Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
File: wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft (raw, json)
Hash identifier: AHdfEt8bnH/nOhSRwMWS+JGA+AdmLllBThv8kgNCaJ0=
Subject key identifier: 4F:8F:51:EE:96:95:C1:65:F9:07:F1:03:FD:82:64:02:CE:3E:A9:40
Authority key identifier: C0:0A:88:D7:E5:A5:65:EA:71:9C:FC:40:D8:BB:63:EE:16:71:85:6A
Certificate issuer: /CN=c00a88d7e5a565ea719cfc40d8bb63ee1671856a
Certificate serial: 0194C3BE5A9652740344433E3560B9EFEF35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
Manifest number: 0331
Signing time: Sat 01 Feb 2025 23:00:19 +0000
Manifest this update: Sat 01 Feb 2025 23:00:19 +0000
Manifest next update: Sun 02 Feb 2025 23:00:19 +0000
Files and hashes: 1: KG9HkmRGaF_sHhDWjx3vp73PeIA.roa (hash: xtQ/Bf0q+zKX28vYl4yuK/JzcH8nDzNW75ipUDIj1iY=)
2: wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl (hash: Riuh5+Yv1/z7dQ7fNd/YcNXa2JiCnBpoen5yq3qsYos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:5a:96:52:74:03:44:43:3e:35:60:b9:ef:ef:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00a88d7e5a565ea719cfc40d8bb63ee1671856a
Validity
Not Before: Feb 1 23:00:19 2025 GMT
Not After : Feb 2 23:00:19 2025 GMT
Subject: CN=4f8f51ee9695c165f907f103fd826402ce3ea940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2c:85:5f:e7:7a:96:1d:d9:d9:90:8e:28:ad:
a9:f2:8b:a9:15:69:cb:ad:fd:15:f9:05:b3:0e:d9:
ac:af:bc:1e:fd:cd:ef:7f:23:68:9e:d0:a6:cf:8d:
d4:ba:90:bb:04:26:64:c9:95:42:4a:bb:09:df:7f:
b4:eb:f7:b0:5d:9b:f3:9a:41:2a:c2:6b:76:9d:71:
16:f8:d7:d1:08:94:73:89:55:d3:e4:b9:61:ee:13:
42:ba:70:fc:7d:e4:06:42:64:e5:30:0d:0d:68:f4:
54:80:82:33:c4:df:0b:8b:99:4d:b4:9b:8b:2a:2d:
a9:71:7d:63:1b:66:21:92:fc:71:64:3e:2f:f3:6c:
23:3f:f7:11:5d:d7:b7:f4:22:d1:91:63:4e:fd:9e:
82:11:16:6d:3b:85:8e:4a:ec:0f:00:db:88:90:f4:
6b:39:e8:fa:b2:7c:af:9e:16:e3:bb:0d:74:f8:02:
b4:63:4c:52:8f:e4:30:7b:b1:ec:40:44:9c:64:e7:
aa:00:8f:f6:e6:15:0c:fa:be:0e:f8:3d:9e:39:cb:
12:2d:51:1c:74:25:f6:96:48:93:03:b5:28:a7:29:
c2:24:08:b1:41:f1:c5:2a:6c:25:bc:da:be:4d:66:
73:30:24:e8:c9:1c:db:54:ba:ab:e3:d0:3c:17:2d:
e8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8F:51:EE:96:95:C1:65:F9:07:F1:03:FD:82:64:02:CE:3E:A9:40
X509v3 Authority Key Identifier:
keyid:C0:0A:88:D7:E5:A5:65:EA:71:9C:FC:40:D8:BB:63:EE:16:71:85:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:9a:11:41:a0:2f:79:0e:25:de:94:bf:ef:d0:22:d5:b1:68:
95:ab:a8:a4:42:8e:cc:73:21:a1:3e:1f:41:d9:8d:66:78:64:
0f:c3:d1:eb:b3:88:78:3b:4c:7a:e0:7d:aa:81:04:18:24:37:
12:b6:3b:ce:ce:d2:99:7d:cb:53:cc:e0:20:ec:d5:52:1a:a0:
e6:34:01:c9:fd:65:de:16:fd:b7:e8:f9:a5:8f:4a:f5:bc:74:
bd:66:d7:c9:f3:7e:a9:a3:15:8e:38:c0:7f:38:69:d6:c4:3a:
f9:fc:50:20:9d:89:60:39:cb:d2:f7:76:96:47:60:58:1b:d5:
cf:8b:7a:a1:25:82:c8:a9:e8:b3:2c:ab:b5:fe:dd:8f:f7:0f:
4e:89:d5:e8:f2:3e:bf:52:59:05:e0:b6:02:3b:e3:af:00:78:
81:5e:63:e2:2f:8b:f6:ff:71:cb:61:13:00:3c:f8:41:29:59:
2c:f7:01:47:74:1e:43:3f:de:27:a6:e9:4f:46:31:66:8b:46:
a8:73:fc:77:b8:1c:26:7d:3b:69:01:7d:60:ba:e8:5b:46:d7:
f1:8b:17:cb:02:61:14:ce:09:f5:3e:3e:d3:01:26:a0:61:75:
c1:93:93:75:88:1c:1f:9d:da:0b:c0:4f:07:54:2b:c6:46:29:
a1:5f:21:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:13 2025 by rpki-client