Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft
File: w1k5CyF0quIpYaDzwp_EAvH-I8g.mft (raw, json)
Hash identifier: 8rXf354ikkZULck5sVSs3VUzYngtqw2+wl6tLzco1hQ=
Subject key identifier: A1:9A:A6:8B:88:E7:AB:87:29:36:FB:AE:52:EE:B5:48:11:16:FB:07
Authority key identifier: C3:59:39:0B:21:74:AA:E2:29:61:A0:F3:C2:9F:C4:02:F1:FE:23:C8
Certificate issuer: /CN=c359390b2174aae22961a0f3c29fc402f1fe23c8
Certificate serial: 0194C3F623DCC4B3B667A6603A1175720837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1k5CyF0quIpYaDzwp_EAvH-I8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft
Manifest number: 9C
Signing time: Sun 02 Feb 2025 00:01:15 +0000
Manifest this update: Sun 02 Feb 2025 00:01:15 +0000
Manifest next update: Mon 03 Feb 2025 00:01:15 +0000
Files and hashes: 1: roRpX3bRKDuocHxusV0WH0MjbWo.roa (hash: P8a5SzApQjB4G+3G1+p+RkD68unIbIu33oid4GIMvlk=)
2: w1k5CyF0quIpYaDzwp_EAvH-I8g.crl (hash: IWBvZUU7Na+harQLB3xSEDO/lZtLE4619r/Zd+aO8Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/w1k5CyF0quIpYaDzwp_EAvH-I8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:23:dc:c4:b3:b6:67:a6:60:3a:11:75:72:08:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c359390b2174aae22961a0f3c29fc402f1fe23c8
Validity
Not Before: Feb 2 00:01:15 2025 GMT
Not After : Feb 3 00:01:15 2025 GMT
Subject: CN=a19aa68b88e7ab872936fbae52eeb5481116fb07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:6c:10:5d:8f:12:e9:05:6b:c0:b1:80:e8:
26:fd:5e:db:0b:9e:44:c2:fa:18:50:26:df:ad:25:
ed:33:80:0f:9c:60:0e:e7:39:bf:00:64:10:89:b6:
92:6d:9a:ea:57:94:8f:54:38:50:ac:40:67:30:f3:
3a:69:5b:b7:34:55:51:5c:27:ce:30:8a:e0:80:a0:
26:d6:a9:81:2d:79:7d:be:c1:53:90:14:00:b5:ea:
ba:37:4c:9f:4e:05:47:69:41:92:01:46:1f:69:08:
ac:f9:e5:69:fc:d6:29:7b:f9:41:25:3e:f6:c2:65:
f3:45:9d:fc:e9:5a:d3:fc:89:a4:01:5b:28:40:b6:
ab:aa:cc:6d:24:5b:43:b1:c5:17:2c:a8:7a:ca:54:
fa:ac:c2:9b:33:dd:6f:28:f3:ce:66:58:bf:2e:71:
00:b0:1e:81:ec:11:8a:61:f5:a3:76:e2:93:eb:40:
1c:28:bd:e3:a2:41:ac:0a:84:b0:89:43:e9:54:06:
93:da:a0:f3:c7:db:78:87:d6:e1:0f:88:5b:b9:7d:
e7:f2:47:ef:79:c8:a2:79:00:37:2a:fa:d6:d8:16:
bc:b7:7f:77:67:ec:25:2c:e8:e3:1c:a3:20:72:08:
86:a9:ee:36:ef:e9:53:30:99:54:ac:41:8b:0a:ad:
d8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9A:A6:8B:88:E7:AB:87:29:36:FB:AE:52:EE:B5:48:11:16:FB:07
X509v3 Authority Key Identifier:
keyid:C3:59:39:0B:21:74:AA:E2:29:61:A0:F3:C2:9F:C4:02:F1:FE:23:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1k5CyF0quIpYaDzwp_EAvH-I8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:49:ed:cd:14:9f:ee:e0:e8:84:2e:19:17:c6:af:d8:d9:03:
0f:f5:74:13:86:9b:e7:63:34:0d:ee:35:d4:a9:f9:40:4e:4a:
f9:35:28:65:88:e3:2a:8a:7e:a3:3a:64:55:0a:68:09:41:1c:
a1:40:a5:96:c2:88:1a:1a:f5:95:c2:e3:10:42:f5:a8:03:7f:
b9:be:d4:d1:74:e5:ed:85:08:cc:08:c5:2c:fc:41:6b:94:ec:
5b:33:4d:a0:1f:fd:7b:71:8f:a5:b7:6f:01:76:1d:62:6b:e0:
e2:f0:19:c0:6d:8e:b3:47:2d:5d:4d:3d:34:37:c5:d3:ce:c2:
24:fa:49:9f:ab:2c:9f:6c:5d:e5:1e:73:40:9f:e1:b5:43:be:
dd:19:60:30:ab:36:24:67:e5:41:95:18:ac:ae:21:77:26:78:
25:75:bd:47:35:ee:4d:41:7e:e7:4b:d7:c3:58:dc:a2:2e:9c:
3d:b2:2c:1b:08:30:87:fe:8a:6c:3f:8b:54:bc:9b:c4:f1:cd:
c6:f4:9e:0b:7a:f7:be:20:13:2b:2f:79:2d:b9:0e:0a:93:31:
39:57:ff:30:17:af:be:5a:72:f4:06:8d:91:f7:e1:89:d6:f5:
66:d5:15:47:68:d4:20:5c:00:1a:8f:83:42:3c:92:5a:05:03:
bc:cb:42:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:48:02 2025 by rpki-client