Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.mft
File: wR0IGGQzkDBptda7ZS-YQo9TyAg.mft (raw, json)
Hash identifier: 00t+ilOEbDBSGJrVbM4OH5w4/KDsM0AFpaMcZtPQNPY=
Subject key identifier: 29:7C:90:1A:08:99:0A:84:4A:7E:62:5B:F8:FB:9A:10:2D:1F:EE:5D
Authority key identifier: C1:1D:08:18:64:33:90:30:69:B5:D6:BB:65:2F:98:42:8F:53:C8:08
Certificate issuer: /CN=c11d08186433903069b5d6bb652f98428f53c808
Certificate serial: 0194C42C768EDBE965428FB878F6A08535DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wR0IGGQzkDBptda7ZS-YQo9TyAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.mft
Manifest number: 0F
Signing time: Sun 02 Feb 2025 01:00:35 +0000
Manifest this update: Sun 02 Feb 2025 01:00:35 +0000
Manifest next update: Mon 03 Feb 2025 01:00:35 +0000
Files and hashes: 1: GlQUBzcNJmw0558H72JeNJOtGUQ.roa (hash: OAZrKZei1mukwSf7KdhyGGJ75nXzfwov+lRUskVC4AA=)
2: GzLNeemJ5NyzmlXIMSE-P5qpPK0.roa (hash: gMekrQRvaaYdzpl1VdoBplLf+AZyuoskovW0AOifAys=)
3: wR0IGGQzkDBptda7ZS-YQo9TyAg.crl (hash: spsMB9lpJ5TuHXodVA5U5K2OpV6OCbsccfD50euyz6Y=)
4: xok2gimWwzURof_w9dO-DRDDn3Y.roa (hash: onwOc+d+Y67hjnLHKYPr/lttMavIYzZkOgnV1cJxF50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wR0IGGQzkDBptda7ZS-YQo9TyAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:76:8e:db:e9:65:42:8f:b8:78:f6:a0:85:35:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11d08186433903069b5d6bb652f98428f53c808
Validity
Not Before: Feb 2 01:00:35 2025 GMT
Not After : Feb 3 01:00:35 2025 GMT
Subject: CN=297c901a08990a844a7e625bf8fb9a102d1fee5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c5:5a:91:78:28:b6:3d:c0:90:22:3f:23:ab:
e9:25:a5:69:57:76:f0:eb:49:b9:9e:b7:be:c4:ea:
83:63:3b:37:71:69:8e:79:65:7b:54:a8:61:c8:2f:
b1:6e:ad:66:2a:0a:3e:47:c3:1c:0c:66:41:78:92:
0b:bf:b7:d2:f1:70:f1:fa:c0:d9:60:ea:b2:1f:66:
23:e7:45:0b:de:33:4f:6b:29:d6:de:88:5a:02:97:
79:b7:1d:83:40:62:2f:1b:04:e1:ab:c1:2a:6a:2e:
a0:66:8f:87:41:c5:e7:c8:92:9c:ad:b5:9f:48:85:
e1:de:45:35:0d:be:cb:82:b6:3d:f4:1d:92:a7:1d:
4a:1a:7d:b2:56:88:05:a8:33:f6:d0:9a:8a:c4:0a:
27:6d:9b:97:b4:0f:8d:07:e8:e5:96:4b:7c:39:5b:
82:c9:57:58:ae:4d:9c:34:74:5d:cb:f1:a0:7f:37:
b6:0f:ae:2b:df:a8:c9:56:81:63:03:12:cd:3d:d4:
b5:5b:07:16:e4:72:ef:b6:8d:e1:7c:32:fa:4a:fb:
51:53:47:e3:06:c0:80:f3:72:ea:89:66:92:a3:49:
d4:7e:4a:c6:88:81:2e:46:dc:6f:17:50:8c:a7:36:
be:f4:a0:b6:59:68:05:79:64:2c:0f:5b:1c:11:70:
81:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7C:90:1A:08:99:0A:84:4A:7E:62:5B:F8:FB:9A:10:2D:1F:EE:5D
X509v3 Authority Key Identifier:
keyid:C1:1D:08:18:64:33:90:30:69:B5:D6:BB:65:2F:98:42:8F:53:C8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wR0IGGQzkDBptda7ZS-YQo9TyAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:92:0e:3e:b0:44:a8:32:de:47:2e:1a:27:84:c8:0a:79:60:
e0:08:d9:f5:01:01:28:25:96:dd:2a:fd:7c:f2:8a:e8:47:93:
61:93:2b:e9:96:29:d9:d8:54:d3:6f:61:6d:0d:a5:b3:62:8e:
2e:73:3a:3f:39:1d:4a:8a:28:b0:eb:aa:35:08:0b:24:3e:72:
a9:47:0e:98:4e:fe:bc:6c:dd:36:82:92:0f:f9:62:84:74:67:
8a:61:ab:9e:3a:60:71:73:d9:21:fe:0e:25:91:79:9e:43:35:
26:87:f5:be:c6:be:ba:e1:16:59:09:56:02:9e:28:6c:b0:0c:
99:7f:03:2f:3f:6d:c4:65:cd:73:4f:c4:a7:ac:3b:a4:61:05:
a1:f5:d2:c6:30:25:fb:5c:6a:31:94:aa:e3:78:a0:58:0a:14:
f8:b2:e4:b4:a0:2f:ad:ec:2c:28:c9:5d:75:3c:2d:cf:24:c2:
57:7d:34:65:6f:60:37:1a:3c:77:53:6d:67:56:f3:e3:4e:dc:
73:ed:ea:89:f9:ba:a7:8f:cb:9c:3a:93:20:b2:8d:99:74:cd:
03:c5:fe:6f:ec:f8:12:c9:f1:96:1f:a3:a4:9f:05:f6:fa:e3:
85:2c:3c:6b:c2:47:df:1e:2e:83:11:de:12:1e:2d:95:ee:59:
13:12:6d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:49:32 2025 by rpki-client