Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
File: wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft (raw, json)
Hash identifier: K9Y99tlsIuYLAItyoZ1JoCU5bcvbldQKMTpggomZWK4=
Subject key identifier: 21:75:50:88:DF:FF:AC:7A:DC:BB:B8:2F:2F:4D:EA:E1:AF:B4:6C:5D
Authority key identifier: C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
Certificate issuer: /CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Certificate serial: 0194C4638741B86C2903E02CFCB9E00C7143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
Manifest number: 1430
Signing time: Sun 02 Feb 2025 02:00:44 +0000
Manifest this update: Sun 02 Feb 2025 02:00:44 +0000
Manifest next update: Mon 03 Feb 2025 02:00:44 +0000
Files and hashes: 1: E0oPYTANwX4SVfmo4G4Bb_Ffflc.roa (hash: POCopGH4Sf5gshG/ai7EpgPCh9X9MivwqlQ7wpM8V2Q=)
2: wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl (hash: LIIvBbTUJCZBeB63JmUTDD1lPZreelZW6vyWiIiK7CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:87:41:b8:6c:29:03:e0:2c:fc:b9:e0:0c:71:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Validity
Not Before: Feb 2 02:00:44 2025 GMT
Not After : Feb 3 02:00:44 2025 GMT
Subject: CN=21755088dfffac7adcbbb82f2f4deae1afb46c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9d:79:fb:5a:12:d9:c5:ea:8f:b1:e6:b4:38:
94:fd:ea:21:ca:60:d7:1c:b1:1f:db:bf:0d:f9:28:
ef:34:6b:2d:58:7b:b1:14:1a:ae:91:40:ea:86:02:
b7:d8:6d:fe:7d:0c:d3:9c:a7:35:61:90:52:cf:56:
d4:45:2a:16:9b:9f:8d:9b:e1:66:80:d8:b4:cc:fc:
24:33:89:a5:c1:0a:82:22:9c:ee:10:a9:42:94:4c:
18:91:ec:b8:59:76:4f:35:4a:1a:4b:ce:38:cb:21:
ed:ac:05:33:9a:54:1f:46:3e:d8:e7:8d:1d:db:85:
c4:1b:66:68:c8:50:99:2e:1a:9b:9e:6f:19:c6:98:
5b:52:3e:93:3d:06:d4:54:33:c4:4a:f9:06:7d:dc:
d4:d6:9a:f8:35:67:6f:0d:db:7c:dc:d2:95:88:d2:
7a:e6:79:10:5c:66:d5:cd:ca:67:be:51:58:64:9d:
b2:8a:c4:54:b7:5f:d4:0b:74:85:8b:33:47:61:74:
46:c2:48:38:34:e9:6a:b2:28:8f:f1:75:62:b5:4d:
a0:bd:7d:55:3d:14:b6:72:a9:4c:a1:6f:48:9d:0a:
27:f2:a6:52:a2:4c:a6:e8:e1:49:51:40:aa:25:98:
16:24:8e:b0:2b:de:37:88:eb:c1:37:28:58:17:d6:
20:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:75:50:88:DF:FF:AC:7A:DC:BB:B8:2F:2F:4D:EA:E1:AF:B4:6C:5D
X509v3 Authority Key Identifier:
keyid:C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:9b:0a:12:94:dd:f1:fb:18:87:50:32:5b:64:1e:07:01:d1:
85:76:57:d0:a5:e4:ae:37:b2:05:ba:7d:7e:97:02:51:26:4a:
