Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
File: W7XwXxK1IHaGju_NFK_OwZL-LPI.mft (raw, json)
Hash identifier: nPvbioLYrWM3zvP1gVq9lypBZm/rVuqL3l9O2maa7yg=
Subject key identifier: 88:58:CC:09:7E:B0:8C:47:80:18:5F:A5:DB:29:98:86:1C:06:7A:9D
Authority key identifier: 5B:B5:F0:5F:12:B5:20:76:86:8E:EF:CD:14:AF:CE:C1:92:FE:2C:F2
Certificate issuer: /CN=5bb5f05f12b52076868eefcd14afcec192fe2cf2
Certificate serial: 0194C463AC76462CD1218AF22E524FB85B76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W7XwXxK1IHaGju_NFK_OwZL-LPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
Manifest number: 142E
Signing time: Sun 02 Feb 2025 02:00:54 +0000
Manifest this update: Sun 02 Feb 2025 02:00:54 +0000
Manifest next update: Mon 03 Feb 2025 02:00:54 +0000
Files and hashes: 1: QZDKvK6iw_tPh27glx9LTGGHSYU.roa (hash: XgdxnkBVQi+6Pi+BDAfBhOhlkd5fb/2ukIHoQx2+z08=)
2: W7XwXxK1IHaGju_NFK_OwZL-LPI.crl (hash: fyvwQj3Bg96Tji6+dakFdMz1kiYxAtSTgqSuN2f0Tbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/W7XwXxK1IHaGju_NFK_OwZL-LPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:ac:76:46:2c:d1:21:8a:f2:2e:52:4f:b8:5b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bb5f05f12b52076868eefcd14afcec192fe2cf2
Validity
Not Before: Feb 2 02:00:54 2025 GMT
Not After : Feb 3 02:00:54 2025 GMT
Subject: CN=8858cc097eb08c4780185fa5db2998861c067a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:58:44:93:69:e4:e4:e8:ef:ac:fd:c9:4e:b9:
c3:fd:f7:1f:4d:bd:53:9b:e8:5b:99:85:05:54:8c:
0a:9e:d8:2d:f4:7c:d8:28:2d:95:9d:b1:27:c3:56:
47:ef:3e:9d:f0:2c:6b:a8:a2:7d:d4:06:4e:b9:01:
47:29:c4:0e:38:bf:0d:bd:b7:2d:ea:4e:10:57:e7:
96:40:e7:8c:00:ca:11:e2:ae:b7:f7:db:46:36:d0:
07:05:32:79:34:9a:cf:3f:21:2f:3b:f1:24:02:0b:
ae:0a:f4:4b:4b:e1:73:47:0b:27:1d:78:9b:99:25:
78:c7:7f:91:d0:44:c2:f4:e2:c5:03:51:a0:be:63:
15:5e:85:0e:8f:e0:e6:d5:e0:e6:66:53:9f:a5:f5:
16:a0:9a:50:8a:35:38:1c:47:60:e2:a4:70:e9:b1:
96:15:b8:7e:b7:d5:e9:04:c5:5e:e0:1a:ee:2a:53:
a9:30:3a:1c:e4:82:c9:86:59:99:d2:06:ea:f5:21:
4f:a2:a5:9e:af:d8:aa:01:c1:fe:4a:2a:90:d7:6c:
db:e7:94:32:57:d3:58:77:b1:31:6f:f5:66:77:8a:
22:90:6e:19:31:67:95:dd:60:bd:9c:c0:84:dd:c8:
e2:6e:23:ff:c1:dd:a1:ba:e8:9a:56:9a:3a:e3:15:
96:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:58:CC:09:7E:B0:8C:47:80:18:5F:A5:DB:29:98:86:1C:06:7A:9D
X509v3 Authority Key Identifier:
keyid:5B:B5:F0:5F:12:B5:20:76:86:8E:EF:CD:14:AF:CE:C1:92:FE:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7XwXxK1IHaGju_NFK_OwZL-LPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:39:52:56:eb:84:83:0a:68:a8:cd:96:af:3c:58:2a:e0:c6:
4d:58:77:a2:97:bd:7c:0b:25:fe:0d:5f:48:97:28:a7:00:e6:
44:77:f5:d1:d5:f4:a0:11:8a:1d:32:d5:ab:60:6b:81:71:03:
13:9b:22:8a:37:a9:76:d6:ce:e1:4d:d7:34:68:59:53:88:85:
05:60:00:c0:87:8a:26:3c:9a:b2:e3:1e:9c:21:5b:ed:3d:2e:
c3:d8:04:41:c6:d2:8d:ee:76:50:53:8a:b1:e5:b1:46:8c:14:
d1:3d:12:38:69:b3:19:95:ab:ca:08:9f:23:9f:78:cb:4a:c7:
02:37:2d:a5:cc:02:98:47:ed:9b:d5:ec:95:c8:b7:89:6e:84:
a5:42:3a:16:ee:24:e3:b6:e0:f7:61:7f:30:c1:09:f6:1b:e8:
fe:e1:2f:c9:9e:3c:de:f0:d1:78:17:f2:7c:15:e8:99:28:43:
2a:05:48:c5:40:b4:72:11:cb:02:aa:21:db:62:cb:37:cc:7b:
77:39:b9:7a:9b:bb:f5:63:f3:ff:96:c4:f7:7a:37:65:14:bb:
ab:7e:6b:9d:bc:f1:1c:87:a3:e4:ee:a2:19:77:e1:82:c0:d3:
e2:13:4c:56:79:7d:7a:d6:b2:55:40:dc:10:c8:c8:ee:d7:36:
f0:74:31:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:56:31 2025 by rpki-client