Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
File: pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft (raw, json)
Hash identifier: 9sWAgQxcv4AXsvaNiYX1Lj+yzwi9PPm6I/yId+5X6u4=
Subject key identifier: 64:19:60:B4:9A:92:16:34:84:EA:4B:7E:57:56:68:55:22:92:DC:F2
Authority key identifier: A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
Certificate issuer: /CN=a561ccb03741056715a6be4805321662d88e7e7c
Certificate serial: 0194BB293F5C1838AF69476268E12FD56206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
Manifest number: 0652
Signing time: Fri 31 Jan 2025 07:00:29 +0000
Manifest this update: Fri 31 Jan 2025 07:00:29 +0000
Manifest next update: Sat 01 Feb 2025 07:00:29 +0000
Files and hashes: 1: PbquhIW9zV3GTwFfHVfvcLv6xJw.roa (hash: aemUH4PS/FSjfL3HdRU+EJA2H9Gd9sGg3EwGKTMzK9w=)
2: ZrGtCqKCK6D0hI3hPtXzoUeoPWc.roa (hash: 2oHhvMXHLj14EEFTSzUZ5GuRtYtjQRNwBSzyWSxhAWE=)
3: pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl (hash: 0dAQwqS4cU58405qdOZoKz/dr/i277T40Fj8bu+kt3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:3f:5c:18:38:af:69:47:62:68:e1:2f:d5:62:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a561ccb03741056715a6be4805321662d88e7e7c
Validity
Not Before: Jan 31 07:00:29 2025 GMT
Not After : Feb 1 07:00:29 2025 GMT
Subject: CN=641960b49a92163484ea4b7e575668552292dcf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:05:42:9c:bb:1c:6e:06:c7:68:35:d8:25:5f:
16:1d:3d:2d:de:72:fd:1b:9a:27:cb:77:e9:ff:8e:
89:b2:68:9a:cc:4c:8f:cb:c2:84:47:30:72:8a:49:
47:06:61:a0:ec:5a:49:0f:a2:71:50:28:c7:1d:8b:
87:6b:46:d2:47:10:0a:11:69:42:4f:5b:aa:01:03:
22:e7:c8:c7:e2:8f:dc:c0:68:97:0a:d0:57:92:30:
90:81:77:ce:0f:39:eb:ff:24:34:82:a0:b0:96:f6:
22:b9:8b:29:03:0b:43:41:9c:72:56:2f:22:2a:5e:
b3:29:00:e7:c0:f2:1b:a5:3b:42:64:ff:92:86:8e:
d3:54:fa:33:ca:90:e9:b5:56:5f:ee:cf:8b:10:f8:
bc:4f:4c:78:09:41:22:f6:c1:57:ed:92:8b:df:79:
88:d9:79:a3:79:57:87:0e:93:cf:ed:7d:3f:80:bb:
66:0b:b4:ab:43:f4:49:82:36:80:6c:8d:c7:93:bb:
f5:28:b6:9c:8f:d8:42:72:98:0a:a0:84:1a:d0:ed:
33:b4:88:8d:5f:ea:c9:7b:27:c6:46:5e:7f:26:92:
3c:67:ab:f0:81:88:63:d5:fe:f8:da:d2:76:17:f7:
97:5c:51:42:9b:f9:5c:7a:69:7e:2c:3f:f4:59:90:
e5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:19:60:B4:9A:92:16:34:84:EA:4B:7E:57:56:68:55:22:92:DC:F2
X509v3 Authority Key Identifier:
keyid:A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:23:0d:57:6e:23:ec:2a:13:cb:f3:ed:4f:14:b0:86:48:3d:
d8:d9:80:38:f8:43:ff:95:03:f2:05:af:5e:06:bd:5b:29:65:
cf:4d:04:23:96:50:4d:ec:d8:64:0d:a8:69:09:37:a0:07:20:
fd:52:ff:f0:61:f7:09:5b:fe:9f:14:e8:58:c2:97:73:e7:43:
bc:2e:37:4e:04:01:91:a4:be:5b:6f:83:1b:3a:4f:7a:65:35:
9f:e7:95:53:e4:1e:a4:2b:d2:1e:ac:f8:93:57:8b:ad:f6:85:
29:2c:8a:86:de:2f:76:91:ba:8e:c5:d9:7f:e1:b7:d6:a1:0d:
d1:23:35:d4:6b:7b:ce:c7:1b:37:9f:c6:80:e4:f3:a3:b6:6e:
f9:f5:78:e4:f2:fb:03:7f:b0:e0:81:e7:12:66:4c:c2:df:a8:
b4:a5:05:16:b3:f2:61:dd:4e:c4:4b:1a:51:bf:07:cc:6a:c2:
c5:69:57:d8:cb:d1:04:de:6f:29:17:a0:d3:e6:eb:61:91:89:
4f:ee:d1:2c:51:11:8f:b1:b3:85:9b:11:03:8e:fb:b2:4b:8a:
de:31:64:97:36:90:53:f5:e4:94:ec:66:e1:c1:f4:34:c6:33:
7b:89:0d:e2:1e:2d:ff:a7:4d:bd:72:d2:b1:bd:f8:b6:6a:5f:
0f:a7:80:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:30 2025 by rpki-client on console-fra.rpki-client.org