Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.mft
File: W8qreqGscUP4vII8c0sWc6CbuIA.mft (raw, json)
Hash identifier: 8pIK4WAiVcnwJ6OBdfjZI/tegVgBDOoGrNs+MaPym8A=
Subject key identifier: 37:22:67:E0:6F:AA:6E:4E:46:11:6D:ED:4D:C7:C0:72:15:AB:33:26
Authority key identifier: 5B:CA:AB:7A:A1:AC:71:43:F8:BC:82:3C:73:4B:16:73:A0:9B:B8:80
Certificate issuer: /CN=5bcaab7aa1ac7143f8bc823c734b1673a09bb880
Certificate serial: 0194BAF2665FFEBEC9E313A90E0A204C0B43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8qreqGscUP4vII8c0sWc6CbuIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.mft
Manifest number: 1165
Signing time: Fri 31 Jan 2025 06:00:35 +0000
Manifest this update: Fri 31 Jan 2025 06:00:35 +0000
Manifest next update: Sat 01 Feb 2025 06:00:35 +0000
Files and hashes: 1: MAQmOa8DCOFnP1AvP10tvRzxgoU.roa (hash: js//CnDRXGCUWJu0u0iMvymBvRN/ZDLpajOTcw67kv0=)
2: W8qreqGscUP4vII8c0sWc6CbuIA.crl (hash: PcVfnvv1PoMGxs2zFtKSUX8hdHrYIYcPdPaRuXnQQaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8qreqGscUP4vII8c0sWc6CbuIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:66:5f:fe:be:c9:e3:13:a9:0e:0a:20:4c:0b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bcaab7aa1ac7143f8bc823c734b1673a09bb880
Validity
Not Before: Jan 31 06:00:35 2025 GMT
Not After : Feb 1 06:00:35 2025 GMT
Subject: CN=372267e06faa6e4e46116ded4dc7c07215ab3326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6e:80:e1:b8:c3:35:fd:c5:b4:12:ff:61:ee:
5a:35:f0:89:3f:c7:8f:f2:5d:b9:df:61:5c:a8:e6:
67:6b:45:16:09:01:07:26:3c:58:b5:6b:06:cd:3f:
a9:3f:9f:df:c7:f9:aa:b4:bd:45:67:24:4b:09:f2:
8e:22:78:b6:47:97:c2:1c:a1:ec:00:29:8d:8a:a8:
5b:21:02:c1:af:24:41:7a:b8:f8:fb:95:a7:5e:ce:
72:b0:75:b3:c6:05:5a:15:8f:d5:7d:23:1a:54:cb:
8d:00:44:07:93:0f:37:d4:ae:06:9f:7c:28:e5:bc:
7e:0c:54:fa:86:ce:37:04:ad:39:1e:c0:a7:d9:d9:
84:fc:38:69:75:2c:07:54:aa:c1:fb:b4:e3:58:53:
7c:af:4b:42:c2:74:4f:d4:21:bf:60:aa:a1:10:05:
68:d2:23:80:c3:57:cd:d1:ae:78:ea:0f:99:5c:c9:
96:fd:21:e9:b4:3c:9a:8b:87:11:92:9f:9d:c0:88:
bf:62:f9:82:90:10:5a:55:b3:5b:d1:7e:1d:62:ab:
5e:d9:34:e3:a2:00:81:00:03:9d:8d:dc:5f:e5:3e:
d3:bd:d0:e9:a1:22:cd:d9:79:d2:84:23:19:90:bf:
19:eb:3e:c7:fa:22:98:8c:80:3e:f4:26:4c:51:82:
68:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:22:67:E0:6F:AA:6E:4E:46:11:6D:ED:4D:C7:C0:72:15:AB:33:26
X509v3 Authority Key Identifier:
keyid:5B:CA:AB:7A:A1:AC:71:43:F8:BC:82:3C:73:4B:16:73:A0:9B:B8:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8qreqGscUP4vII8c0sWc6CbuIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:91:ae:41:d3:9c:c5:48:f0:55:7d:37:78:28:73:25:64:60:
