Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.mft
File: WOQIyFfH-CX_d7yR7Kf_ySGtTf8.mft (raw, json)
Hash identifier: GlmcCB/vmcLSNdcRoYfw1BpLcDIK4ZNpZBl5sKfYlbk=
Subject key identifier: C2:E4:91:40:D7:EA:76:82:DC:6F:B1:23:8B:A8:B1:B7:86:EF:48:1E
Authority key identifier: 58:E4:08:C8:57:C7:F8:25:FF:77:BC:91:EC:A7:FF:C9:21:AD:4D:FF
Certificate issuer: /CN=58e408c857c7f825ff77bc91eca7ffc921ad4dff
Certificate serial: 0194C46319C9F25075656D6E7552FA8E4A24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.mft
Manifest number: 0844
Signing time: Sun 02 Feb 2025 02:00:16 +0000
Manifest this update: Sun 02 Feb 2025 02:00:16 +0000
Manifest next update: Mon 03 Feb 2025 02:00:16 +0000
Files and hashes: 1: WOQIyFfH-CX_d7yR7Kf_ySGtTf8.crl (hash: wSftCTTAqEDT21Pcak8mmh8Y9yL74YQxkI4EMPduJzo=)
2: eAhR6KTFJDA3HMwbGsQPK0o1VK8.roa (hash: WcYp6g2h67uQd+b5ZXbElPdlPfBrcS5ukz/v0+o3wuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:19:c9:f2:50:75:65:6d:6e:75:52:fa:8e:4a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e408c857c7f825ff77bc91eca7ffc921ad4dff
Validity
Not Before: Feb 2 02:00:16 2025 GMT
Not After : Feb 3 02:00:16 2025 GMT
Subject: CN=c2e49140d7ea7682dc6fb1238ba8b1b786ef481e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a1:f2:01:55:c4:ec:84:4e:40:1b:0a:c7:38:
6a:8e:da:84:21:8e:88:2d:28:ad:56:01:eb:9c:10:
f0:8f:87:dd:83:c2:49:2c:d3:6d:10:c3:99:3f:bb:
7f:16:06:c0:12:6f:ac:b9:59:0d:6a:ab:49:c0:80:
1f:0a:69:b8:7f:d3:67:55:33:d7:a7:01:54:e7:5b:
5a:1f:1d:70:d8:9c:08:74:e4:d1:ca:5b:86:e1:e6:
0c:21:33:78:82:cb:df:ad:42:1d:f1:51:56:2b:49:
4b:0a:10:d9:a8:3f:a9:84:84:f4:61:f1:09:93:59:
3b:9c:cd:c0:70:e7:40:1a:d1:ea:f3:4e:57:5c:5b:
85:85:3b:57:c1:e6:46:7d:29:d4:cf:fe:75:6f:c6:
eb:f1:e7:8d:0c:97:53:b0:e3:d5:98:55:41:b9:60:
02:ff:1e:62:7f:fa:1a:86:55:d9:fb:8a:82:ff:27:
2b:50:b0:81:d1:65:2a:df:ce:bb:d5:b7:9c:13:18:
e3:3f:1c:86:16:29:cc:1f:d4:76:92:8d:c5:a0:b6:
0e:42:81:53:83:55:8c:b3:a3:42:b5:bb:e3:98:cc:
dc:9d:18:74:66:21:57:01:d9:10:5c:53:cd:10:7e:
4d:fc:aa:db:b6:92:d3:a4:65:ff:80:0d:13:36:17:
48:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E4:91:40:D7:EA:76:82:DC:6F:B1:23:8B:A8:B1:B7:86:EF:48:1E
X509v3 Authority Key Identifier:
keyid:58:E4:08:C8:57:C7:F8:25:FF:77:BC:91:EC:A7:FF:C9:21:AD:4D:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:80:87:e8:45:60:04:1b:0f:4c:26:68:08:9d:4e:36:14:ef:
d1:6e:f7:97:04:ca:6a:81:b8:16:fb:0b:79:25:7d:48:f8:51:
04:dd:74:c1:a7:17:ac:e1:03:3e:1b:4b:63:7b:0e:07:38:1f:
68:0b:00:8d:91:83:73:0e:f9:dd:32:90:3a:4f:7f:44:6e:08:
b0:ba:5d:5f:0f:e8:6b:00:4f:1b:0b:2d:4c:df:9a:29:b6:b0:
81:8f:2b:6a:d9:16:cb:ff:7d:fb:2c:0e:d9:75:f0:3e:e5:57:
9b:40:76:3b:d7:bd:f4:43:9b:73:c4:c8:e0:d9:2b:b4:d8:7c:
b0:29:0f:83:54:00:d3:c5:88:a2:37:79:84:2b:01:5f:c2:c6:
f5:1e:49:00:ad:45:ee:45:81:aa:ec:13:89:41:65:2b:a6:7f:
cc:f2:55:e5:97:0c:b2:b4:54:df:0b:1e:fe:8c:b8:58:2c:86:
19:55:bc:c6:38:06:da:6b:0d:3d:f5:79:07:65:4d:50:9f:24:
a6:40:2a:ae:64:08:0a:5e:08:bc:83:8d:56:00:ec:de:b7:6a:
b8:e5:01:98:b8:89:b5:69:0d:95:f3:00:63:ea:83:2e:28:8b:
c6:fa:af:89:91:e5:4b:d9:1d:b2:81:dd:f6:48:f7:39:85:04:
22:ce:30:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:44:29 2025 by rpki-client