Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft
File: wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft (raw, json)
Hash identifier: 0BcqIp19naRZZsskET5j53DGsAZ4Ltsw2vdA9Zc6P4c=
Subject key identifier: 03:6F:FF:0B:5E:E8:23:22:6A:42:6B:8F:20:9F:18:31:D6:30:DA:C5
Authority key identifier: C1:15:F1:34:1A:87:14:0A:12:2D:C8:F9:65:02:B7:24:49:05:7E:60
Certificate issuer: /CN=c115f1341a87140a122dc8f96502b72449057e60
Certificate serial: 0194BABB5601AAD6B82507983ED159E61BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft
Manifest number: 1247
Signing time: Fri 31 Jan 2025 05:00:26 +0000
Manifest this update: Fri 31 Jan 2025 05:00:26 +0000
Manifest next update: Sat 01 Feb 2025 05:00:26 +0000
Files and hashes: 1: OZdY9tsN8gFkESVtIbXza917_a0.roa (hash: izbPKaAtrUogn7SQSKm/hKiliCifOlraqF2HZIB4lps=)
2: wRXxNBqHFAoSLcj5ZQK3JEkFfmA.crl (hash: ezayymJK9dAnco870b5Sb0drEDaklTI7N3Dnjwu2mFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:56:01:aa:d6:b8:25:07:98:3e:d1:59:e6:1b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c115f1341a87140a122dc8f96502b72449057e60
Validity
Not Before: Jan 31 05:00:26 2025 GMT
Not After : Feb 1 05:00:26 2025 GMT
Subject: CN=036fff0b5ee823226a426b8f209f1831d630dac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:14:b8:9c:ad:17:9e:90:d2:14:54:86:df:27:
0d:d6:3e:23:96:ac:2f:22:0b:2e:e5:fb:d6:0a:3a:
c5:ec:b8:7f:9c:6a:3e:95:60:cb:a7:f3:62:07:7c:
22:3a:d2:bb:3b:5a:8d:13:0a:95:d4:70:f8:8f:5b:
95:0e:fe:b7:6b:cd:17:ee:78:f5:df:53:8d:8c:d2:
21:21:0c:68:79:fb:ba:a0:ec:db:d2:61:82:ef:fe:
c8:69:d9:f8:30:aa:0e:89:ea:7a:ba:a7:31:91:b3:
9a:a9:da:37:0b:b2:92:77:d9:9d:6d:2b:54:fb:49:
85:96:0e:e0:91:c3:b0:68:e5:0f:d1:7b:42:4d:d4:
df:dc:40:08:a7:d2:53:92:ea:e5:04:fc:0c:37:4f:
80:91:d4:0a:68:1a:c8:72:31:ba:af:8b:09:bb:fe:
8f:10:cb:74:8c:2d:20:0e:51:05:f6:0c:07:52:87:
59:57:2b:61:57:86:7c:8e:a1:ae:7b:6c:2d:18:c3:
70:5a:d8:e0:77:70:32:7a:fc:17:9d:e4:bf:06:27:
3e:c5:20:f2:80:a2:69:5e:00:50:24:73:22:51:ee:
5e:3b:ac:c2:39:27:92:46:7b:65:68:cb:d7:17:b0:
c9:5b:08:57:92:47:88:7b:20:6b:6b:fb:50:f2:b6:
71:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6F:FF:0B:5E:E8:23:22:6A:42:6B:8F:20:9F:18:31:D6:30:DA:C5
X509v3 Authority Key Identifier:
keyid:C1:15:F1:34:1A:87:14:0A:12:2D:C8:F9:65:02:B7:24:49:05:7E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:68:78:6f:1f:e7:94:97:18:14:34:41:26:ea:47:7c:f4:dd:
