Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
File: wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft (raw, json)
Hash identifier: hj2HSc4Gzgrpe6aNgQjnBjcCXamKH2YkdiFRIrKgaZA=
Subject key identifier: D1:AD:01:7D:C2:F6:7D:61:20:F0:CD:6E:44:90:F8:24:58:5A:A6:6E
Authority key identifier: C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7
Certificate issuer: /CN=c0f0abe688754510bc96c7f1b159492469fda6a7
Certificate serial: 019512478F8A008ED814840DF7AE1739EF5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
Manifest number: 03CC
Signing time: Mon 17 Feb 2025 05:00:34 +0000
Manifest this update: Mon 17 Feb 2025 05:00:34 +0000
Manifest next update: Tue 18 Feb 2025 05:00:34 +0000
Files and hashes: 1: MNSRA94GnwCWIcU0ZUPSgfJJzYA.roa (hash: vFvm6d7yLwrA+IkFyq24dAxJUZKY/00AaFr5EwDXEoE=)
2: wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl (hash: CUdCoN1DMwHRmpub3+8s4XUmF7wD+y6KzD7bTIxzPcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:8f:8a:00:8e:d8:14:84:0d:f7:ae:17:39:ef:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f0abe688754510bc96c7f1b159492469fda6a7
Validity
Not Before: Feb 17 05:00:34 2025 GMT
Not After : Feb 18 05:00:34 2025 GMT
Subject: CN=d1ad017dc2f67d6120f0cd6e4490f824585aa66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7a:c1:7a:1c:69:42:95:9c:f5:f7:37:83:07:
da:38:dd:a1:9f:c7:e4:d5:3f:94:6e:03:9f:91:b3:
9c:2d:86:00:2d:ed:1d:cd:18:1f:81:02:9a:02:43:
d0:d3:55:fc:af:e2:73:14:f6:cc:c6:39:c9:92:e1:
0f:00:d8:da:1b:66:a6:4c:0f:2a:16:c4:d8:04:48:
56:a0:db:fe:0b:40:6f:05:e4:74:1b:53:1f:a2:dd:
d7:cb:ef:62:23:94:bf:48:ea:6d:7b:fb:30:ef:e7:
72:66:91:03:09:bf:7b:45:d1:e9:64:ad:9b:1f:c2:
30:c6:9b:3a:39:07:ad:cb:72:92:9d:d3:7f:e5:c2:
ee:9e:4e:91:52:48:e0:e7:77:e1:30:f0:92:ae:51:
94:e9:3f:a0:42:e6:fc:d4:21:f7:72:92:2d:a3:6f:
db:b1:81:b2:3a:32:02:24:c1:8f:c6:96:d8:e0:0c:
85:df:bf:f3:5f:3b:e1:e4:e1:b9:eb:f7:88:2b:aa:
c7:5b:e9:df:1d:ca:93:19:b6:aa:e7:39:e8:51:12:
a1:af:3e:68:dc:7b:f4:19:4b:62:97:6e:dc:4b:f1:
6a:39:cf:e7:32:72:00:d5:09:4f:b1:3b:24:c9:d8:
82:e5:27:13:ad:93:c6:c3:d2:a3:98:d5:17:71:a0:
3e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AD:01:7D:C2:F6:7D:61:20:F0:CD:6E:44:90:F8:24:58:5A:A6:6E
X509v3 Authority Key Identifier:
keyid:C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c3:5b:6f:de:b4:3b:69:b0:7c:bd:48:d2:a3:5a:c5:92:99:
39:ad:38:a3:d0:a5:b3:46:48:27:ec:9c:fc:67:4f:dc:fb:60:
15:86:a2:c2:59:9f:e8:62:31:52:4a:e1:cc:1b:c6:75:79:2a:
c4:99:79:17:0a:68:bb:ae:9b:25:6a:8f:17:ce:11:61:40:60:
20:43:91:bb:fe:c5:44:37:84:6d:92:47:71:53:7c:85:43:e5:
1e:80:f6:04:35:dc:5e:23:97:40:a0:be:ce:ee:f7:86:aa:69:
1e:b4:11:02:7d:80:1f:eb:34:d0:62:45:a0:15:a4:f7:76:b4:
f5:26:8c:fa:2e:30:53:29:f9:02:2c:7d:7e:23:bd:6c:7d:8e:
d9:b0:56:df:28:f1:5f:2b:91:c9:32:b1:14:94:8e:fe:93:73:
ca:70:89:0d:7a:1e:c7:11:09:fd:51:70:d3:66:28:67:4d:49:
26:80:fc:d2:58:c8:a7:29:3d:8e:86:7e:26:85:6a:92:75:12:
f1:80:ed:d7:ff:df:24:5e:a8:90:f5:58:35:e3:85:4a:ea:bd:
e3:49:31:e7:d6:c5:55:9b:02:5a:69:37:1b:4f:e1:dc:ca:d7:
19:95:a7:5c:ed:a0:61:c0:63:83:b0:83:4b:6d:38:6f:f5:1c:
86:e8:dc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:28:39 2025 by rpki-client