Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft
File: DWE_6YRKY0OerooaoMPKjGC0XUU.mft (raw, json)
Hash identifier: X1iR/d4zEdmhB6eFKAZpQxPi+vB8OL/bjrAuTaryX8Q=
Subject key identifier: AF:30:0E:20:DD:1D:3A:22:20:75:1B:45:C4:B5:27:28:84:8A:C0:16
Authority key identifier: 0D:61:3F:E9:84:4A:63:43:9E:AE:8A:1A:A0:C3:CA:8C:60:B4:5D:45
Certificate issuer: /CN=0d613fe9844a63439eae8a1aa0c3ca8c60b45d45
Certificate serial: 0194BB96E2C40DD40B25E2F374E10C3424EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 09:00:15 +0000
Manifest this update: Fri 31 Jan 2025 09:00:15 +0000
Manifest next update: Sat 01 Feb 2025 09:00:15 +0000
Files and hashes: 1: DWE_6YRKY0OerooaoMPKjGC0XUU.crl (hash: zngUUERdZUdAgHedVEh7M+tydLH0Sgkmd1/RaqAVgyc=)
2: cAJwzXdTlj0l08klToV51g3reQE.roa (hash: MNtWLrHXizLnpt8hRaJw3axv6PAJCrUS/ztw7WczF4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:e2:c4:0d:d4:0b:25:e2:f3:74:e1:0c:34:24:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d613fe9844a63439eae8a1aa0c3ca8c60b45d45
Validity
Not Before: Jan 31 09:00:15 2025 GMT
Not After : Feb 1 09:00:15 2025 GMT
Subject: CN=af300e20dd1d3a2220751b45c4b52728848ac016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c5:e0:8c:ff:70:d8:59:7b:89:7c:77:41:ea:
03:c4:09:db:b3:9a:16:06:73:05:e9:0a:74:b7:85:
9c:37:04:46:86:9a:ef:b8:c6:56:28:a2:00:b5:03:
7b:1f:0e:ef:2c:74:b5:08:f8:a0:96:80:d8:26:40:
db:3f:04:34:2e:30:17:69:7b:a8:55:eb:87:5e:d3:
22:6c:40:78:7d:12:60:99:94:b6:d4:8e:f0:67:80:
0e:43:11:79:f3:33:40:95:9b:1b:01:74:3c:68:01:
13:3e:58:e0:49:a4:ef:2f:8a:70:01:49:61:13:79:
b0:d5:14:27:ff:e4:c3:f9:14:b4:6e:24:7a:b1:44:
ff:e1:aa:99:7b:14:f7:8c:43:77:ea:b0:0c:e4:99:
74:5c:d1:25:fb:f4:77:de:34:cb:64:31:5d:8b:c3:
02:34:28:fe:a3:e4:38:2c:a8:d7:a7:9c:df:7b:a1:
76:45:9f:7a:4b:3d:9e:17:96:d1:17:d4:46:82:1f:
2e:e0:6a:61:1a:35:eb:ad:ee:99:db:39:60:87:cb:
2a:07:c5:53:f8:70:4f:40:e6:1c:49:3a:e6:df:37:
f7:81:85:25:24:7f:a7:a1:79:8c:95:1d:37:70:24:
1a:c7:c6:e5:18:30:a5:c3:dc:3a:a7:9c:1c:e2:7b:
bc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:30:0E:20:DD:1D:3A:22:20:75:1B:45:C4:B5:27:28:84:8A:C0:16
X509v3 Authority Key Identifier:
keyid:0D:61:3F:E9:84:4A:63:43:9E:AE:8A:1A:A0:C3:CA:8C:60:B4:5D:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:7c:1d:df:bd:11:a2:6a:58:63:59:00:22:09:8f:be:3c:2c:
14:ea:f2:99:c7:5c:ba:0d:29:a0:aa:c1:4b:01:0e:62:92:38:
f1:02:47:2c:db:1d:8e:96:0c:f6:5b:79:12:ac:e9:f4:34:57:
f3:d3:90:22:be:87:4c:58:08:52:b5:e2:16:48:75:74:a9:5b:
86:eb:74:23:dd:39:0c:12:eb:e0:eb:93:ad:cc:7b:46:d3:f9:
a6:a3:25:4e:44:03:d6:cc:75:6d:98:14:90:57:65:82:ae:57:
fd:f2:02:52:c8:a8:87:9e:e8:9d:ea:09:ef:ac:61:30:25:e7:
de:aa:43:91:23:b0:8b:cc:3f:2c:d2:de:21:c7:6f:48:23:b4:
08:4b:42:c8:39:65:6c:be:8d:3f:bb:0f:98:5d:8b:bd:89:66:
10:1e:5f:80:7d:99:33:e1:c4:d2:ab:8f:cf:68:ec:58:b8:8f:
f4:f9:b1:16:4b:63:fc:83:b4:4e:48:58:d6:06:5f:de:3d:de:
31:19:eb:4e:16:0e:f5:64:eb:11:bf:b4:fb:43:18:0a:c9:4d:
88:01:0b:91:8b:5a:46:ca:01:59:9f:5c:98:1e:5e:53:0e:a6:
71:50:42:ad:26:13:71:cb:cd:b2:5e:1d:79:a0:26:53:70:e7:
b0:29:92:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:42 2025 by rpki-client on console-fra.rpki-client.org