Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.mft
File: w4w6HAXImev-FdI2GQmmNZfGgHg.mft (raw, json)
Hash identifier: cH+pd3LL01spBvXLbHde+GM+0Tie8c6MYvR5NHLT6A8=
Subject key identifier: F1:96:65:4D:79:40:34:69:1E:4B:A4:34:C6:4E:24:77:CB:B7:4A:B1
Authority key identifier: C3:8C:3A:1C:05:C8:99:EB:FE:15:D2:36:19:09:A6:35:97:C6:80:78
Certificate issuer: /CN=c38c3a1c05c899ebfe15d2361909a63597c68078
Certificate serial: 019511A30BF62AE22EB96EE555CB45FE979B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.mft
Manifest number: 1455
Signing time: Mon 17 Feb 2025 02:00:52 +0000
Manifest this update: Mon 17 Feb 2025 02:00:52 +0000
Manifest next update: Tue 18 Feb 2025 02:00:52 +0000
Files and hashes: 1: 3fbk5KZ8ThDjTTk1HUs_F8dpBIQ.roa (hash: QSUPjZJR7N2hLAV4a9vMxf89Cyng2AUNsEsGu9jShnE=)
2: q75v5EqZWH70d3-zw1Mz9lAhrNA.roa (hash: 42QWIn0E5NYeaE/XqOKgGlGrf3JcLpIWupxVplExU4g=)
3: w4w6HAXImev-FdI2GQmmNZfGgHg.crl (hash: uIcIwRCWdOWg20qMfZKCftvyJ/dMWm1jKwkWfoN2fWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a3:0b:f6:2a:e2:2e:b9:6e:e5:55:cb:45:fe:97:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38c3a1c05c899ebfe15d2361909a63597c68078
Validity
Not Before: Feb 17 02:00:52 2025 GMT
Not After : Feb 18 02:00:52 2025 GMT
Subject: CN=f196654d794034691e4ba434c64e2477cbb74ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0d:5d:47:d1:4b:49:bc:c1:a0:23:22:a7:21:
08:61:74:cf:a8:26:87:37:d5:41:51:cb:85:72:f6:
a8:3d:c7:f4:58:bc:3e:a8:48:2c:d3:60:18:78:62:
82:e2:5f:76:dd:3a:f6:a4:40:ca:76:a3:c5:b7:61:
b3:bb:09:87:26:3f:93:f9:12:dd:dc:f7:9f:a6:f7:
63:ca:68:f7:1d:92:b3:90:18:3b:a3:ba:da:6d:82:
1f:72:55:24:cf:37:c6:a9:26:8c:f7:db:36:19:1f:
1d:a8:ee:50:80:61:94:7e:6f:6b:67:e9:bc:18:8b:
ee:5e:f1:e8:5d:14:f7:57:74:f4:58:d6:bd:8a:93:
f0:2f:8f:22:18:bb:e3:95:db:23:53:d4:1c:f7:e5:
84:ce:cc:15:75:06:90:f1:38:aa:07:f5:e1:b1:eb:
3d:08:61:27:74:99:70:01:5b:5c:dc:08:25:f4:da:
40:01:75:a8:24:5b:c7:d2:20:86:d4:67:81:c5:d2:
9a:f5:e6:a2:38:0d:d1:52:ac:41:e4:ec:5e:d2:1a:
fc:f4:ae:f5:25:ca:a9:b4:65:aa:9c:5c:15:97:81:
e7:a0:e5:5b:a1:2a:0b:62:f7:2c:c4:14:f1:ee:45:
42:1c:fa:70:23:a9:c3:88:cc:5b:4d:b1:bf:ee:f2:
75:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:96:65:4D:79:40:34:69:1E:4B:A4:34:C6:4E:24:77:CB:B7:4A:B1
X509v3 Authority Key Identifier:
keyid:C3:8C:3A:1C:05:C8:99:EB:FE:15:D2:36:19:09:A6:35:97:C6:80:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b8:e7:b2:dc:df:ef:ac:ef:c5:ea:57:52:46:ac:fa:09:b0:
88:d5:dd:cf:42:c0:f4:b5:d1:55:e3:8e:ff:d7:b4:f5:47:69:
6a:d9:73:a5:ce:fb:56:71:2a:ff:5b:aa:24:78:df:b1:52:83:
53:ed:df:12:b2:0b:90:d9:62:44:6c:68:33:21:dc:a0:5a:8b:
7b:e4:ee:b3:5a:93:66:50:fc:a3:17:4b:22:c4:be:4f:63:b1:
99:1a:04:e2:11:e5:f5:13:21:2b:ec:e5:d4:cf:09:f0:69:50:
7d:da:5a:94:1d:df:d1:4d:e1:84:8e:db:d4:da:87:e0:b8:41:
7c:2d:80:46:0a:f9:d4:ec:51:46:7f:99:80:89:c3:a4:38:94:
55:55:82:31:7e:10:44:a4:6e:e6:a8:53:60:f6:53:22:66:16:
43:88:82:58:db:52:55:cd:c7:c2:e4:0b:1d:11:41:e9:e0:4f:
8a:a9:f2:c0:80:09:86:ab:2b:46:cb:2a:b3:b1:cc:9d:30:79:
ef:c1:08:ab:d5:5f:d2:6c:c0:e4:05:35:0b:01:e8:00:43:0e:
21:1a:15:25:f9:40:34:33:4c:0f:36:4f:cd:bc:03:35:0e:ab:
3a:50:21:e8:4b:1a:6f:4b:3f:db:6e:0c:a0:10:98:f4:e7:d2:
bc:e1:ca:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:38 2025 by rpki-client