Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
File: cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft (raw, json)
Hash identifier: vwUDYElcUFg8wgGD+YfB4ATg/RxG5uUC+WYTqCETQLI=
Subject key identifier: 5F:B1:C6:16:0E:57:FF:C1:75:DC:1E:DC:70:AF:B9:CD:BF:E4:C9:82
Authority key identifier: 71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03
Certificate issuer: /CN=716842dc439836635a5c9ed6c0a495b3e6344a03
Certificate serial: 0194C4D0FFDD6B90909607EB78FF54D3FFC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
Manifest number: 0413
Signing time: Sun 02 Feb 2025 04:00:18 +0000
Manifest this update: Sun 02 Feb 2025 04:00:18 +0000
Manifest next update: Mon 03 Feb 2025 04:00:18 +0000
Files and hashes: 1: 2eV3LLHue0F4_ix9uAQjG0RjeyM.roa (hash: voDescMFunJFQQ5TLKb+tVFSLAofvJuHvYtHn/Yjp+c=)
2: cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl (hash: 22rC6fPaoihRV51O89tFkPBKhPRmx0Y+0NBP9pWZyUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d0:ff:dd:6b:90:90:96:07:eb:78:ff:54:d3:ff:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716842dc439836635a5c9ed6c0a495b3e6344a03
Validity
Not Before: Feb 2 04:00:18 2025 GMT
Not After : Feb 3 04:00:18 2025 GMT
Subject: CN=5fb1c6160e57ffc175dc1edc70afb9cdbfe4c982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:90:01:6a:a7:66:23:6e:71:d2:aa:13:0e:7e:
6b:31:4b:0d:07:5c:79:c3:0e:d9:86:9f:81:a7:ef:
9e:0b:86:f1:18:0c:03:5a:ba:cc:78:1d:55:bc:a9:
30:e3:39:14:85:7d:45:c7:a5:ac:5b:df:cc:bb:6c:
72:8a:0d:75:40:52:3c:d0:cb:ce:8d:54:29:61:40:
4f:29:1a:8e:83:18:8d:51:b7:57:66:bf:2b:37:89:
13:7f:b9:2d:64:bb:78:35:f6:ba:df:87:40:1b:46:
03:cb:d4:88:c3:fe:ea:9b:12:df:b1:cf:40:9b:d8:
b0:30:41:7d:4a:86:1f:f1:2e:51:d7:02:30:71:8c:
47:fb:e4:a7:ab:58:bc:24:ec:19:75:56:21:a3:8a:
7b:28:6c:e2:63:ac:d2:08:4f:3e:36:00:0c:61:77:
62:44:db:43:ea:ca:01:50:e2:2c:75:dd:cb:f4:44:
ec:69:eb:57:d9:7e:25:93:4a:9c:f6:39:f8:8a:53:
cd:fe:d8:77:53:37:94:1f:7e:24:90:00:68:5c:0a:
90:16:73:34:92:67:76:66:b9:90:d0:9f:4a:b6:32:
e5:2c:83:1d:48:a6:9e:57:b8:da:b8:41:4b:d4:7c:
6f:52:61:a7:6c:5d:8f:c4:2f:34:62:96:1e:38:cf:
8b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B1:C6:16:0E:57:FF:C1:75:DC:1E:DC:70:AF:B9:CD:BF:E4:C9:82
X509v3 Authority Key Identifier:
keyid:71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1f:40:d5:b8:1f:2d:67:6c:d9:99:a9:6c:78:ba:08:1b:ff:
e5:35:da:eb:28:88:d7:ef:54:39:8e:91:68:6c:91:25:36:7b:
a5:88:99:2e:ad:18:9e:44:7c:23:8c:52:fc:ea:2f:6d:cd:b7:
2d:f7:bf:3b:2d:98:5f:0f:85:3d:b7:4c:1c:ca:11:33:8a:74:
dc:56:8c:37:a6:a5:8e:82:63:78:88:23:0a:1e:10:71:f4:86:
c5:60:81:f2:0b:02:f9:70:8c:18:4d:ea:c5:8b:f7:f6:49:e1:
1a:18:16:82:aa:09:e9:10:60:9f:e9:e9:07:e1:ea:5c:28:29:
fe:58:13:c8:d4:73:83:03:df:a8:01:09:32:88:db:d0:be:bf:
54:b3:2a:95:10:1e:f6:33:d0:e5:46:e9:3f:94:45:d7:ec:98:
dc:5a:9e:44:e9:f0:ae:ea:7d:c3:7e:7e:82:4d:55:a1:22:d2:
60:b3:92:98:04:e4:d6:3b:41:f5:84:e7:6a:1e:a0:96:2b:0c:
db:e2:2e:e8:5b:2c:f9:95:b1:3f:6f:b5:dd:39:93:30:ec:d5:
6c:e3:6a:11:cd:b8:be:9f:eb:e9:ee:68:9f:4e:65:ab:c6:35:
04:d7:36:eb:8a:56:20:f8:a2:18:29:16:aa:64:4b:9a:e6:c5:
5f:94:d7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:48:35 2025 by rpki-client