Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
File: wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft (raw, json)
Hash identifier: gAOcWK+DxG2t2t1k681O6vhMQDRZx7kRmq4EiwDfbUc=
Subject key identifier: 0B:2F:49:D4:24:0B:47:4E:C1:94:6B:00:60:F6:ED:FB:14:F8:F5:CE
Authority key identifier: C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
Certificate issuer: /CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Certificate serial: 019511A305198A63B18BD8D99B697D4853E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
Manifest number: 0274
Signing time: Mon 17 Feb 2025 02:00:51 +0000
Manifest this update: Mon 17 Feb 2025 02:00:51 +0000
Manifest next update: Tue 18 Feb 2025 02:00:51 +0000
Files and hashes: 1: jQ35y5JqdtG9WdmH02jLEjnZC4E.roa (hash: FipHH6QD7PJQoRtOLX5VjgWSjY2BOLQCjuClzQsUWi8=)
2: wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl (hash: Jl+8sJ6eQCiJX9jgDozCKjtQu6eREXKkqFsSAvmjZ/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a3:05:19:8a:63:b1:8b:d8:d9:9b:69:7d:48:53:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Validity
Not Before: Feb 17 02:00:51 2025 GMT
Not After : Feb 18 02:00:51 2025 GMT
Subject: CN=0b2f49d4240b474ec1946b0060f6edfb14f8f5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b4:5c:a8:04:c6:74:d4:59:ea:fd:cf:41:4d:
94:fa:82:91:f2:f5:a2:35:f0:9d:07:c6:7b:aa:f2:
45:99:20:83:ab:42:c3:35:60:b7:f4:9a:83:ce:70:
05:71:52:e4:aa:0c:30:15:5c:d8:41:bc:a8:56:29:
ed:b2:dc:36:5a:93:0b:fb:98:3a:2b:d5:55:d9:74:
7f:5e:28:78:07:61:58:32:08:f7:64:30:2d:6e:79:
ef:d8:ff:ab:3b:e8:c7:e3:cc:bb:15:ca:cb:9e:02:
48:b7:9b:21:e3:6b:91:88:f8:84:90:94:db:78:8d:
9a:13:05:d4:a9:2e:79:19:62:00:66:21:e2:9e:97:
f6:1b:68:ec:5c:52:f9:50:0f:e6:4a:7b:d9:dd:34:
db:fa:01:0a:4e:46:e5:c3:4e:f4:2d:82:0d:46:75:
65:fe:95:51:85:30:f1:24:e0:5a:ef:16:da:07:bf:
27:ae:ca:e8:96:9c:20:11:35:f7:cc:b2:07:38:a6:
7a:69:ae:dc:dc:66:f0:2b:49:0b:74:9e:4f:e4:04:
61:e5:10:cc:71:45:5d:a0:6a:33:ee:35:6a:fc:56:
cb:94:a7:5a:18:5e:5d:e7:c7:1b:31:ff:df:d0:24:
fc:59:a3:64:ee:18:d3:c4:c0:cb:05:43:8a:ff:b8:
0f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2F:49:D4:24:0B:47:4E:C1:94:6B:00:60:F6:ED:FB:14:F8:F5:CE
X509v3 Authority Key Identifier:
keyid:C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:07:ac:48:fe:4e:6c:3d:72:05:5b:f3:68:5b:6a:1b:66:03:
fc:3a:9a:a5:40:54:35:77:3a:f7:20:28:85:73:03:c9:09:19:
9a:d9:d2:37:42:e0:b8:51:60:b9:fb:36:0e:a1:eb:a1:63:3d:
12:39:8d:03:44:d0:0e:bd:7b:ad:c5:24:95:7e:f2:9f:15:c3:
54:7d:14:9d:4e:e9:e9:3d:3b:44:ba:34:78:b4:37:08:b4:35:
9d:72:22:db:e3:be:04:06:cb:df:50:ad:31:bf:79:f0:c0:b9:
56:b5:90:13:b9:66:b1:5c:53:68:c0:18:71:bf:05:a5:bf:43:
8c:c0:04:36:ef:7f:5d:ef:66:ae:91:51:2c:e5:fa:a5:a2:71:
71:6a:41:00:a4:34:df:b9:2e:bd:78:cf:d3:0d:83:34:b5:7c:
a3:2c:36:71:5c:d6:04:97:7e:20:3c:47:e4:36:7c:40:49:fc:
2f:a5:30:31:c6:71:15:13:12:68:14:07:d2:b4:d9:d2:ee:33:
ed:92:ac:3b:e1:21:64:c9:3d:17:d5:32:7d:ae:2d:25:f6:dc:
59:e1:14:fb:35:b2:7c:b1:d4:f4:e2:87:d4:c1:0e:c8:35:f0:
4b:45:64:7b:87:31:53:21:9e:78:99:3e:2a:31:ce:c4:67:5e:
1c:90:00:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:10 2025 by rpki-client