Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
File: hWSCS22vvTPxCjaW4ArLlIwRKjg.mft (raw, json)
Hash identifier: 7dFXcxHzWPNzNb1a60MhL6UtZRefUX4peSmgs+7ZUio=
Subject key identifier: 70:D5:45:B6:44:F2:8A:D5:3D:D9:BF:53:0D:BA:87:12:88:31:CC:BD
Authority key identifier: 85:64:82:4B:6D:AF:BD:33:F1:0A:36:96:E0:0A:CB:94:8C:11:2A:38
Certificate issuer: /CN=8564824b6dafbd33f10a3696e00acb948c112a38
Certificate serial: 019511A2BEDFB69F01FEEBF5E24EFF8C69D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
Manifest number: 028A
Signing time: Mon 17 Feb 2025 02:00:33 +0000
Manifest this update: Mon 17 Feb 2025 02:00:33 +0000
Manifest next update: Tue 18 Feb 2025 02:00:33 +0000
Files and hashes: 1: hWSCS22vvTPxCjaW4ArLlIwRKjg.crl (hash: 2z+/VPx9BduEBmKvxVubFaQDxD/Criha0cy/cZcbgPY=)
2: j3mlArIrCrvoTStpcqF9EPTMJII.roa (hash: zagzdTS3IOA1uItKGwOJz9trfPNv/LGCzKt9YV1P5Jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:be:df:b6:9f:01:fe:eb:f5:e2:4e:ff:8c:69:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8564824b6dafbd33f10a3696e00acb948c112a38
Validity
Not Before: Feb 17 02:00:33 2025 GMT
Not After : Feb 18 02:00:33 2025 GMT
Subject: CN=70d545b644f28ad53dd9bf530dba87128831ccbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8b:8b:ec:28:2d:a0:79:9e:43:d5:21:32:9a:
67:f8:e3:2a:c0:11:89:01:33:77:6b:19:9d:b1:8f:
8c:56:a1:40:bb:4f:8e:67:75:f3:d5:a0:7a:10:be:
a5:ac:bf:05:0c:a2:5b:89:2d:c6:37:4a:00:08:e1:
e3:bf:26:12:1b:fc:a2:5f:4d:62:64:6c:cb:3a:cb:
98:00:36:c9:aa:28:80:4c:d2:7a:2c:90:11:b8:b0:
24:f7:1d:89:a3:6a:f5:29:ff:9d:ad:2b:a4:ad:13:
c4:14:21:81:72:e7:69:c1:77:be:58:f2:a7:56:5a:
ba:0b:54:d1:63:55:40:e3:86:e6:ff:51:12:46:42:
20:23:be:bc:b5:8a:55:9e:f9:8b:ee:64:76:b1:0b:
83:29:0a:58:44:36:fb:c8:4b:c2:dc:40:59:68:fc:
10:76:6a:ce:9a:ae:38:ad:16:cd:27:3b:5e:f0:57:
ad:51:91:c0:dc:82:44:31:51:a9:46:db:f2:f2:9a:
d2:3a:97:03:fa:51:cf:96:57:b5:32:9e:7b:22:10:
8f:9b:fa:36:cc:e5:46:9b:65:0e:da:5d:39:45:8b:
d7:8a:67:e3:37:ec:09:68:d9:f8:35:31:50:85:29:
cb:e3:38:74:e3:aa:78:73:d2:47:4f:08:66:a2:c7:
d9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D5:45:B6:44:F2:8A:D5:3D:D9:BF:53:0D:BA:87:12:88:31:CC:BD
X509v3 Authority Key Identifier:
keyid:85:64:82:4B:6D:AF:BD:33:F1:0A:36:96:E0:0A:CB:94:8C:11:2A:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:6c:56:8f:2e:b3:c2:96:20:ae:03:eb:0c:95:67:dc:e6:4a:
f8:2e:98:1a:d2:2d:90:5d:93:e3:db:e6:4f:3d:ba:55:0b:5d:
34:3f:f4:4e:cb:1e:5c:10:68:24:6e:30:76:09:8b:0b:42:a1:
74:c1:33:22:90:da:e3:60:f2:8a:c4:d9:18:e1:a7:41:96:06:
64:db:8e:62:fa:fe:97:d2:82:a8:03:f4:1e:61:1f:6d:be:ee:
74:dc:95:d0:eb:ed:c7:01:fb:57:64:98:e1:d2:f1:e1:3f:ad:
cf:7c:75:95:97:fa:69:f0:05:c9:a7:ef:83:ea:85:ad:ba:95:
94:e3:c8:47:11:cf:53:b3:cb:2d:d2:51:51:81:12:09:cf:5f:
33:cd:1a:55:d3:ab:4b:22:20:93:32:36:45:b0:16:2a:d6:60:
fa:95:33:45:f7:1f:65:e3:e4:55:2b:f4:ef:f7:13:06:78:aa:
40:d4:a8:39:e8:78:cc:d7:41:97:22:e3:f6:72:2b:64:3d:2a:
b1:c8:5f:37:8e:da:df:ad:5c:60:e5:fd:c0:a0:50:63:29:96:
fe:ef:4e:13:68:38:33:ba:6d:50:04:75:3d:35:e7:a7:16:13:
c1:99:f7:bc:b9:ab:49:7a:d1:2b:a4:90:91:a5:48:5b:ff:ed:
59:09:07:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:13 2025 by rpki-client