Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
File: wQmKGQW70zgVM4KPa3_SJxcEMe8.mft (raw, json)
Hash identifier: pLG2U8WumReSGaqmPVoKGMGwkC3ACQSHW1L5HE8nAX4=
Subject key identifier: 0A:AF:9B:5E:3E:6F:D6:86:27:D5:D7:4F:4C:F6:8C:B3:61:DA:27:BB
Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef
Certificate serial: 0194BA8437306D48DE9A46D8E94309EA5AD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
Manifest number: 144A
Signing time: Fri 31 Jan 2025 04:00:14 +0000
Manifest this update: Fri 31 Jan 2025 04:00:14 +0000
Manifest next update: Sat 01 Feb 2025 04:00:14 +0000
Files and hashes: 1: 9YIKds84pmkqqSUhkc6fWWyFF_U.roa (hash: Zl/u5pK0GcTZlUuMm3FsQSFvKxX3ghw5NC/1Sio1XdQ=)
2: Ak9XK5YFlXI4AoNUomQD5SJWMTQ.roa (hash: 8frbczP/WVHp6KYWn7u+vpW6oUS+dkfZt+1mfqWJkiA=)
3: DaFBPQjNIt89bZ-zjtkqkYfP25s.roa (hash: pp9Ceedlj+qqJJCfZTMjKuHvEOYjJEHNhnFxlngbiSQ=)
4: F7VtIEmMZmsdWkt0VCX4cwPSD3I.roa (hash: pt6vMx0dEwVx2sHh/Y99xQxE2icOOT8mwZQHp5NGxZY=)
5: cdYJonDxjk5U7tPV78g4h2hSLZo.roa (hash: WtYQS9yTDEW6OANZ+f6hcNrUBMmPvrFNaBsMzLB79qc=)
6: kJ6H7AmIyUvdxMRQ4aBB5sxRD_U.roa (hash: QA88mloj+h/kCAIWi5WNjJl3VlB1DBIdl1O6jQwCD1U=)
7: sUKcclZahYIz3onbKqmP3P88pdI.roa (hash: CBZMv3jQPhyiFf/dy9HbfwPs9kQApWp7DL2KyK40I5c=)
8: v3O2rk8WaR7VhMc1DaSHWT3Xzz8.roa (hash: QkMQyvC3sEpgXeZ6lU5JRmWJPmKhWgedStjiN3opkDY=)
9: wQmKGQW70zgVM4KPa3_SJxcEMe8.crl (hash: c+5WfPWaBiX9FWTzujVTw3VcQgaEwdIXZAFaJnzEf6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:37:30:6d:48:de:9a:46:d8:e9:43:09:ea:5a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef
Validity
Not Before: Jan 31 04:00:14 2025 GMT
Not After : Feb 1 04:00:14 2025 GMT
Subject: CN=0aaf9b5e3e6fd68627d5d74f4cf68cb361da27bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:45:6c:9f:23:a6:5f:f2:99:60:05:62:9a:91:
23:4e:80:10:12:ab:5e:46:18:b3:11:5e:33:fa:70:
fb:55:98:20:f0:94:ba:41:1f:2f:c6:f5:1c:4f:d9:
a2:51:4b:b7:d0:1c:27:c2:e1:7f:21:f6:f0:91:3d:
6b:6a:8c:da:01:d3:49:7f:a5:0f:80:d5:01:f2:83:
f6:8b:59:66:f0:a9:a1:2e:77:9b:4a:ee:8a:a2:42:
db:03:6f:3a:08:0b:b2:c5:1f:ed:08:33:7e:b5:88:
8e:0c:cb:91:65:de:b6:9b:04:aa:be:a1:29:52:2c:
25:4a:a7:10:bc:40:bf:3b:b5:38:26:0c:b8:c8:33:
0a:61:19:1d:bf:b2:78:b6:d9:93:84:a4:0f:01:f9:
75:4b:d3:74:dd:b9:e9:81:b3:66:b5:ef:28:3c:1a:
26:95:68:ab:78:b5:bb:2f:23:b1:a5:89:23:90:d9:
73:1d:f2:55:36:e8:ff:4f:ac:28:db:93:ce:aa:40:
4f:5c:a4:79:71:78:aa:ff:bf:7f:5f:8d:65:b7:d3:
0b:46:e8:c4:6a:ca:8f:d7:fd:19:4e:89:b5:41:77:
8b:d6:e3:72:2c:de:cc:c1:92:5e:40:6b:24:14:29:
98:cf:92:8b:15:08:27:e1:42:db:e6:39:7b:36:dc:
4a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AF:9B:5E:3E:6F:D6:86:27:D5:D7:4F:4C:F6:8C:B3:61:DA:27:BB
X509v3 Authority Key Identifier:
keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:31:1e:a8:ac:e7:12:ff:12:aa:0a:46:08:2e:59:d2:75:47:
c6:ee:fd:58:c7:4b:ec:33:0f:24:0d:eb:be:9a:e4:38:36:99:
dc:82:da:ae:c0:d2:ed:b7:cb:73:c0:21:0e:32:33:76:95:6f:
d1:fc:04:2e:ef:9d:1f:bf:31:cd:0a:ab:eb:56:1f:e5:b7:ca:
ec:3c:44:db:38:f7:d0:a8:29:44:cf:c8:d2:66:cf:1c:dc:dd:
cb:0e:74:ba:8e:3c:c4:34:0d:f6:f0:91:bf:65:9f:b0:6b:84:
37:cb:99:20:dd:55:10:7b:3f:c6:c2:75:e7:06:d6:e7:39:02:
cf:c2:fe:4b:ab:ef:67:81:76:e5:37:41:a2:c3:00:5e:98:6c:
ee:91:92:3d:d0:e8:4a:57:d4:35:2d:86:26:87:f2:79:04:6f:
a7:35:42:18:f7:dc:80:e6:d8:94:da:db:c2:a8:e8:84:8d:75:
56:c6:65:bc:69:d9:23:a6:df:11:09:bd:65:07:35:f0:ce:ff:
d2:3d:cc:9d:51:cf:ff:5a:27:e8:20:d9:8c:b6:cf:e0:8b:71:
1e:e1:50:a4:db:8f:60:c9:17:d5:72:fd:2a:10:08:19:04:2f:
52:75:5e:f3:25:50:16:08:cc:4b:8b:f4:12:15:27:45:4c:c3:
a7:48:5f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:18 2025 by rpki-client on console-fra.rpki-client.org