Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
File: rwXUKRyugYXGw0LiXe6bfpIPdt0.mft (raw, json)
Hash identifier: 7fFVm+rveIKN6Djcp+/klmZbSAidl8NoHZmNFcKgrzI=
Subject key identifier: 4A:88:BC:C8:2A:6B:8A:A7:DD:58:AB:0A:CC:B9:09:3F:BA:A3:5E:04
Authority key identifier: AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD
Certificate issuer: /CN=af05d4291cae8185c6c342e25dee9b7e920f76dd
Certificate serial: 019510C6D652BB2F5CA6616F42137DEDFCE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
Manifest number: 031E
Signing time: Sun 16 Feb 2025 22:00:21 +0000
Manifest this update: Sun 16 Feb 2025 22:00:21 +0000
Manifest next update: Mon 17 Feb 2025 22:00:21 +0000
Files and hashes: 1: 41rmP0fRaJ_Rp04VkDrnen4Ff9k.roa (hash: hIEQZsD1Luj1wzFwd6Ncf1xZemUGDUraVaNuYs6VnsA=)
2: rwXUKRyugYXGw0LiXe6bfpIPdt0.crl (hash: hVtl/tgJP3068YNjgGn77T/8QzEd+SNp6Z5AbIIZpGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:d6:52:bb:2f:5c:a6:61:6f:42:13:7d:ed:fc:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af05d4291cae8185c6c342e25dee9b7e920f76dd
Validity
Not Before: Feb 16 22:00:21 2025 GMT
Not After : Feb 17 22:00:21 2025 GMT
Subject: CN=4a88bcc82a6b8aa7dd58ab0accb9093fbaa35e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2c:e4:b1:dc:2c:32:96:53:8c:d8:58:e8:3f:
64:7a:bc:42:5d:0b:3b:07:fd:3a:b8:02:2c:06:8b:
61:48:a2:f5:49:51:42:ec:0c:8e:4d:ad:7f:8f:03:
64:a2:74:b6:56:af:0e:f8:8e:06:6c:41:df:54:81:
23:da:3e:f3:a1:e0:dd:9a:46:86:5f:74:9d:1a:ae:
63:32:38:c7:26:e8:89:20:5f:99:a1:76:48:ee:cd:
92:68:d1:10:c4:01:96:2f:89:12:03:9b:3f:c9:7c:
f0:eb:19:c1:2a:90:ac:97:1b:2c:88:f2:41:6c:af:
25:8e:42:2b:88:b0:89:a1:f1:94:8d:31:18:18:05:
88:d9:d3:b2:0d:20:8c:04:f7:d0:ad:03:ef:8c:68:
13:49:b8:5a:5d:bd:16:db:3a:e9:27:44:71:60:24:
af:82:2c:28:7d:1f:f9:60:bb:fa:17:0d:4c:30:47:
d1:7c:d9:ba:dd:df:3a:67:24:da:9a:25:60:9f:eb:
b1:a6:ec:bb:0f:e6:e8:37:f7:d2:41:7d:cc:ce:3c:
77:bc:8f:fd:77:7d:5f:22:c0:fc:c3:f6:85:fe:43:
54:7d:ee:d7:49:92:96:f6:ad:50:4d:4b:12:35:43:
a7:2f:30:85:1c:de:23:91:30:d5:b6:95:92:08:32:
ba:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:88:BC:C8:2A:6B:8A:A7:DD:58:AB:0A:CC:B9:09:3F:BA:A3:5E:04
X509v3 Authority Key Identifier:
keyid:AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:63:51:77:09:c7:d1:3e:5a:67:f2:8f:09:36:77:c7:cd:c4:
50:85:83:b4:fe:2f:fb:42:2e:d6:61:0c:8e:9b:59:ef:be:9f:
6e:ae:20:6d:e7:c4:21:4c:3a:41:f7:50:6a:bf:24:9f:58:0e:
56:c9:02:9d:7d:04:a8:82:76:e7:11:48:c2:f8:0a:2d:63:78:
c9:96:4f:77:56:36:2e:7a:bb:cc:e6:bc:49:e9:b2:53:c3:39:
ad:6b:76:20:e8:0c:dd:7d:bd:4f:64:11:c4:1a:4f:20:e9:15:
fa:e3:1f:be:01:a0:c9:da:eb:e8:13:4f:1e:67:74:0a:29:00:
20:c1:4c:63:4c:8e:57:b9:a6:ee:48:a3:03:ef:c6:e5:31:95:
e4:45:28:c0:8f:eb:d7:96:99:38:4e:50:ff:86:bc:f4:79:f6:
38:4b:cb:c3:32:5e:10:b6:8e:a7:59:d5:84:49:c9:91:e8:44:
b1:22:b6:93:89:3c:7c:20:f9:65:0c:2d:53:51:50:ed:30:d0:
20:73:a6:96:1d:10:29:87:c3:0b:eb:27:e4:a7:73:f0:d1:7c:
bd:fc:f9:46:52:8b:b7:1e:8b:38:bc:15:21:d4:ec:10:e3:bb:
7a:e8:fe:7c:89:72:e5:68:5e:93:51:3f:ab:50:e0:b1:2d:c1:
45:c6:22:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:20 2025 by rpki-client