Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
File: w3oiGyndRjBow6jVysFGsFe1qe0.mft (raw, json)
Hash identifier: mO/syM7Ccw8uv6W/clgfAbFGZrBMkT6DtugLSXT2KhU=
Subject key identifier: D0:DC:33:58:B8:28:4C:31:91:76:5A:B7:7A:E9:87:40:DF:0D:DA:4B
Authority key identifier: C3:7A:22:1B:29:DD:46:30:68:C3:A8:D5:CA:C1:46:B0:57:B5:A9:ED
Certificate issuer: /CN=c37a221b29dd463068c3a8d5cac146b057b5a9ed
Certificate serial: 0194BABBA95940E4395F299541DE0870A166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
Manifest number: 1085
Signing time: Fri 31 Jan 2025 05:00:48 +0000
Manifest this update: Fri 31 Jan 2025 05:00:48 +0000
Manifest next update: Sat 01 Feb 2025 05:00:48 +0000
Files and hashes: 1: I_YmXjobjQiqgaE7GnBooBc13Bo.roa (hash: uhenmFA0jnoDV3gl2RrmVWDxmBkSpRWlCD4TJWA6V5M=)
2: w3oiGyndRjBow6jVysFGsFe1qe0.crl (hash: rJnGxedUwPqQlGC9ecSDC95YmSQO9Od06Z0r9Rwu6xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:a9:59:40:e4:39:5f:29:95:41:de:08:70:a1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c37a221b29dd463068c3a8d5cac146b057b5a9ed
Validity
Not Before: Jan 31 05:00:48 2025 GMT
Not After : Feb 1 05:00:48 2025 GMT
Subject: CN=d0dc3358b8284c3191765ab77ae98740df0dda4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:80:1b:ba:7f:b7:ee:c6:00:6e:92:a3:5d:99:
e1:d2:bb:02:54:28:8c:af:8f:6f:08:13:fe:c4:5d:
8e:40:f9:89:6f:66:9d:f3:87:aa:55:d2:c8:9b:74:
ed:78:08:ce:b8:96:1c:e7:b8:79:be:8a:f6:dd:2a:
d8:05:bf:e9:f1:64:73:de:61:5e:85:35:bf:73:e6:
7d:2f:cf:ed:0d:cc:58:8e:6e:8b:f2:d2:b8:d0:29:
25:c0:23:47:f5:07:77:70:41:60:96:c8:67:08:23:
b8:6b:a9:54:ca:aa:49:22:f5:1b:31:2b:68:f8:a1:
7c:b0:2d:49:ef:bb:df:48:b2:af:59:b9:ca:d3:3d:
fa:c1:66:2a:ba:39:63:31:1b:62:96:b2:8a:d6:9e:
97:2b:a6:1a:6c:ac:55:82:e1:f5:39:63:f8:73:05:
75:d1:36:82:d1:64:5d:4b:a7:4f:7f:59:b3:69:d2:
7d:00:56:c1:02:6a:0d:c2:ae:cd:6c:87:ea:f8:ad:
aa:52:6e:f1:48:66:b4:bf:d1:10:2a:e9:57:78:4d:
a4:1f:bd:a3:1d:67:ff:3f:68:71:8a:a6:c7:9f:e9:
3a:e2:c3:67:5c:f7:13:71:94:c6:95:eb:5c:be:22:
f6:8a:35:af:21:c3:95:b3:13:d4:71:c1:7d:7c:f5:
a7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DC:33:58:B8:28:4C:31:91:76:5A:B7:7A:E9:87:40:DF:0D:DA:4B
X509v3 Authority Key Identifier:
keyid:C3:7A:22:1B:29:DD:46:30:68:C3:A8:D5:CA:C1:46:B0:57:B5:A9:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:7e:06:76:c3:49:a5:dd:19:57:66:79:98:8d:a5:59:53:3c:
57:1b:bf:58:89:d1:fa:d0:05:52:28:ad:c2:02:6e:47:8b:60:
23:63:a9:93:6d:ab:c7:d3:0c:ab:b0:f9:cd:6f:84:0d:cd:26:
f1:eb:b0:01:50:79:db:5a:fb:40:7c:22:16:45:56:b0:e3:bf:
5c:b2:5b:1d:50:35:03:01:60:25:37:db:f2:99:c9:b4:a2:37:
69:20:2d:82:4b:9d:b3:0e:61:00:78:7d:0a:b2:d3:30:c2:f8:
e9:39:97:05:f1:83:22:78:17:74:ab:11:2a:18:86:5b:c6:97:
ff:43:bd:cf:bc:e8:28:82:21:79:17:3f:53:ac:dd:d3:8c:1a:
cd:0f:40:4d:f7:aa:f9:61:bd:38:28:cb:70:7b:52:00:98:dc:
44:a7:65:f7:f8:40:2c:ee:b2:65:ca:95:e0:93:2c:a4:8d:a3:
7f:5f:ed:d3:46:98:d3:5d:9b:9a:e2:fc:d8:50:10:44:f7:e2:
f0:34:9d:d5:29:8f:95:ab:c8:02:73:98:13:09:fc:b7:7f:d9:
a2:e7:ad:32:4e:53:6e:cd:64:89:08:20:55:6b:42:3d:2f:b8:
34:f4:87:b2:9c:60:fb:99:e8:a9:67:da:76:55:9a:1b:d3:cf:
30:76:f2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:47 2025 by rpki-client on console-fra.rpki-client.org