Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
File: weJGTdbQQjCVFffltk6mXAibRhY.mft (raw, json)
Hash identifier: 3F0KG3Ru8N5pHd2bnN//W1XyAxUtMwsxFQckOYt8PK8=
Subject key identifier: 2D:A8:5F:60:98:29:6E:ED:74:FA:E9:6B:A3:07:3E:66:A1:CD:64:45
Authority key identifier: C1:E2:46:4D:D6:D0:42:30:95:15:F7:E5:B6:4E:A6:5C:08:9B:46:16
Certificate issuer: /CN=c1e2464dd6d042309515f7e5b64ea65c089b4616
Certificate serial: 01958EBCEE5DE64A4A94B393BEBB8792CDF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
Manifest number: 1497
Signing time: Thu 13 Mar 2025 09:01:41 +0000
Manifest this update: Thu 13 Mar 2025 09:01:41 +0000
Manifest next update: Fri 14 Mar 2025 09:01:41 +0000
Files and hashes: 1: DgGyGbwI_Z-hbBwqBMhZZb6vSwc.roa (hash: YoSjsmqBi7UGbr0YdaEV1pXh33zn8N/CDmlmvP42wg0=)
2: weJGTdbQQjCVFffltk6mXAibRhY.crl (hash: 4B/5G7TOwpo3fZAzwMz0GFSvKUFaDDqKBIrCAusdkjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:bc:ee:5d:e6:4a:4a:94:b3:93:be:bb:87:92:cd:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1e2464dd6d042309515f7e5b64ea65c089b4616
Validity
Not Before: Mar 13 09:01:41 2025 GMT
Not After : Mar 14 09:01:41 2025 GMT
Subject: CN=2da85f6098296eed74fae96ba3073e66a1cd6445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:34:d1:51:ee:46:e5:63:f9:8d:bc:ab:90:ab:
e6:59:c0:6a:a6:05:83:4a:32:b0:d4:34:2d:05:04:
d2:b2:b5:1b:63:62:d1:d8:18:5c:f4:71:ce:82:78:
3b:31:ed:7d:ef:af:2f:e7:86:a8:e0:76:ef:f6:47:
8d:94:c6:62:6b:92:fc:7b:78:dc:14:6c:25:91:ce:
1d:37:fe:18:f6:2b:2b:3d:f6:90:d0:a7:a0:f7:8f:
bc:41:b2:8c:d2:d9:76:80:87:b2:06:73:c6:48:0b:
87:2b:5f:4c:fe:b6:40:ff:d4:b7:72:75:75:cc:b2:
be:31:62:28:5c:bf:30:17:22:b4:6a:33:2d:9d:6f:
f8:ae:73:74:28:42:b6:1b:0c:46:ba:9c:a3:e2:b2:
c2:90:62:2e:6a:e7:5b:3c:3a:95:c5:7a:e2:12:c0:
d7:0c:84:0e:7d:89:9f:90:5b:fb:b0:71:bd:0e:ca:
78:96:08:fe:c0:6c:fd:8a:6b:c2:05:e4:61:42:22:
01:38:1a:b9:18:26:6b:d1:31:9f:48:87:3d:b5:ef:
ae:ef:1f:4d:7b:34:5a:ee:8f:f3:7e:62:8a:7a:9c:
1e:f1:f9:91:d5:16:bd:52:1f:ee:f3:8d:2a:06:c4:
f7:b7:fe:2b:ef:36:9d:77:37:55:35:06:61:13:bf:
bd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A8:5F:60:98:29:6E:ED:74:FA:E9:6B:A3:07:3E:66:A1:CD:64:45
X509v3 Authority Key Identifier:
keyid:C1:E2:46:4D:D6:D0:42:30:95:15:F7:E5:B6:4E:A6:5C:08:9B:46:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:0a:c5:1d:aa:4e:18:dc:ae:03:11:14:43:6b:fa:1f:6b:6e:
52:8f:25:c6:7d:ea:8a:9b:8d:1e:8b:c2:9d:53:b0:12:60:04:
ba:e8:3c:34:85:13:49:03:46:1c:79:ea:cb:9b:93:e2:65:7d:
1e:7e:06:59:cc:a0:9c:3f:0c:11:6c:a8:8b:88:9f:63:7f:fa:
7a:5b:4c:7b:1d:db:62:76:2f:45:1a:71:ff:7c:d9:18:c6:5e:
2f:d1:df:da:8b:68:2d:6b:16:10:c2:18:1f:89:b7:dd:25:bc:
44:d4:af:78:55:89:e1:8f:55:80:b2:34:ae:33:f1:ba:b6:d7:
d4:1f:3e:e4:c9:55:3e:b8:46:50:e1:bf:e8:b6:c8:22:be:a9:
17:13:67:7d:36:b2:c7:8c:ef:46:cc:9f:83:b8:6e:04:6e:12:
c6:c0:6b:dc:61:72:d6:0c:f9:7e:c0:95:9c:05:dc:6e:85:07:
ef:61:1c:c7:f9:3a:7c:32:10:13:9e:43:41:61:4f:b2:5b:30:
3c:91:68:e0:20:fb:8b:d1:eb:1d:dc:74:59:bd:af:96:41:17:
49:5a:79:6d:4d:13:f6:3e:d5:8a:24:25:d4:08:e1:ef:be:de:
c0:e9:de:a1:91:45:79:ec:65:3f:3f:ba:6e:95:8b:83:3d:f2:
6e:0a:87:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:06:54 2025 by rpki-client