fd:55:6d:a1:de:dc:73:a9:cc:80:f4:49:5e:71:15:b6:60:d1:
62:dc:a2:3c:c9:d6:db:9c:5c:cb:99:28:5b:ae:72:ee:2d:70:
d8:16:02:9d:62:83:b6:62:77:33:e1:de:e9:c6:19:aa:e0:47:
af:4a:2f:44:ab:7a:bf:5e:2a:ae:67:07:77:25:3c:59:4b:81:
6e:1c:c7:49:36:7d:d4:29:15:a7:da:13:86:87:3e:bf:76:62:
82:7e:aa:0a:56:85:53:d1:78:9a:fe:d4:05:2b:62:3d:bf:7f:
5d:68:e7:8b:d2:01:51:01:b6:86:4e:75:10:63:1c:89:a1:f7:
59:a6:00:12:d0:e5:8f:52:9a:d9:13:8f:72:45:0d:e1:2c:91:
09:18:e6:16:da:24:8b:b4:23:9d:9d:e2:ca:6e:b1:ef:c0:9b:
18:7c:fc:11:4d:a1:7c:28:35:d0:a3:92:89:a2:5e:e8:e2:fd:
e4:d2:b1:d8:67:73:11:6f:17:9a:4e:36:83:6a:fa:19:48:c8:
b6:c5:84:a7:54:62:16:ee:47:9b:fd:06:fc:dc:b3:a6:6c:b4:
84:1b:c9:d2:0b:a7:3d:15:34:d6:fa:f8:bf:5a:66:47:55:9d:
84:0f:f8:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68mZf/r7J4xOpDgogTAtDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViY2FhYjdhYTFhYzcxNDNmOGJjODIzYzczNGIxNjczYTA5
YmI4ODAwHhcNMjUwMTMxMDYwMDM1WhcNMjUwMjAxMDYwMDM1WjAzMTEwLwYDVQQD
EygzNzIyNjdlMDZmYWE2ZTRlNDYxMTZkZWQ0ZGM3YzA3MjE1YWIzMzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzG6A4bjDNf3FtBL/Ye5aNfCJP8eP
8l2532FcqOZna0UWCQEHJjxYtWsGzT+pP5/fx/mqtL1FZyRLCfKOIni2R5fCHKHs
ACmNiqhbIQLBryRBerj4+5WnXs5ysHWzxgVaFY/VfSMaVMuNAEQHkw831K4Gn3wo
5bx+DFT6hs43BK05HsCn2dmE/DhpdSwHVKrB+7TjWFN8r0tCwnRP1CG/YKqhEAVo
0iOAw1fN0a546g+ZXMmW/SHptDyai4cRkp+dwIi/YvmCkBBaVbNb0X4dYqte2TTj
ogCBAAOdjdxf5T7TvdDpoSLN2XnShCMZkL8Z6z7H+iKYjIA+9CZMUYJoRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDciZ+Bvqm5ORhFt7U3HwHIVqzMmMB8GA1UdIwQY
MBaAFFvKq3qhrHFD+LyCPHNLFnOgm7iAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzhxcmVxR3NjVVA0dklJOGMwc1djNkNidUlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi85OGQ0MWUtMjM0ZS00NWU3LTgyZWIt
M2QxZTBlZTRiNjUxLzEvVzhxcmVxR3NjVVA0dklJOGMwc1djNkNidUlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi85OGQ0MWUtMjM0ZS00NWU3LTgyZWItM2QxZTBlZTRiNjUx
LzEvVzhxcmVxR3NjVVA0dklJOGMwc1djNkNidUlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcpGuQdOc
xUjwVX03eChzJWRg/VVtod7cc6nMgPRJXnEVtmDRYtyiPMnW25xcy5koW65y7i1w
2BYCnWKDtmJ3M+He6cYZquBHr0ovRKt6v14qrmcHdyU8WUuBbhzHSTZ91CkVp9oT
hoc+v3Zign6qClaFU9F4mv7UBStiPb9/XWjni9IBUQG2hk51EGMciaH3WaYAEtDl
j1Ka2ROPckUN4SyRCRjmFtoki7QjnZ3iym6x78CbGHz8EU2hfCg10KOSiaJe6OL9
5NKx2GdzEW8Xmk42g2r6GUjItsWEp1RiFu5Hm/0G/Nyzpmy0hBvJ0gunPRU01vr4
v1pmR1WdhA/46g==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:25 2025 by rpki-client on console-fra.rpki-client.org