29:9d:d6:a7:69:41:11:91:87:33:f7:c6:67:72:51:b0:3f:1e:
2f:2d:de:36:af:ff:1f:8b:65:ac:0f:c2:91:ee:97:98:82:09:
39:00:06:58:0f:2e:79:ff:44:c4:76:7e:ca:e5:fa:30:9f:ce:
d7:1a:8f:0d:33:50:8f:4b:f3:74:78:93:dd:db:36:7e:42:c7:
75:33:c8:91:84:ca:78:58:ed:f0:64:f1:a9:85:cb:98:84:b6:
19:a0:01:10:68:15:d8:27:26:d3:8d:7e:61:37:6b:9a:8b:20:
19:52:55:2b:62:9f:e2:e1:db:a0:ee:d6:00:19:b0:44:57:14:
fe:ca:e3:0c:20:4b:01:10:0b:b4:88:4d:70:ce:ed:40:0f:54:
51:95:93:a0:96:e3:eb:b9:21:59:4d:1a:6d:8f:aa:00:1f:7f:
1c:f0:29:5e:ce:2e:37:3f:f8:4e:9d:fb:d6:05:4b:b9:77:fe:
e2:25:3c:ac:a1:97:f5:1f:27:f5:31:56:2f:1f:15:4f:14:27:
0b:0e:7a:18:34:1b:15:40:2b:80:4e:55:c3:19:d1:7e:17:fa:
5e:d8:71:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTEY4dBuGwpA+As/LngDHFDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMWM1ODMzN2NkNGQ3NGNkOTIxOWQ4Nzc4ZGVlNWIyOWYw
OGE0NjEwHhcNMjUwMjAyMDIwMDQ0WhcNMjUwMjAzMDIwMDQ0WjAzMTEwLwYDVQQD
EygyMTc1NTA4OGRmZmZhYzdhZGNiYmI4MmYyZjRkZWFlMWFmYjQ2YzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1515+1oS2cXqj7HmtDiU/eohymDX
HLEf278N+SjvNGstWHuxFBqukUDqhgK32G3+fQzTnKc1YZBSz1bURSoWm5+Nm+Fm
gNi0zPwkM4mlwQqCIpzuEKlClEwYkey4WXZPNUoaS844yyHtrAUzmlQfRj7Y540d
24XEG2ZoyFCZLhqbnm8ZxphbUj6TPQbUVDPESvkGfdzU1pr4NWdvDdt83NKViNJ6
5nkQXGbVzcpnvlFYZJ2yisRUt1/UC3SFizNHYXRGwkg4NOlqsiiP8XVitU2gvX1V
PRS2cqlMoW9InQon8qZSokym6OFJUUCqJZgWJI6wK943iOvBNyhYF9YgYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCF1UIjf/6x63Lu4Ly9N6uGvtGxdMB8GA1UdIwQY
MBaAFMEcWDN81NdM2SGdh3je5bKfCKRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1J4WU0zelUxMHpaSVoySGVON2xzcDhJcEdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wYmRjYTMtMjgzYS00OTQyLTg1OTIt
YzM5NDU0MWY3NzBlLzEvd1J4WU0zelUxMHpaSVoySGVON2xzcDhJcEdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wYmRjYTMtMjgzYS00OTQyLTg1OTItYzM5NDU0MWY3NzBl
LzEvd1J4WU0zelUxMHpaSVoySGVON2xzcDhJcEdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZsKEpTd
8fsYh1AyW2QeBwHRhXZX0KXkrjeyBbp9fpcCUSZKKZ3Wp2lBEZGHM/fGZ3JRsD8e
Ly3eNq//H4tlrA/Cke6XmIIJOQAGWA8uef9ExHZ+yuX6MJ/O1xqPDTNQj0vzdHiT
3ds2fkLHdTPIkYTKeFjt8GTxqYXLmIS2GaABEGgV2Ccm041+YTdrmosgGVJVK2Kf
4uHboO7WABmwRFcU/srjDCBLARALtIhNcM7tQA9UUZWToJbj67khWU0abY+qAB9/
HPApXs4uNz/4Tp371gVLuXf+4iU8rKGX9R8n9TFWLx8VTxQnCw56GDQbFUArgE5V
wxnRfhf6Xthxcw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:01:15 2025 by rpki-client