c:eb:8e:b4:30:92:1f:
49:8c:81:dd:e9:56:f1:9e:ae:1c:6c:5c:7a:e7:e1:
0b:9a:fa:e8:94:16:75:85:e9:68:e4:30:e1:0f:3f:
1f:6c:f6:7a:1f:47:9a:d5:f7:a1:bc:dc:a0:4a:5f:
3d:b8:35:30:e3:99:e4:37:1e:47:b4:b7:c4:90:05:
0c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:85:61:39:1A:E7:E2:AA:0D:78:90:18:AD:1F:0A:2E:28:73:6E:6A
X509v3 Authority Key Identifier:
keyid:59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:19:7d:46:ac:ac:a5:e0:8a:68:3f:e7:f1:eb:49:c5:31:3a:
6e:c2:bb:01:89:af:7b:91:af:34:80:b5:bb:e9:b9:58:00:7f:
86:af:ee:1b:26:74:9a:f8:37:49:fc:a5:86:7e:4a:e1:0f:72:
fd:60:aa:11:ed:27:c3:94:8f:c4:cf:5c:48:ba:d4:98:0d:98:
a1:2d:3d:01:8c:cf:c7:ca:25:b2:14:71:97:d1:ff:fd:7d:9e:
85:91:53:49:a7:a2:bd:64:4d:f6:93:75:08:39:6b:d3:26:74:
6f:46:a4:b5:91:be:51:43:0a:1f:25:76:4d:dd:59:f8:0d:0f:
57:73:fa:0a:b2:87:fd:13:30:f5:49:7a:19:5e:ed:4d:44:51:
fc:ff:60:67:df:ba:92:3b:51:3f:f8:88:f7:e9:8d:74:31:79:
8e:2b:18:25:79:ca:30:e6:79:26:c9:e6:9a:31:af:5b:69:59:
a1:f0:90:ff:70:f3:ca:26:0e:ba:26:82:f0:a3:d1:63:31:a5:
23:c0:27:f7:90:84:20:5d:d4:af:9d:bd:57:cd:7f:3e:d2:dd:
15:45:5f:c4:dd:ae:28:56:4a:ab:33:cf:eb:17:64:02:f7:65:
54:f3:6a:bb:4a:b1:15:b6:c7:46:4e:26:5f:1f:cd:fd:ac:7c:
92:c7:c9:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTFB9TdNZvQX+k35ZtVXBYZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZjI0NzBjMDNhMGYwYmFkMDA4NDZiMGY2N2M3YTIzMmQ1
NTcyODgwHhcNMjUwMjAyMDUwMDEyWhcNMjUwMjAzMDUwMDEyWjAzMTEwLwYDVQQD
EyhlMjg1NjEzOTFhZTdlMmFhMGQ3ODkwMThhZDFmMGEyZTI4NzM2ZTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkCWlpvD4oKkJAYTII5LMG//Ua41
nT36FA18T1J27wnWc9AuHrRSMBc7KBbwedL9WFmXwSP1aFx4SUd4fn0DhiSbXKl1
WLfBClo4LjI3eBVfMytlBAZzm2gLV37Wbxbse7pILnUP5uA0iRlr4ePMIrdNvWJZ
OXKKI6SRzEW6fcZFleYQDB0rrtKzi9e7dAHAQUveuCMDSVXEG3h6Iaf5TouY3Xld
ABGF6bY3LcKI4tpvW7lkORBDhXFjNhzrjrQwkh9JjIHd6Vbxnq4cbFx65+ELmvro
lBZ1helo5DDhDz8fbPZ6H0ea1fehvNygSl89uDUw45nkNx5HtLfEkAUMgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKFYTka5+KqDXiQGK0fCi4oc25qMB8GA1UdIwQY
MBaAFFnyRwwDoPC60AhGsPZ8eiMtVXKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9jZWM2ZDYtNmQzNC00MTA3LWI2NzIt
OTJiZWYzNGU3N2FhLzEvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9jZWM2ZDYtNmQzNC00MTA3LWI2NzItOTJiZWYzNGU3N2Fh
LzEvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfBl9Rqys
peCKaD/n8etJxTE6bsK7AYmve5GvNIC1u+m5WAB/hq/uGyZ0mvg3Sfylhn5K4Q9y
/WCqEe0nw5SPxM9cSLrUmA2YoS09AYzPx8olshRxl9H//X2ehZFTSaeivWRN9pN1
CDlr0yZ0b0aktZG+UUMKHyV2Td1Z+A0PV3P6CrKH/RMw9Ul6GV7tTURR/P9gZ9+6
kjtRP/iI9+mNdDF5jisYJXnKMOZ5JsnmmjGvW2lZofCQ/3DzyiYOuiaC8KPRYzGl
I8An95CEIF3Ur529V81/PtLdFUVfxN2uKFZKqzPP6xdkAvdlVPNqu0qxFbbHRk4m
Xx/N/ax8ksfJWg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:23 2025 by rpki-client