Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
File: CjMvWtwEaVM7vdz86JV-ruWL_WA.mft (raw, json)
Hash identifier: YBmpaiciYAA9ud36X40aUCLxWl8AHwKl46eQxXen4D4=
Subject key identifier: 1A:3A:25:13:B4:DB:31:A8:B3:90:B5:A0:DD:C1:86:08:D0:A2:BB:EB
Authority key identifier: 0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
Certificate issuer: /CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Certificate serial: 019511A27785309434134AC37CBFD272D337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
Manifest number: 145B
Signing time: Mon 17 Feb 2025 02:00:14 +0000
Manifest this update: Mon 17 Feb 2025 02:00:14 +0000
Manifest next update: Tue 18 Feb 2025 02:00:14 +0000
Files and hashes: 1: CjMvWtwEaVM7vdz86JV-ruWL_WA.crl (hash: cZTyc8s6cnFQb7CEQOjykuTzRqR7RuUZVFA4T8IuUlU=)
2: GONoBaS0nACGnEjc-yHuqDoDlew.roa (hash: eVcWG363H9IPwj/aWLR4h7Mq2fdRg0ul16LrmgLPOaU=)
3: kSa4_sqr5-NiqBRmmF4fkyu-chg.roa (hash: nw6nn6yk21XAzxXJuVEoChD6KrMH42rDNZdSGxHsW0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:77:85:30:94:34:13:4a:c3:7c:bf:d2:72:d3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Validity
Not Before: Feb 17 02:00:14 2025 GMT
Not After : Feb 18 02:00:14 2025 GMT
Subject: CN=1a3a2513b4db31a8b390b5a0ddc18608d0a2bbeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:12:7b:e6:9f:70:68:84:63:9e:95:ec:b6:51:
13:31:19:12:4f:30:d1:9a:80:5c:94:3f:1d:6e:e8:
33:e3:80:5d:f7:6d:21:cd:6a:cb:62:32:40:86:19:
6f:9d:11:a4:46:3e:9c:ca:3b:ee:5f:43:42:bb:02:
f4:12:2f:14:7d:2e:c0:c8:25:17:76:db:ce:71:7a:
11:a0:37:61:36:f8:d7:50:0a:7d:42:cd:7a:62:94:
c8:12:27:f2:8f:f6:eb:e9:d7:fb:92:34:53:f6:d7:
98:a0:68:9e:62:c5:3b:da:b3:04:3c:04:8a:8d:9b:
0d:b2:11:6f:01:22:9a:d6:05:08:7d:90:9c:31:f4:
f2:26:a4:35:9f:03:d4:a7:7c:c2:ba:de:7b:4e:ad:
0e:33:58:0e:7f:af:90:6a:24:9b:e4:cb:59:33:f0:
25:4d:bb:7a:67:93:60:de:13:ae:0b:67:42:bd:f1:
3c:2e:83:ef:48:0a:78:fc:f7:bc:38:b4:70:76:fd:
21:0d:88:80:fe:fa:79:a8:ad:80:67:bc:88:b2:ed:
c7:42:3f:40:9c:20:1d:1d:40:30:60:a2:22:5a:cc:
05:18:bc:0a:37:92:f2:c1:93:ba:53:e5:60:4d:9e:
84:73:52:cc:b4:f6:04:53:8c:b9:ce:72:2f:4c:d5:
6e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3A:25:13:B4:DB:31:A8:B3:90:B5:A0:DD:C1:86:08:D0:A2:BB:EB
X509v3 Authority Key Identifier:
keyid:0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:95:bf:83:5e:5f:ef:62:67:63:6c:17:88:be:42:76:6a:1c:
6c:be:8b:2c:2f:92:06:94:1b:be:09:e1:e3:e8:a4:9f:a3:d0:
cc:46:cb:02:e8:03:e3:17:5e:9a:d8:9e:98:71:34:64:1e:7c:
e9:c6:49:40:06:45:82:14:8c:b4:5a:5e:fa:96:11:5d:81:60:
66:76:65:b7:6c:be:ab:01:69:9b:1d:55:3e:1f:d9:06:18:c4:
86:b7:d9:23:a4:23:4b:09:18:45:25:27:06:4f:ba:aa:2a:17:
49:c5:f1:d4:c1:bd:10:7b:2c:1f:21:eb:f8:18:fb:4a:18:e4:
7a:14:fd:15:54:c9:85:34:44:2f:c3:5b:ec:6d:b0:9e:14:4a:
b1:1e:76:8d:e0:43:f2:85:ea:30:27:06:38:81:0e:25:60:38:
6b:59:c9:cb:a9:86:d4:6b:0f:3a:72:fd:88:32:9d:7a:b7:f7:
15:e0:59:c4:53:62:5b:24:65:56:d9:2e:e8:ed:b4:63:79:6b:
54:1e:92:aa:b0:ff:62:9b:f8:82:b4:92:70:c6:e9:18:de:2f:
6e:65:7c:f9:a4:76:33:62:ac:3d:d0:ca:ef:50:77:b3:48:49:
71:a7:1b:24:c7:b3:d6:74:2c:83:8f:7a:29:04:66:d6:e1:3d:
3e:e0:a9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:33 2025 by rpki-client