Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft
File: IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft (raw, json)
Hash identifier: iHVYulIc0mk1j4TNP9UciRvGEm7xDebGOnj71LleZ5g=
Subject key identifier: 0A:62:C4:A3:38:04:B9:3C:AA:05:68:E1:B5:B7:0F:B8:BE:26:E3:6F
Authority key identifier: 22:C5:A0:C2:AC:3B:16:79:49:9A:96:BE:31:E4:3B:E8:5C:F0:99:53
Certificate issuer: /CN=22c5a0c2ac3b1679499a96be31e43be85cf09953
Certificate serial: 019512106D3F5FC6116AEA07B4F631DC9F25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft
Manifest number: 0C0B
Signing time: Mon 17 Feb 2025 04:00:21 +0000
Manifest this update: Mon 17 Feb 2025 04:00:21 +0000
Manifest next update: Tue 18 Feb 2025 04:00:21 +0000
Files and hashes: 1: IsWgwqw7FnlJmpa-MeQ76FzwmVM.crl (hash: rOmsYlboAbzl+iUluVDUv9SvndK0mPVmlhbLGEGclKc=)
2: XEwYa6CNvkLJC5LAUGlV5sU-Q7E.roa (hash: lSmShr06n6oTDTvfvIY+6+zA1Q+CWsMk4yBsQNB5LQo=)
3: d2wksXhCd5wl5AD5yX7cxgOMqWE.roa (hash: d845mWomVKLCLy4AeHi3nVtLKMNrF2F8tv4m480Itc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:6d:3f:5f:c6:11:6a:ea:07:b4:f6:31:dc:9f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c5a0c2ac3b1679499a96be31e43be85cf09953
Validity
Not Before: Feb 17 04:00:21 2025 GMT
Not After : Feb 18 04:00:21 2025 GMT
Subject: CN=0a62c4a33804b93caa0568e1b5b70fb8be26e36f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:20:d7:fe:05:38:22:77:6c:e6:68:04:07:8d:
22:ab:30:36:1e:91:28:70:f7:4f:84:d1:32:13:48:
60:12:39:d3:ff:22:51:08:6e:ca:44:a0:c2:3c:ca:
b4:9c:19:5a:2b:29:9c:9a:d8:f3:9c:99:10:e4:a9:
08:3e:af:85:e9:0b:27:e4:41:86:49:c0:32:80:60:
61:e4:1c:37:a1:3f:73:26:5a:97:71:07:79:5e:20:
72:d8:69:ee:df:31:56:85:9b:b2:5e:55:e2:20:4e:
24:dd:48:b8:1d:9d:e5:97:78:4d:a1:24:ba:da:67:
67:08:c4:dc:1e:9e:49:ce:d3:3e:1b:2e:13:4c:71:
fe:f1:22:b2:b4:ce:54:e9:27:ad:61:a3:6e:c5:8b:
fd:c9:38:01:ab:0a:58:4f:f1:6b:54:ca:f4:cd:44:
f5:bd:55:b7:21:43:0b:86:0b:38:4d:4a:63:86:0d:
d8:f8:97:05:85:f9:36:44:3b:f6:dc:79:0c:35:c7:
59:67:f1:1e:46:b7:18:35:a6:78:39:a0:d3:9e:eb:
57:85:fe:3f:fd:8d:e1:78:cc:39:89:6e:ce:05:f6:
1e:3d:12:a6:d8:5c:3e:e0:f7:48:b7:6a:fc:38:77:
9f:e2:b3:8e:69:d6:57:33:56:d1:37:0d:9c:41:21:
c9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:62:C4:A3:38:04:B9:3C:AA:05:68:E1:B5:B7:0F:B8:BE:26:E3:6F
X509v3 Authority Key Identifier:
keyid:22:C5:A0:C2:AC:3B:16:79:49:9A:96:BE:31:E4:3B:E8:5C:F0:99:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ac:63:92:8f:18:22:0d:17:a4:a0:d3:af:c0:ca:8c:70:17:
cb:0a:4c:c3:d3:7a:b5:37:8f:98:45:34:ef:d8:2c:8a:7d:59:
01:21:d4:c0:5b:1e:04:33:f0:28:da:13:26:05:ce:c8:30:24:
7c:6a:96:91:dc:b7:23:84:09:42:06:53:0b:3b:7b:76:7d:1f:
52:7f:55:c2:61:98:7b:48:ae:44:69:64:0f:ea:ea:57:27:94:
29:7b:0a:8c:5a:a6:11:e4:86:27:74:76:09:3c:16:bb:b7:07:
03:aa:0c:1f:40:8b:c3:2f:a3:db:2f:ea:41:d1:65:7f:92:65:
31:7a:14:1f:17:1e:33:38:08:aa:09:0d:05:9c:5b:da:0b:1e:
00:ef:1b:9b:c2:1e:d7:10:df:a6:8e:64:0c:3c:96:60:51:d1:
f6:e1:ed:c2:46:46:a9:3d:06:81:c3:ef:00:b1:f2:2d:39:8b:
31:fe:9e:7f:e2:fe:76:d2:59:fe:08:c0:e9:c2:52:cc:f5:b0:
4b:57:47:70:22:cc:df:d6:e1:0c:a7:64:82:33:da:c2:3e:cc:
54:9b:e1:2e:b7:7e:33:a6:c5:c4:ea:d5:3e:72:35:53:a3:e8:
5e:c0:53:dd:ba:cf:a7:08:9b:9e:5b:37:e6:c8:d2:ad:fd:bc:
43:f9:df:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:23 2025 by rpki-client