Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
File: uwoTocnh3YTt5DKDSQvng4d1SpQ.mft (raw, json)
Hash identifier: HRPVcYzGZzeZ9ohTDt/Vhx+vlGQ3W1EISb9vjLYe4tg=
Subject key identifier: E4:7D:29:C1:67:1C:E8:84:35:61:A2:22:7D:EA:90:65:44:FF:F1:5F
Authority key identifier: BB:0A:13:A1:C9:E1:DD:84:ED:E4:32:83:49:0B:E7:83:87:75:4A:94
Certificate issuer: /CN=bb0a13a1c9e1dd84ede43283490be78387754a94
Certificate serial: 0195116BC63CC100F3F2373EF052EC18ADC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
Manifest number: 1454
Signing time: Mon 17 Feb 2025 01:00:30 +0000
Manifest this update: Mon 17 Feb 2025 01:00:30 +0000
Manifest next update: Tue 18 Feb 2025 01:00:30 +0000
Files and hashes: 1: e4ClDxZZC-HgzfD6jjAt7w6H7rI.roa (hash: s/lm7kNCD/Mf0FKczgw09MeHHAa4AoL+4qjfAKGabq0=)
2: uwoTocnh3YTt5DKDSQvng4d1SpQ.crl (hash: D/0Gf4XWjBralYUvhxBau3dQoCW4XuSgpHpHe63gMEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:c6:3c:c1:00:f3:f2:37:3e:f0:52:ec:18:ad:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0a13a1c9e1dd84ede43283490be78387754a94
Validity
Not Before: Feb 17 01:00:30 2025 GMT
Not After : Feb 18 01:00:30 2025 GMT
Subject: CN=e47d29c1671ce8843561a2227dea906544fff15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:56:75:cc:79:c3:01:b3:54:5b:3e:ae:94:5b:
45:fb:97:1f:f6:26:ea:bf:13:72:95:71:7a:1f:36:
d1:4f:28:b0:85:7c:f3:24:40:77:39:21:69:df:93:
e4:64:45:26:35:2f:88:96:26:86:13:c3:72:43:ea:
8f:cd:3f:01:62:c3:aa:73:cd:c7:71:73:0f:0d:bf:
a7:71:de:2f:7e:22:53:90:63:42:89:b6:7c:d7:12:
da:3d:2a:3a:fb:00:a7:70:77:0b:03:91:51:b2:83:
3d:cb:c6:ef:a1:91:25:75:bc:15:1e:58:6d:2f:2e:
34:01:58:8c:b3:35:f5:6e:11:be:96:3a:61:db:a9:
66:8a:ee:82:62:c0:bc:35:1a:dd:b0:93:8e:d4:ee:
fc:34:52:2f:d4:25:e4:e2:13:ce:19:1b:eb:cf:3c:
b4:bf:a6:70:c4:50:cb:a1:b5:27:19:30:ee:f4:cb:
5e:35:ce:05:b1:7f:49:04:5d:fd:ec:77:e3:b6:0e:
86:35:3d:8b:b0:92:96:f8:20:ee:3e:85:aa:d0:f3:
2c:7f:88:7d:12:d6:21:cd:f3:b7:49:e7:39:41:bc:
d6:29:05:65:30:fe:84:7f:7a:be:3a:c2:47:c2:12:
b9:a5:88:38:30:ef:8d:d3:c2:16:2d:40:16:69:04:
a0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7D:29:C1:67:1C:E8:84:35:61:A2:22:7D:EA:90:65:44:FF:F1:5F
X509v3 Authority Key Identifier:
keyid:BB:0A:13:A1:C9:E1:DD:84:ED:E4:32:83:49:0B:E7:83:87:75:4A:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:64:68:dc:d5:8e:82:04:08:9c:a4:95:18:16:ab:89:0c:16:
9b:b3:69:eb:2c:60:17:12:ed:a4:34:88:c4:18:59:7b:ae:20:
bf:1e:17:c9:14:73:92:13:89:de:d3:c6:4f:bd:a7:a2:9b:b4:
ed:f5:05:f7:c0:d9:e6:15:58:24:b3:99:d1:f4:f5:47:96:f3:
a8:28:39:a3:8b:c0:b6:5c:92:8d:4f:7c:37:f4:95:5f:b7:62:
f4:9a:3c:60:15:a4:c8:52:ce:a8:31:19:2a:a9:de:b9:ce:94:
04:63:df:e4:6f:ab:c3:67:a2:c0:7a:f7:ee:2c:c2:fb:61:04:
16:f7:67:79:a9:21:8b:c1:b4:6d:ab:7e:52:f6:f7:de:ea:a4:
e5:54:e6:fe:8a:d6:9f:51:fc:2f:98:e5:6b:b6:31:50:d3:00:
55:f7:28:b5:fa:8c:be:20:5f:e9:96:d5:e9:0d:24:9e:1c:2f:
9b:61:2b:0f:a0:c0:3f:fa:ae:21:f9:4a:39:d6:40:71:0f:fa:
dd:95:1d:77:25:83:b9:c5:c7:2b:c9:4e:66:c2:3d:1b:bd:7b:
ff:85:59:19:98:24:a3:66:f4:01:50:11:d2:05:b0:8d:59:b5:
89:db:f8:bc:a5:ac:87:dc:b8:ad:0f:13:0e:e4:01:2a:f9:1b:
5e:d3:c7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:54 2025 by rpki-client