Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft
File: w8YbUevIQYDwprIy6H351hyQ-qs.mft (raw, json)
Hash identifier: PVynXL4k2oFp/vlp0xpUzggbzmw8Bmv1IG/uEIveHPg=
Subject key identifier: 0B:03:57:D7:ED:97:F3:AB:4C:7A:55:E9:76:FC:D1:93:EE:FB:F8:A0
Authority key identifier: C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
Certificate issuer: /CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Certificate serial: 0194C49A7316AE4E2BA8A2CDE0AD3A063A9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft
Manifest number: 1434
Signing time: Sun 02 Feb 2025 03:00:43 +0000
Manifest this update: Sun 02 Feb 2025 03:00:43 +0000
Manifest next update: Mon 03 Feb 2025 03:00:43 +0000
Files and hashes: 1: 1-ndEryzCguWCGvVWWmkd8W4KbQ.roa (hash: W7EqtKjOdrRjfIUBcKhssjKWmvswGN88L1U5twVHTxE=)
2: 5fWADeIk4d10ZbIqGhJnIwZyHH8.roa (hash: QzLL6CT6LeM4dPuY4ZTi6ISO36hu50lOly24fxPuWC4=)
3: w8YbUevIQYDwprIy6H351hyQ-qs.crl (hash: WVCIQdBW7sdfqS7WDJ3zdqX6sqIl6WtCUIL6kqZn2lU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:73:16:ae:4e:2b:a8:a2:cd:e0:ad:3a:06:3a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Validity
Not Before: Feb 2 03:00:43 2025 GMT
Not After : Feb 3 03:00:43 2025 GMT
Subject: CN=0b0357d7ed97f3ab4c7a55e976fcd193eefbf8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:84:36:bb:63:5b:c2:83:94:4b:c4:c0:dc:46:
e9:ff:e4:a0:71:be:e0:66:34:51:50:5b:83:cb:c9:
4d:9f:5c:e5:38:e5:c4:a1:6b:d2:c3:cd:eb:4a:d8:
85:64:35:5b:2e:e3:9e:bc:43:f9:d8:65:eb:64:82:
ae:d1:de:0a:d6:68:71:9b:95:c2:38:d7:6c:46:5f:
a1:0f:03:28:94:b1:9f:01:44:58:24:51:4b:aa:9c:
6e:df:c4:54:d4:34:c1:58:13:bd:2c:de:f2:2c:ee:
93:28:63:26:f9:50:c3:95:4a:c8:f7:1d:b3:57:3a:
ec:91:9d:91:c6:ef:4d:87:d5:c9:f0:5d:50:9d:80:
70:c5:80:6f:ce:8f:c8:49:cf:78:db:a9:8c:17:d6:
c2:7b:5a:ad:6a:a8:3d:ea:43:f8:f5:bf:95:3f:5e:
c7:ae:48:f8:3a:e6:2a:e8:cc:ed:b7:bd:05:66:f0:
57:80:35:e0:04:57:d9:0b:74:bd:9d:c9:ac:fd:d4:
ce:6d:e5:69:4e:72:b4:92:a7:6b:f4:16:a9:a7:80:
8b:f0:03:a1:ec:21:a9:4e:95:12:14:7c:d4:ec:1b:
b5:9d:a3:b1:c2:1d:23:32:c6:2b:72:52:da:95:81:
3b:e4:10:3c:05:14:9b:0f:68:f3:6b:4a:48:60:86:
6a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:03:57:D7:ED:97:F3:AB:4C:7A:55:E9:76:FC:D1:93:EE:FB:F8:A0
X509v3 Authority Key Identifier:
keyid:C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:62:dd:f4:c8:f8:24:f8:55:7e:f3:e5:55:b8:6a:c1:76:53:
3a:43:4d:d3:3d:21:11:23:51:74:5a:88:ba:6b:d8:51:70:d2:
42:a9:2c:92:2a:6f:e9:76:a9:0a:04:b2:a9:a1:5a:34:c0:e1:
f9:be:8d:5a:91:6c:47:04:8c:da:af:63:56:9e:c3:bf:5d:d6:
3b:a7:4d:e8:de:12:b6:37:af:84:38:15:3e:44:66:23:5b:95:
d1:d5:e0:28:c3:1e:42:d1:05:08:94:e1:d1:db:93:24:75:b5:
4d:96:bb:f6:b9:e6:61:65:04:8c:f0:c3:a3:e7:81:09:2a:57:
72:7f:55:32:b7:fd:1f:17:e6:bf:13:a5:10:1f:13:21:3e:cb:
1a:ba:d8:3d:fc:b8:71:85:75:af:8f:27:2a:fc:c9:de:e5:a9:
d5:83:8f:d5:2d:e1:f0:1f:a5:3d:4f:64:0a:b2:c3:30:e3:42:
18:f2:69:73:ec:68:20:4d:64:5c:82:06:01:4d:94:41:fb:11:
41:50:2e:7f:05:35:66:1e:87:bb:47:4b:b8:02:d4:e0:3e:46:
cb:b8:b4:1b:ff:e3:6e:0e:c9:f5:7a:b2:9a:9c:67:05:4c:c5:
a0:03:3d:bb:d5:2e:5c:22:d4:2b:1f:e5:8b:ee:f9:1e:84:69:
68:82:ad:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:04:43 2025 by rpki-client