Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
File: WdNqIemzaNdIurjHe-vd4sInxsM.mft (raw, json)
Hash identifier: xzrC3J0Mxy/qNgaKNsi0sAhyQx5BtVNFiBQagAcwTJM=
Subject key identifier: 01:6E:F2:D3:58:3F:33:F0:99:ED:8C:87:C5:94:EE:87:39:96:5D:68
Authority key identifier: 59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3
Certificate issuer: /CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
Certificate serial: 019511D99698D19770118489CC5029194F54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
Manifest number: 0631
Signing time: Mon 17 Feb 2025 03:00:27 +0000
Manifest this update: Mon 17 Feb 2025 03:00:27 +0000
Manifest next update: Tue 18 Feb 2025 03:00:27 +0000
Files and hashes: 1: OQOfIBTtC9P7jCN0mN43Fc_lGps.roa (hash: ObKTxdr4K0eIsn14ipiRS5l0MCp4U/+rAHXfJfh0K1g=)
2: WdNqIemzaNdIurjHe-vd4sInxsM.crl (hash: DIJSC2POW/K8DjOtsJ/zPIgPZcIAd+nAGp6pau6oRNM=)
3: is_XEdqOSIZdOdAUliJ38zXn5ZE.roa (hash: +WoDzk7VKcG/lDal047Esdi6HVzF1DiurqrDKoqvrhI=)
4: skXm2fkwzq64ONGiXwLfUYMzOOo.roa (hash: eZX3z+2+p9WFafZJ1Sv1eq5Rzpet45IDFVeaiO++2eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:96:98:d1:97:70:11:84:89:cc:50:29:19:4f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
Validity
Not Before: Feb 17 03:00:27 2025 GMT
Not After : Feb 18 03:00:27 2025 GMT
Subject: CN=016ef2d3583f33f099ed8c87c594ee8739965d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b7:59:06:f0:a6:b7:50:b6:a0:72:28:88:85:
e5:a4:0a:ce:38:9a:f9:77:1b:43:f5:96:60:0b:c3:
68:31:15:da:18:82:5e:1d:62:36:a6:30:e3:64:c1:
4a:d6:1f:86:ca:c0:a7:0e:b8:b4:01:1f:5c:a4:23:
25:2f:a7:c2:39:cd:71:59:b2:19:5a:91:35:55:44:
6a:c0:62:c3:4c:47:65:a7:c9:70:f2:fb:7d:2f:0e:
21:0a:6d:db:ad:15:95:f1:9a:2d:32:d9:80:ce:6d:
d5:c7:a1:7e:87:66:bb:67:86:75:53:22:76:bd:20:
0e:5f:a6:c2:9c:b8:ca:c6:88:57:f6:e6:da:05:80:
92:8a:26:18:0e:be:1a:42:e1:8e:7f:dd:ce:cb:fa:
85:8b:73:a8:22:84:e1:7e:f7:37:bc:ea:06:27:77:
9d:09:8a:b7:bb:56:b5:a8:ba:7d:46:7c:db:22:5a:
5d:d2:8e:72:de:0b:59:74:b8:5c:8e:80:16:10:45:
ad:60:12:71:7f:90:94:db:6c:7a:36:06:d1:5b:64:
8e:d8:fb:4d:bd:14:dc:66:3b:99:89:2e:83:f7:97:
9f:d8:00:43:66:40:67:d3:e1:91:3b:d7:2a:6e:fd:
b5:a0:b0:db:16:2d:82:e4:55:c4:d9:6f:1c:40:1c:
cc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6E:F2:D3:58:3F:33:F0:99:ED:8C:87:C5:94:EE:87:39:96:5D:68
X509v3 Authority Key Identifier:
keyid:59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a5:95:9a:f2:d8:b9:2b:28:62:36:52:91:ea:79:7b:01:12:
