Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
File: cmcwWIWc_XASlB2JY63M9jAKGe8.mft (raw, json)
Hash identifier: 3/+hZEBJW/dVvpWmI9MWie1w23JWeygOLkEJ7javy2I=
Subject key identifier: EC:77:B7:46:32:41:58:8D:8A:94:3E:60:5F:5F:30:1B:F2:0A:67:8A
Authority key identifier: 72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF
Certificate issuer: /CN=72673058859cfd7012941d8963adccf6300a19ef
Certificate serial: 0194C351015A0F6A0AE724018B5C6F893738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
Manifest number: 142E
Signing time: Sat 01 Feb 2025 21:00:53 +0000
Manifest this update: Sat 01 Feb 2025 21:00:53 +0000
Manifest next update: Sun 02 Feb 2025 21:00:53 +0000
Files and hashes: 1: 1-CBPCQEhah96ufyUbT9Pgx0vfDA.roa (hash: a/E265pRySYxwfkb5CZMhMIiUvhNhX2eZiajI2HOkkM=)
2: cmcwWIWc_XASlB2JY63M9jAKGe8.crl (hash: 27fByTq9X3UJsiR1vPrg9wTdz818c0BqgIhev0QI2eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:51:01:5a:0f:6a:0a:e7:24:01:8b:5c:6f:89:37:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72673058859cfd7012941d8963adccf6300a19ef
Validity
Not Before: Feb 1 21:00:53 2025 GMT
Not After : Feb 2 21:00:53 2025 GMT
Subject: CN=ec77b7463241588d8a943e605f5f301bf20a678a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:6f:6d:33:db:52:14:98:96:ab:a2:aa:5c:
2e:0b:75:c4:4b:f3:82:08:47:bf:93:7a:5e:a2:8a:
97:ce:73:07:c4:ad:fe:da:fb:30:cb:49:03:3e:0c:
b8:e1:ab:30:11:7a:be:50:2f:0b:71:64:f2:5c:4f:
91:9d:6d:ef:82:41:a3:b6:31:34:de:e7:ea:35:4e:
17:f0:14:86:7a:99:eb:c4:0a:06:58:ac:0a:5a:65:
e0:cc:65:61:39:dd:ee:13:d0:84:4d:1e:25:65:44:
e4:8c:c1:0a:0d:b8:58:e5:5f:09:d7:ae:b2:35:28:
b4:c7:ad:76:92:38:cb:ef:06:34:97:e8:83:f8:42:
77:c1:c6:b4:b5:71:a1:e7:91:03:ba:0e:92:ad:fe:
b1:4c:51:0c:da:6a:c2:1d:0f:ad:71:94:cc:13:e1:
3c:6a:e6:b4:e5:8f:ea:11:5c:75:53:26:50:b5:85:
0d:ef:91:22:f1:f6:b7:c9:b0:fc:f1:c8:d1:d9:3a:
16:09:c7:c3:c3:fa:1f:9b:8a:30:08:20:e8:68:59:
26:e7:55:3e:9a:9e:88:5a:0e:84:94:98:74:09:00:
eb:77:c6:62:45:dc:f1:dd:4d:c0:ce:80:b5:3a:2f:
26:36:cd:c2:f2:98:81:c7:53:ac:22:ae:06:8e:ea:
19:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:77:B7:46:32:41:58:8D:8A:94:3E:60:5F:5F:30:1B:F2:0A:67:8A
X509v3 Authority Key Identifier:
keyid:72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:9e:6a:61:e7:f2:9b:90:4d:04:08:47:e1:bb:94:dc:89:20:
bf:a4:63:42:f9:5f:77:55:2f:f5:c9:b6:83:61:30:58:20:38:
5a:1c:58:5c:0f:d8:26:a0:b0:d5:ed:5f:38:8a:1f:37:e4:9a:
27:36:53:0a:a1:59:d1:3c:e7:6d:7d:82:ca:85:56:df:5e:08:
e3:13:c8:b9:a1:ea:84:d5:88:c4:7d:e1:f6:76:f1:ad:e8:64:
37:1b:41:e4:df:77:4f:bc:64:41:ac:b5:23:5a:d6:38:2f:f0:
fe:64:ab:fd:85:64:e4:d9:80:f7:da:a0:64:4c:ef:ae:04:6a:
95:d6:94:ac:ee:90:dd:10:76:79:55:65:73:60:87:50:cd:af:
d7:9d:d7:c2:58:8a:08:39:6a:a8:2a:1c:5c:4e:c1:4f:a3:c2:
0e:94:a3:b4:bc:2a:0f:e4:87:fa:bc:17:d7:09:99:48:ff:84:
5d:b0:ea:a3:05:5b:80:12:11:f4:59:b9:22:44:97:15:e9:59:
83:d9:65:5a:06:32:6d:0a:03:b2:68:33:6f:2e:dd:4d:9f:fb:
37:b5:dc:b1:55:56:68:00:cc:15:ab:4a:55:ca:76:75:f2:40:
ad:eb:c2:4d:f3:58:16:40:00:f8:26:7c:d8:6f:b8:71:67:d3:
52:62:3a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:57:23 2025 by rpki-client