42:d5:a4:92:c2:44:af:e4:8b:a2:10:a1:c9:75:19:3d:51:8c:
97:a3:44:7a:47:de:f0:fa:24:c5:1a:62:4f:91:c0:d5:15:38:
b2:15:6f:ee:1e:c8:28:3d:84:58:0b:b3:d2:74:2a:9e:7a:77:
03:8a:bd:8b:62:cb:a7:9f:2a:76:73:31:51:d0:e1:58:c8:fe:
86:21:6f:9a:7b:1a:e9:87:da:79:16:80:43:da:11:98:b9:6c:
c7:01:e7:f1:1e:e2:e1:df:30:75:18:d0:ff:1d:d5:5b:39:32:
94:bf:9c:0b:9f:7c:a9:a7:f4:4c:4f:8e:06:1c:4e:df:d5:35:
1d:e2:6e:39:0b:1f:b3:0e:40:09:1c:59:40:44:5e:35:dc:d9:
b1:30:0c:19:f0:68:ab:5a:eb:1f:95:ba:5e:a8:f0:11:56:c6:
f8:00:c5:59:72:ed:08:0c:39:78:59:9e:92:fe:30:ec:24:64:
e9:e9:5c:68:ee:b4:8d:98:7f:2c:f3:b6:d7:b4:1a:40:f9:d1:
ac:95:b3:e0:6f:b8:53:23:dc:b2:cc:5a:43:f6:9f:ff:13:23:
7d:df:4d:da:18:32:af:e7:d6:77:10:dc:48:f1:d7:61:3d:de:
7c:0a:12:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u1YBqta4JQeYPtFZ5hugMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMTVmMTM0MWE4NzE0MGExMjJkYzhmOTY1MDJiNzI0NDkw
NTdlNjAwHhcNMjUwMTMxMDUwMDI2WhcNMjUwMjAxMDUwMDI2WjAzMTEwLwYDVQQD
EygwMzZmZmYwYjVlZTgyMzIyNmE0MjZiOGYyMDlmMTgzMWQ2MzBkYWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBS4nK0XnpDSFFSG3ycN1j4jlqwv
Igsu5fvWCjrF7Lh/nGo+lWDLp/NiB3wiOtK7O1qNEwqV1HD4j1uVDv63a80X7nj1
31ONjNIhIQxoefu6oOzb0mGC7/7Iadn4MKoOiep6uqcxkbOaqdo3C7KSd9mdbStU
+0mFlg7gkcOwaOUP0XtCTdTf3EAIp9JTkurlBPwMN0+AkdQKaBrIcjG6r4sJu/6P
EMt0jC0gDlEF9gwHUodZVythV4Z8jqGue2wtGMNwWtjgd3AyevwXneS/Bic+xSDy
gKJpXgBQJHMiUe5eO6zCOSeSRntlaMvXF7DJWwhXkkeIeyBra/tQ8rZxpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANv/wte6CMiakJrjyCfGDHWMNrFMB8GA1UdIwQY
MBaAFMEV8TQahxQKEi3I+WUCtyRJBX5gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1JYeE5CcUhGQW9TTGNqNVpRSzNKRWtGZm1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNmFhOTYtYWE4Zi00ZmQ0LWI5ZTgt
MzczYTBkM2M0NTM0LzEvd1JYeE5CcUhGQW9TTGNqNVpRSzNKRWtGZm1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iNmFhOTYtYWE4Zi00ZmQ0LWI5ZTgtMzczYTBkM2M0NTM0
LzEvd1JYeE5CcUhGQW9TTGNqNVpRSzNKRWtGZm1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeWh4bx/n
lJcYFDRBJupHfPTdQtWkksJEr+SLohChyXUZPVGMl6NEekfe8PokxRpiT5HA1RU4
shVv7h7IKD2EWAuz0nQqnnp3A4q9i2LLp58qdnMxUdDhWMj+hiFvmnsa6YfaeRaA
Q9oRmLlsxwHn8R7i4d8wdRjQ/x3VWzkylL+cC598qaf0TE+OBhxO39U1HeJuOQsf
sw5ACRxZQEReNdzZsTAMGfBoq1rrH5W6XqjwEVbG+ADFWXLtCAw5eFmekv4w7CRk
6elcaO60jZh/LPO217QaQPnRrJWz4G+4UyPcssxaQ/af/xMjfd9N2hgyr+fWdxDc
SPHXYT3efAoSqg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:46 2025 by rpki-client on console-fra.rpki-client.org