Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
File: w5VnlKe5iREVrTr5RXPnlhsWS6w.mft (raw, json)
Hash identifier: 1e/va36fUGgqHNSRyH8kMu1XphCmpe2THs0/uVx0cDc=
Subject key identifier: C4:2C:A5:70:54:CC:C6:70:4D:F3:F1:D5:2F:09:AB:4C:5D:B4:3D:D6
Authority key identifier: C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC
Certificate issuer: /CN=c3956794a7b9891115ad3af94573e7961b164bac
Certificate serial: 0194BB96F884F125C73D72F5C2BFE8295554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
Manifest number: 081A
Signing time: Fri 31 Jan 2025 09:00:20 +0000
Manifest this update: Fri 31 Jan 2025 09:00:20 +0000
Manifest next update: Sat 01 Feb 2025 09:00:20 +0000
Files and hashes: 1: w5VnlKe5iREVrTr5RXPnlhsWS6w.crl (hash: NgAbw+injK0ghSJ4ZqdXUnoTvJohP5kM828pahPBsME=)
2: xkG5C9EIic15eorp2Y7XuYpkcx4.roa (hash: n8lCWGpUNBjTbXMolc03Z+2CnsqT94fJsmtCrFN913U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:f8:84:f1:25:c7:3d:72:f5:c2:bf:e8:29:55:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3956794a7b9891115ad3af94573e7961b164bac
Validity
Not Before: Jan 31 09:00:20 2025 GMT
Not After : Feb 1 09:00:20 2025 GMT
Subject: CN=c42ca57054ccc6704df3f1d52f09ab4c5db43dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:63:27:24:8e:de:5e:e5:aa:f0:d4:d7:c0:86:
73:33:a4:a9:f3:83:ce:2b:f6:42:36:b0:0d:17:81:
9b:c2:72:8a:b2:52:40:e4:61:f4:c9:cb:76:40:bd:
97:1c:d7:4c:5b:b4:dd:b8:ca:78:d1:4a:3f:ed:9e:
8a:8f:62:90:40:53:95:67:5d:e4:d7:77:de:85:2e:
35:ab:c9:63:fb:6d:ec:3a:1d:e6:53:90:d6:8a:87:
a6:49:7d:2a:25:1f:fe:4a:a7:f1:f3:bf:8c:9f:3d:
08:37:43:43:7c:91:f1:b9:db:74:49:29:1d:93:38:
47:bd:45:4f:72:90:98:01:98:23:df:e8:3b:27:7a:
d1:9a:56:1b:bd:ee:17:65:76:d5:4a:9d:24:5f:e1:
24:ee:21:4d:c6:2b:b4:cf:2d:73:91:9f:f9:87:a9:
d8:5f:80:74:d4:25:77:6b:49:df:42:9b:23:4d:e9:
ee:c0:48:49:9f:86:56:3a:c5:1c:f2:14:e2:7a:be:
d6:58:be:58:0d:41:5f:05:22:48:e3:34:7a:3c:4f:
7e:9f:1a:c9:ec:ac:34:03:78:48:61:9b:78:bf:bc:
ac:d9:cd:e7:b3:9a:c6:a5:55:33:14:c1:11:04:b2:
68:e8:d0:1f:a6:af:4b:70:bd:51:18:a1:0c:20:68:
f0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2C:A5:70:54:CC:C6:70:4D:F3:F1:D5:2F:09:AB:4C:5D:B4:3D:D6
X509v3 Authority Key Identifier:
keyid:C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:a8:6e:8e:67:43:44:1e:aa:44:96:cd:62:ff:06:64:d7:59:
a6:1b:e8:6b:b5:70:94:af:f0:be:92:06:87:e5:ec:83:7f:01:
7b:e0:63:ba:4f:30:ec:06:4d:31:19:a3:e0:42:83:48:20:36:
78:da:80:dd:7e:9e:af:01:09:8e:38:0b:a8:b6:62:3a:43:3f:
53:66:18:35:05:60:b9:12:10:1f:14:89:3e:c3:ab:97:e8:02:
48:cf:70:19:31:83:7b:86:bb:16:8e:1d:4b:0e:53:45:1e:8d:
32:84:53:ec:64:79:95:b8:d3:bd:a7:8c:fb:f7:e6:6d:0d:31:
77:4b:76:30:61:8f:1e:0a:ad:fa:3a:00:3f:b7:9c:02:38:63:
83:95:81:d8:e4:f7:ea:2f:75:48:0b:4d:d9:ed:42:21:e0:53:
89:af:df:74:9a:04:60:94:dd:a0:d6:90:d7:b0:fb:9a:e8:cf:
7f:24:f4:ed:c5:f8:c1:19:df:29:20:f9:b8:ba:4e:b0:d0:06:
0b:c4:44:7f:a8:1a:f3:f4:c9:f3:80:cf:9d:02:4d:c0:76:87:
64:f4:35:41:3c:89:96:b9:4f:97:de:a5:18:a3:09:0c:12:9b:
65:84:ce:49:dd:0c:3a:1f:26:b9:c0:02:1e:41:77:33:61:54:
14:6c:99:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:14 2025 by rpki-client on console-fra.rpki-client.org