Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
File: wDxpSwadoTLPTEvXwdIiloY7F20.mft (raw, json)
Hash identifier: rWQ+CS6X63Hvj3Yk4zkkkvuozQwfkQypTHUDETeYKWE=
Subject key identifier: 8D:D0:4C:B5:61:81:82:4A:2F:83:E2:43:D4:87:20:09:6F:E2:8E:17
Authority key identifier: C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D
Certificate issuer: /CN=c03c694b069da132cf4c4bd7c1d22296863b176d
Certificate serial: 0194C49A30080EA3DD64BA28E5D634C6E895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
Manifest number: A4
Signing time: Sun 02 Feb 2025 03:00:26 +0000
Manifest this update: Sun 02 Feb 2025 03:00:26 +0000
Manifest next update: Mon 03 Feb 2025 03:00:26 +0000
Files and hashes: 1: D83JF5HJmZ_nDCEolR80xNvS-M8.roa (hash: 2gVW9uQvzf9z69pIhSOEl0MnJWNxJhApE/Mz251JqN8=)
2: wDxpSwadoTLPTEvXwdIiloY7F20.crl (hash: E0tGLmrNPklBzJ/Md0EVwj5Fzlor5068wxko5UZy7w0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:30:08:0e:a3:dd:64:ba:28:e5:d6:34:c6:e8:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c03c694b069da132cf4c4bd7c1d22296863b176d
Validity
Not Before: Feb 2 03:00:26 2025 GMT
Not After : Feb 3 03:00:26 2025 GMT
Subject: CN=8dd04cb56181824a2f83e243d48720096fe28e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:37:ec:01:66:a0:8e:6a:7d:eb:ef:8c:32:87:
e9:76:b6:5a:96:17:bc:56:b4:0d:54:8c:cc:14:a4:
c1:e3:b5:6b:8c:46:cf:8d:84:9b:86:3d:c1:04:78:
19:0e:20:dd:84:33:64:99:ac:68:3a:88:8f:51:4f:
4f:be:9c:6c:cc:76:80:96:8d:b8:6d:0a:07:57:f5:
73:06:39:67:a9:70:3e:ab:fd:49:17:76:4c:4b:3a:
a0:7d:05:6c:71:a9:6a:65:1c:35:d9:53:58:32:9c:
ba:df:6f:28:f4:4b:bf:60:b5:51:95:87:d6:43:4e:
87:97:ac:ae:94:ce:95:ff:47:c4:33:80:c9:dc:c2:
d8:49:17:13:44:7f:fa:47:09:10:38:6c:43:d9:95:
12:6c:d7:df:a7:1b:ac:bd:61:07:5d:2b:0d:52:ef:
0e:31:bf:52:50:f8:81:35:f0:8b:3f:2a:81:81:45:
33:7a:20:71:bd:0a:f4:0e:11:58:94:23:23:6e:f8:
be:e5:4c:3d:40:9a:e0:ce:7b:45:33:e3:4b:85:6e:
77:1e:99:9e:12:37:fb:78:0a:18:17:26:9d:05:9c:
ac:60:4c:c0:39:cc:ee:49:a3:e3:c6:4d:07:a1:fd:
4d:1d:8f:4f:46:84:c1:5d:f3:5e:e0:0f:23:1b:74:
16:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D0:4C:B5:61:81:82:4A:2F:83:E2:43:D4:87:20:09:6F:E2:8E:17
X509v3 Authority Key Identifier:
keyid:C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:1b:0e:3c:f7:65:62:7d:af:56:86:e0:33:d1:87:90:3d:07:
86:05:ab:28:c1:38:d4:56:b0:b9:65:87:2c:f0:77:1c:5d:f2:
bf:5a:d2:19:f2:7f:08:98:f9:bb:33:53:c5:f6:28:8c:3a:7d:
41:cb:3a:9d:bf:f3:19:9e:f0:12:e4:f0:73:d1:c2:4e:ab:8d:
02:23:9a:98:dc:87:1c:93:f7:43:20:0a:37:ed:3e:b5:f0:66:
6c:35:a2:55:89:51:0e:25:79:81:f6:6c:25:15:5f:a4:d2:21:
03:ec:ec:49:07:bf:bc:7b:08:c6:b5:47:3f:d4:e0:00:ee:e1:
7d:96:2d:d0:6e:88:2b:f8:51:5c:96:24:36:ad:68:73:d1:f8:
95:05:79:0a:84:ec:20:3e:2b:d2:89:07:22:0f:a0:91:55:02:
98:d4:8a:d8:87:9a:a2:65:33:16:1b:2e:82:cd:5c:ac:3b:64:
00:65:ba:67:98:10:43:f1:74:37:81:43:ac:e7:59:eb:6d:15:
ba:e3:4b:8b:67:8d:65:43:85:fc:d4:f2:d9:3c:1c:b8:ed:6a:
92:db:57:85:ac:f5:45:5b:a7:e9:50:d5:f4:64:ab:ec:60:2d:
a2:b8:ea:01:03:3d:ac:d8:af:b5:87:0e:e5:8c:2d:7c:db:c9:
24:28:e6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:54:15 2025 by rpki-client