Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
File: wNKohFzfZXbejrARGAir1l_YvEQ.mft (raw, json)
Hash identifier: ArCK49tz0LgHphEUmFeJrnutMcsXc7n4N0shBcuhr8Y=
Subject key identifier: F3:A7:55:60:54:F6:49:DA:3E:41:66:94:F5:FF:D6:EE:F8:2F:09:C4
Authority key identifier: C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
Certificate issuer: /CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Certificate serial: 019510C7E917DC363FD6F9428141C08EA6D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 22:01:31 +0000
Manifest this update: Sun 16 Feb 2025 22:01:31 +0000
Manifest next update: Mon 17 Feb 2025 22:01:31 +0000
Files and hashes: 1: OmgVAw8ZHFFpHCyw7LOehrOM8KA.roa (hash: 6CbGQ8M2p8DqUv4lPi9kJg+A49OPSohIvq46VoGyAHM=)
2: iB80sjC3FaeKn3w8-_wDD7I9eLg.roa (hash: J8k5oGXUl2TYImVeWDD/bvu/zaBz6UEfFHiKZd9EJV0=)
3: wNKohFzfZXbejrARGAir1l_YvEQ.crl (hash: 9tZuPnUNjcZeb1YfYS8QX2ns2lQlx1rtHl+UxI+cMpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:e9:17:dc:36:3f:d6:f9:42:81:41:c0:8e:a6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Validity
Not Before: Feb 16 22:01:31 2025 GMT
Not After : Feb 17 22:01:31 2025 GMT
Subject: CN=f3a7556054f649da3e416694f5ffd6eef82f09c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:74:65:c8:db:2a:fc:e6:3b:84:08:77:46:1a:
68:f7:57:3a:d6:ad:d8:9e:15:e6:09:1c:15:c1:21:
09:00:10:0d:f8:c8:99:18:a1:b7:65:21:43:3c:5d:
83:d2:e3:73:ac:d5:18:f8:f6:a5:95:db:85:c6:f0:
69:21:39:c7:9c:c8:d0:26:3a:f8:bd:1d:ad:df:be:
5e:82:6e:7d:e3:8d:cc:34:d2:9c:69:80:8c:c5:ad:
14:20:c1:47:2d:cd:53:be:be:3c:d4:0c:76:51:a5:
c4:85:06:06:98:69:32:33:72:41:0f:32:f6:89:4c:
64:25:9b:a5:29:3d:4e:d3:00:27:c1:4a:03:fd:26:
86:31:11:49:87:98:41:60:9d:94:25:3b:bb:f4:1f:
96:dd:fc:32:22:dc:07:d1:c4:6a:4e:63:ea:f1:58:
91:4f:f6:b2:72:c2:75:ca:2f:da:55:5e:15:01:a0:
1b:4d:6b:45:6d:0d:22:3d:2d:15:17:5e:c8:4c:b6:
f3:18:f4:5c:8b:45:12:a2:43:3f:09:1b:48:77:a6:
33:33:9b:67:72:5c:4c:2e:7c:8c:bb:56:89:5f:88:
83:1d:ba:34:2e:47:1a:b0:0f:aa:21:70:db:3c:4b:
31:e3:88:b8:c1:7e:8e:c7:d2:04:d3:bd:37:ee:e2:
81:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A7:55:60:54:F6:49:DA:3E:41:66:94:F5:FF:D6:EE:F8:2F:09:C4
X509v3 Authority Key Identifier:
keyid:C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:05:5a:a9:60:96:c2:f2:f3:d7:6c:02:4a:32:cc:31:7a:11:
93:16:60:7f:ca:2c:c6:28:ee:9b:8a:06:dc:0a:d9:74:be:7b:
c2:7b:c5:ad:69:f4:cc:cd:0c:fe:9b:b0:ea:6e:1a:93:e7:f5:
83:4b:d3:74:97:4f:5a:55:cf:90:cd:3b:12:49:6e:0e:9b:a6:
47:fc:85:10:6f:fa:fd:3f:a7:fd:2d:dd:09:4c:02:11:67:24:
f3:d5:24:bc:48:b5:ee:ed:94:08:67:7c:3a:cd:5c:9f:6e:bd:
19:a1:49:03:94:cf:ee:b2:14:67:5b:e7:ab:06:40:ca:85:e4:
22:ea:28:57:e5:da:5b:34:d0:c3:e5:01:58:2b:40:2a:ea:ce:
ae:21:dc:05:a4:ce:09:f8:2c:3f:25:44:68:d5:72:73:2b:f1:
42:61:1f:38:0c:b9:80:2f:8f:fc:80:8d:de:cf:77:f4:95:d8:
04:69:86:56:80:e9:aa:82:0b:46:37:28:15:ee:09:4d:54:33:
0b:f1:23:00:7f:a1:56:f4:3a:4f:7d:75:ef:bc:7e:35:64:0a:
2e:f0:6e:1b:e9:ca:0a:43:f7:33:69:ef:7f:5c:1b:1d:c0:8b:
23:1f:93:68:5e:07:ba:d0:67:26:f8:a9:78:25:1a:38:33:80:
08:2d:94:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:28 2025 by rpki-client