Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft
File: wb80sZClHOUwAleRGvMEBPSVH7Y.mft (raw, json)
Hash identifier: /8JVC3Nj6Ek8qtAXLQqKpAi1ElVaH7slnxcqV6mFCNQ=
Subject key identifier: 24:A4:EA:1C:67:52:52:86:43:49:FB:7A:A5:3C:FA:B8:CC:BC:A8:C6
Authority key identifier: C1:BF:34:B1:90:A5:1C:E5:30:02:57:91:1A:F3:04:04:F4:95:1F:B6
Certificate issuer: /CN=c1bf34b190a51ce5300257911af30404f4951fb6
Certificate serial: 019510C7DFB473A80A95EF381707ECDF7A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft
Manifest number: 1454
Signing time: Sun 16 Feb 2025 22:01:29 +0000
Manifest this update: Sun 16 Feb 2025 22:01:29 +0000
Manifest next update: Mon 17 Feb 2025 22:01:29 +0000
Files and hashes: 1: 0tyV27ZaRKIuc5h8kTDsBiv4BZI.roa (hash: 1dyOdZnQpGVWWsvnKswgEprRwbXy0vsePve+ulQremU=)
2: wb80sZClHOUwAleRGvMEBPSVH7Y.crl (hash: D2Xj0GeJOHx0ZcHNxHcrCfEpLcBHQOQ6PfhOkbPghog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:df:b4:73:a8:0a:95:ef:38:17:07:ec:df:7a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bf34b190a51ce5300257911af30404f4951fb6
Validity
Not Before: Feb 16 22:01:29 2025 GMT
Not After : Feb 17 22:01:29 2025 GMT
Subject: CN=24a4ea1c675252864349fb7aa53cfab8ccbca8c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:19:13:3b:8d:2f:7c:59:1a:af:9d:65:ac:f4:
bd:31:30:d6:45:30:52:96:8a:9e:a7:a7:4e:d9:36:
55:da:26:cd:30:66:50:7c:97:96:60:6e:c6:81:4b:
a7:dc:b1:98:bb:39:8a:68:1f:3d:db:dd:20:7c:94:
56:d0:7e:4f:20:8a:58:d5:79:5a:b1:e1:6a:2d:c7:
b2:ce:f7:3d:af:55:1e:89:8f:c2:f7:d0:ea:da:ca:
4c:a1:20:5e:19:ab:c4:6a:75:d5:9a:f8:cc:eb:c4:
32:00:e5:8f:aa:dc:14:18:65:36:98:51:06:f1:ad:
a4:1a:59:cb:e9:4a:4a:00:66:d2:ac:f2:00:cd:63:
90:15:99:22:34:68:1a:c5:05:49:57:ab:d7:f8:05:
36:74:eb:8a:c5:36:03:de:92:10:31:89:a1:99:ec:
60:05:2d:1a:58:bc:cb:ea:61:44:e0:c8:bb:c2:38:
69:80:73:55:8b:97:ff:50:4e:30:27:55:27:23:03:
64:94:7c:1d:c2:df:dc:18:cb:67:d5:3f:aa:85:7a:
56:aa:d4:c5:24:d1:d5:d5:f9:23:07:20:8f:3a:19:
ad:8a:ee:79:52:5e:56:69:2a:df:d9:79:01:12:b0:
ab:66:08:ff:98:4c:f8:44:4f:df:90:8f:a3:a5:a7:
c2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A4:EA:1C:67:52:52:86:43:49:FB:7A:A5:3C:FA:B8:CC:BC:A8:C6
X509v3 Authority Key Identifier:
keyid:C1:BF:34:B1:90:A5:1C:E5:30:02:57:91:1A:F3:04:04:F4:95:1F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0d:45:0e:a2:3b:25:ca:26:57:68:6e:e2:0a:9c:b9:3a:9d:
da:bd:e4:27:c2:00:08:31:b3:70:87:a6:1e:d7:fc:72:81:47:
2a:a9:af:b9:3e:94:8c:04:a8:47:cc:58:2c:c5:b2:cd:11:7b:
f7:30:4e:be:71:17:a8:ed:ef:35:02:43:b5:72:db:c3:40:47:
bf:08:43:e8:de:62:2d:54:fe:fa:f1:2f:d2:8b:0f:62:d5:fe:
18:b5:b6:94:ab:1f:ca:d2:03:cf:17:4b:e8:ac:9b:dd:3a:e9:
c5:e9:0e:43:24:ad:a9:ab:34:9d:47:03:53:55:f1:61:e7:2b:
34:6e:5a:f3:cb:72:0a:6b:73:4f:da:fe:c4:9c:c8:0d:1a:f4:
38:be:17:43:04:78:3a:19:d3:51:06:0c:cd:81:08:e0:db:cf:
f5:8a:92:8b:8a:f0:fd:8e:91:ec:a4:61:9f:91:8c:03:26:f5:
9d:5c:ad:e9:0d:1e:7e:c4:26:76:55:5b:b9:58:98:9a:ca:2e:
73:8d:63:39:a2:03:8d:41:84:57:67:95:09:75:9f:ef:55:46:
b5:49:af:1a:6a:da:53:e5:24:5d:5a:5f:9e:dd:b2:5a:30:d2:
73:a9:ba:78:66:30:4e:9e:63:a6:41:e0:aa:b9:cc:ea:af:94:
56:f9:c1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:32 2025 by rpki-client