ce:64:30:bb:93:b6:ab:2d:8e:07:88:01:f7:25:32:0e:1d:f3:
ed:1d:7a:50:ab:30:96:fa:45:a0:d9:27:a1:2f:ca:09:f2:50:
bb:4b:b8:39:3c:e0:0b:70:f2:f5:0d:d7:cc:f6:c6:21:07:4b:
dc:16:9a:64:09:df:14:8b:03:03:aa:14:f2:5d:8b:9a:c2:7a:
d3:71:f3:6b:3a:9b:b1:89:df:36:5c:c7:e5:a1:06:a9:3e:1a:
74:df:15:8f:71:86:56:28:7c:07:e3:29:a6:55:26:9b:44:53:
d8:af:64:7b:bd:03:61:c2:f5:cc:3a:38:c9:55:2d:fc:c6:52:
89:19:cf:d9:32:06:79:a7:ea:5f:44:cf:9a:76:70:cc:2c:7d:
d3:95:6e:f3:c9:9d:51:9a:a3:73:10:30:08:83:db:ef:60:d3:
a1:27:dc:53:19:40:b6:a4:78:f5:e6:f6:e9:0b:5a:79:af:6e:
42:06:7d:07:c8:ca:5d:d2:89:cb:94:1a:94:4a:86:b3:e3:69:
b0:44:f2:f9:6f:99:69:d8:2a:5a:b7:26:54:20:7e:db:f5:07:
28:ec:5f:b1:52:b8:d4:83:46:c2:64:c3:c0:df:fc:ab:4d:2d:
1c:c3:23:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUR2ZaY0ZdwEYSJzFApGU9UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZDM2YTIxZTliMzY4ZDc0OGJhYjhjNzdiZWJkZGUyYzIy
N2M2YzMwHhcNMjUwMjE3MDMwMDI3WhcNMjUwMjE4MDMwMDI3WjAzMTEwLwYDVQQD
EygwMTZlZjJkMzU4M2YzM2YwOTllZDhjODdjNTk0ZWU4NzM5OTY1ZDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbdZBvCmt1C2oHIoiIXlpArOOJr5
dxtD9ZZgC8NoMRXaGIJeHWI2pjDjZMFK1h+GysCnDri0AR9cpCMlL6fCOc1xWbIZ
WpE1VURqwGLDTEdlp8lw8vt9Lw4hCm3brRWV8ZotMtmAzm3Vx6F+h2a7Z4Z1UyJ2
vSAOX6bCnLjKxohX9ubaBYCSiiYYDr4aQuGOf93Oy/qFi3OoIoThfvc3vOoGJ3ed
CYq3u1a1qLp9RnzbIlpd0o5y3gtZdLhcjoAWEEWtYBJxf5CU22x6NgbRW2SO2PtN
vRTcZjuZiS6D95ef2ABDZkBn0+GRO9cqbv21oLDbFi2C5FXE2W8cQBzMHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFu8tNYPzPwme2Mh8WU7oc5ll1oMB8GA1UdIwQY
MBaAFFnTaiHps2jXSLq4x3vr3eLCJ8bDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2ROcUllbXphTmRJdXJqSGUtdmQ0c0lueHNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS83YTdkYzEtZTE2OC00ZDQ3LWI0NmQt
NDBlYTgwODkyZjAzLzEvV2ROcUllbXphTmRJdXJqSGUtdmQ0c0lueHNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS83YTdkYzEtZTE2OC00ZDQ3LWI0NmQtNDBlYTgwODkyZjAz
LzEvV2ROcUllbXphTmRJdXJqSGUtdmQ0c0lueHNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6WVmvLY
uSsoYjZSkep5ewESzmQwu5O2qy2OB4gB9yUyDh3z7R16UKswlvpFoNknoS/KCfJQ
u0u4OTzgC3Dy9Q3XzPbGIQdL3BaaZAnfFIsDA6oU8l2LmsJ603HzazqbsYnfNlzH
5aEGqT4adN8Vj3GGVih8B+MpplUmm0RT2K9ke70DYcL1zDo4yVUt/MZSiRnP2TIG
eafqX0TPmnZwzCx905Vu88mdUZqjcxAwCIPb72DToSfcUxlAtqR49eb26Qtaea9u
QgZ9B8jKXdKJy5QalEqGs+NpsETy+W+ZadgqWrcmVCB+2/UHKOxfsVK41INGwmTD
wN/8q00tHMMj3A==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:35 2025 by rpki-client