Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
File: wU7kzo087uI-Amb8r1RIIK5BB4g.mft (raw, json)
Hash identifier: MJrTyYt5h6E5zu4kSsM8/Sp+VF5HnE5DTF8ft0LagQk=
Subject key identifier: 82:32:3B:55:1D:7C:DD:62:5F:FD:8D:47:3D:7B:3F:C2:F2:B3:82:BD
Authority key identifier: C1:4E:E4:CE:8D:3C:EE:E2:3E:02:66:FC:AF:54:48:20:AE:41:07:88
Certificate issuer: /CN=c14ee4ce8d3ceee23e0266fcaf544820ae410788
Certificate serial: 0194C3F5725CDFBC9CBCCE5C35B06559DD7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
Manifest number: 89
Signing time: Sun 02 Feb 2025 00:00:30 +0000
Manifest this update: Sun 02 Feb 2025 00:00:30 +0000
Manifest next update: Mon 03 Feb 2025 00:00:30 +0000
Files and hashes: 1: StpUpn9lX23TO-Oe-4PI79KxNG0.roa (hash: Y4gPgVsX/dvV/I4lGCjA++A6e1J5MarmPPrWMNyloHc=)
2: wU7kzo087uI-Amb8r1RIIK5BB4g.crl (hash: dXj+jpJomiih8RBNrQw4hGkqdiyNZeDzuB8hffS0Bro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:72:5c:df:bc:9c:bc:ce:5c:35:b0:65:59:dd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14ee4ce8d3ceee23e0266fcaf544820ae410788
Validity
Not Before: Feb 2 00:00:30 2025 GMT
Not After : Feb 3 00:00:30 2025 GMT
Subject: CN=82323b551d7cdd625ffd8d473d7b3fc2f2b382bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:45:4c:78:a0:da:83:f8:06:0d:21:57:a7:6b:
42:25:80:46:df:3d:a4:d8:07:8c:b8:f2:eb:07:13:
10:9d:9d:64:9e:e3:e1:ca:aa:22:26:42:3b:fa:ac:
62:07:e2:09:3d:6f:fd:46:50:32:c8:5f:b5:d8:5c:
af:12:ff:9b:f5:fe:ef:ae:7d:7e:51:9d:e0:76:4a:
ff:2d:73:67:e6:5f:15:05:7e:ef:5b:90:b1:08:6a:
e5:7f:79:cb:0b:33:b0:78:4e:80:f2:1e:92:df:c5:
41:46:3a:4b:a2:aa:bd:96:46:28:a8:4c:8a:c6:75:
81:c2:80:0f:5b:7c:cc:9f:f7:fd:aa:10:4b:9a:ea:
1d:6a:49:ff:c6:98:e8:60:57:ca:8a:3f:84:5b:08:
1c:f5:5d:d8:ac:41:a2:d1:36:d0:2c:ef:ac:52:96:
3e:4d:59:0d:9f:3b:39:16:dd:a1:08:90:a7:55:d8:
77:37:3b:ab:68:b9:a4:5d:e3:60:44:62:6f:63:40:
f9:1a:b1:c1:a7:df:bb:92:f9:56:5a:ec:15:73:cb:
a5:74:b9:2b:f6:ce:b2:e3:23:e2:85:90:99:ec:7e:
ae:3b:e5:c7:32:ab:fa:b4:4d:3c:c6:5c:54:c9:d8:
a1:90:1b:c2:72:c0:52:97:3d:28:67:df:4f:b5:1c:
28:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:32:3B:55:1D:7C:DD:62:5F:FD:8D:47:3D:7B:3F:C2:F2:B3:82:BD
X509v3 Authority Key Identifier:
keyid:C1:4E:E4:CE:8D:3C:EE:E2:3E:02:66:FC:AF:54:48:20:AE:41:07:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:48:b3:22:e2:24:71:e7:58:a7:0c:1a:31:46:b8:e9:ba:fb:
9b:92:fd:db:d9:c8:0e:fc:d9:00:2b:76:79:75:86:97:1f:fc:
11:04:b6:89:ef:96:3b:75:12:3b:23:0f:fb:b9:ce:8c:c1:63:
38:39:dd:43:37:a5:d3:a8:29:8d:e4:af:ca:54:77:ec:5d:3c:
89:e0:88:1a:f4:e6:ca:10:cc:8f:94:48:62:a3:ca:f1:17:25:
a0:3b:0b:13:8f:2a:42:08:5e:39:0d:82:77:bf:45:82:a0:a6:
17:4b:30:d0:b6:44:02:7a:0f:ba:0a:38:be:7d:9e:74:21:3c:
3b:76:2b:dd:df:ca:96:7d:3a:16:a7:db:fb:b3:3e:81:1a:d2:
12:31:af:49:3f:0a:ec:e1:2a:83:f0:ce:7d:23:1f:da:ef:0a:
82:cc:96:1b:13:08:d7:ef:45:23:ce:f8:bc:a8:15:ea:29:16:
75:7f:62:32:ae:5d:6c:fb:25:b3:60:50:12:82:b5:03:44:de:
08:f2:d2:25:7b:28:89:07:bd:ee:e5:ed:db:ed:98:77:94:b8:
c0:e4:bc:13:43:e5:7d:23:91:f0:7a:2e:b6:3b:df:6a:ef:ac:
8c:a5:13:14:b4:e4:27:8c:af:b5:11:b7:63:d6:5d:18:a8:9e:
5c:eb:6d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:50:57 2025 by rpki-client