Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
File: Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft (raw, json)
Hash identifier: kHjfU463/8WTCX4T2v3fjZFE0SQe0yYPJr8ZTA6Yes8=
Subject key identifier: 5D:56:B0:64:E6:3F:88:E8:27:38:69:6D:1C:C8:DA:7E:F6:51:7B:45
Authority key identifier: 3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D
Certificate issuer: /CN=3f0a287bea92588fc5dae4f93fb25628f32d196d
Certificate serial: 0194C3F5A530376C96AC96C164EA5910DB45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
Manifest number: 142F
Signing time: Sun 02 Feb 2025 00:00:43 +0000
Manifest this update: Sun 02 Feb 2025 00:00:43 +0000
Manifest next update: Mon 03 Feb 2025 00:00:43 +0000
Files and hashes: 1: EWY61EBMWvIz95kZvxz3f7Ao8DM.roa (hash: hUfTdT/UdwzPCuJouTIN5MiLU84ihpYE+x77dYeKVgo=)
2: Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl (hash: 3qSUvCjbhK93tJacaVo+Ltn4Mo6gQRZmv9/RPwxCCfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:a5:30:37:6c:96:ac:96:c1:64:ea:59:10:db:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0a287bea92588fc5dae4f93fb25628f32d196d
Validity
Not Before: Feb 2 00:00:43 2025 GMT
Not After : Feb 3 00:00:43 2025 GMT
Subject: CN=5d56b064e63f88e82738696d1cc8da7ef6517b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:99:95:6a:21:76:9f:1b:a5:ae:ca:fd:cf:1a:
c8:f7:1e:64:49:d3:b3:b5:92:e3:8e:53:56:f2:67:
65:37:e5:28:57:c4:e9:b6:de:24:c5:d2:45:2e:e8:
bd:02:64:ef:f4:6a:87:9b:0e:08:5c:c8:a0:00:c7:
bd:ca:5e:01:43:38:85:96:1b:29:8a:b9:4d:76:cb:
7a:06:9b:81:b2:f3:94:6d:b0:9c:21:5a:8f:92:03:
95:f1:36:3d:b7:d3:3a:48:e3:74:31:55:62:43:2f:
e0:fb:db:7c:3f:5a:8e:0a:dc:7a:df:fb:9d:5d:63:
6b:74:33:31:34:7f:3c:c8:48:fa:88:69:a9:b4:ad:
c6:98:35:4e:a4:29:0b:47:ff:4d:5f:40:d0:59:f9:
f2:fe:79:71:63:1c:96:47:9d:bd:3e:bb:6a:dc:38:
28:7d:57:91:58:e1:60:46:94:89:41:99:aa:5a:cf:
66:b1:b0:04:f5:ab:6f:fb:b9:5c:6d:94:f0:8a:85:
64:e0:40:d7:b5:b1:37:00:f7:ab:11:5e:9c:54:cf:
f3:8d:be:a2:ec:a6:2a:82:0e:6a:1c:f8:95:8f:ea:
97:f9:6e:9d:63:16:6a:5a:08:ab:b4:53:c0:57:16:
d2:60:f8:2c:81:8f:63:90:83:e2:e4:2f:8c:5f:8a:
2d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:56:B0:64:E6:3F:88:E8:27:38:69:6D:1C:C8:DA:7E:F6:51:7B:45
X509v3 Authority Key Identifier:
keyid:3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:26:e2:c5:5c:08:2e:fe:74:38:34:0f:8c:fd:96:6d:be:cc:
54:21:01:45:ba:d8:c8:4a:72:e2:4f:9b:64:e8:11:51:24:d5:
35:2c:df:9d:87:b4:49:37:3e:e8:78:40:1f:07:17:cc:37:94:
75:d5:b7:42:36:87:99:ae:06:fe:38:f3:f6:44:f4:e4:a2:ec:
e8:cb:28:00:2a:63:5d:e5:5c:e5:eb:79:99:ea:9d:66:dd:42:
0d:20:49:ca:ea:2b:72:68:46:01:dd:8a:a2:be:17:4c:0c:51:
1c:12:81:e4:8b:54:02:b8:a9:0e:14:23:15:ae:7c:6c:37:9f:
f2:43:55:93:9f:d8:a2:ee:57:b8:b1:f1:73:a2:50:db:88:09:
78:41:c3:aa:08:92:f3:cc:36:51:5e:25:6e:5b:ae:1f:b0:44:
1b:69:28:7c:0b:96:53:e0:5f:ac:61:25:f9:a0:fe:09:f4:42:
31:aa:87:99:0d:61:f0:8d:cd:86:30:68:0e:44:b2:e4:dd:47:
35:1f:d6:00:87:19:82:6a:22:a0:e0:4c:17:2b:1b:ef:16:5d:
f2:5b:34:0c:e2:36:97:7e:62:fb:e1:27:33:37:7b:8d:71:ca:
ca:59:a5:26:6f:c5:92:09:7c:8e:15:0e:5d:f5:eb:6f:45:65:
ac:43:47:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:56:53 2025 by rpki-client