Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
File: Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft (raw, json)
Hash identifier: LW5JzCNNxgCXMXRtaluMp3oSDGgecmWKDaNaffusYfg=
Subject key identifier: 8A:40:24:CC:64:62:D1:C9:7C:66:37:20:C7:CE:02:9D:52:63:E5:CD
Authority key identifier: 5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6
Certificate issuer: /CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6
Certificate serial: 0194C38834E11C05F23803B603CBC6F48542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
Manifest number: 1296
Signing time: Sat 01 Feb 2025 22:01:10 +0000
Manifest this update: Sat 01 Feb 2025 22:01:10 +0000
Manifest next update: Sun 02 Feb 2025 22:01:10 +0000
Files and hashes: 1: 9QUsRCAhmLwTzTZMFA3QwgGkN-o.roa (hash: BYkBRt5u6iYa0bSjaJlYJJH3gyP0JFZinNO6dVWDgNQ=)
2: Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl (hash: AfJLODBqQPOUfg5dVJcDOzWZHnTPNopv1NMzhHCx/vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:34:e1:1c:05:f2:38:03:b6:03:cb:c6:f4:85:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6
Validity
Not Before: Feb 1 22:01:10 2025 GMT
Not After : Feb 2 22:01:10 2025 GMT
Subject: CN=8a4024cc6462d1c97c663720c7ce029d5263e5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ce:41:00:73:cb:31:73:df:0f:5c:b4:eb:7c:
6d:95:2a:63:16:0a:c4:0d:09:31:0d:2c:4c:7c:d7:
52:dd:ff:a4:44:c5:7c:a1:a8:da:1f:07:d1:8a:3f:
a9:46:c8:d9:5d:67:6e:ca:56:0f:01:86:ae:89:7b:
9f:e8:16:2b:9a:27:99:c5:de:ec:7e:b4:31:3a:d1:
1c:cc:fb:16:f9:03:aa:fa:5d:3a:03:9f:e8:57:e6:
84:4f:d9:a4:3d:2e:65:b7:49:d7:4e:60:bb:ab:6a:
29:f6:fa:3e:fa:1a:39:98:e0:b7:6b:5d:5e:ba:1a:
3d:e1:00:3e:88:e7:21:36:89:27:f5:5e:0a:6f:da:
b5:d9:21:a1:ea:65:14:3b:db:a5:30:83:e5:1b:b3:
27:57:e5:34:c5:8b:09:4d:28:a0:23:4a:41:13:6f:
3d:64:d3:e5:16:c1:26:96:e0:ef:79:76:90:ef:81:
b1:d5:3f:a9:bb:c4:73:e2:98:af:e0:4a:8e:61:2e:
4d:29:7d:ba:80:c6:4c:f5:7d:0f:28:2a:d7:ee:21:
3d:da:e7:b5:33:bc:ce:86:b7:96:17:f4:3f:ae:a0:
fa:31:c3:39:38:e4:57:50:3e:a6:a4:08:22:94:9b:
8c:43:b8:1b:b9:41:ab:7c:c0:9a:89:05:6b:5f:8d:
11:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:40:24:CC:64:62:D1:C9:7C:66:37:20:C7:CE:02:9D:52:63:E5:CD
X509v3 Authority Key Identifier:
keyid:5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:fe:45:7a:d1:2d:10:51:b8:f2:92:28:a5:16:3c:d6:58:16:
1b:3d:83:c9:3a:d8:10:b7:c3:0a:cd:a2:22:92:fb:69:f5:af:
34:d3:91:fa:e9:54:b9:01:29:00:9d:4f:38:49:e5:71:1f:35:
88:48:48:c1:f2:eb:23:c9:05:8b:50:81:17:46:ef:32:ea:dd:
1d:33:ff:66:0a:2a:3e:e1:bd:cb:79:f5:5b:44:1f:72:bb:39:
71:25:1e:9c:1e:09:c2:cb:e5:00:ea:1b:e8:92:2c:94:6f:f2:
6d:11:14:7e:18:00:c8:97:2b:f0:2f:8d:08:68:af:76:b7:f7:
df:9e:6e:90:76:7b:f4:e5:0b:0d:dc:53:b1:49:f2:f5:08:fd:
ec:87:cc:79:46:98:17:96:db:dd:ea:c7:0c:30:f7:3c:86:f6:
7f:e1:bd:da:76:28:6c:5e:3a:7e:d1:ed:92:3f:37:85:16:d4:
5a:6a:b6:ec:bf:60:cf:03:94:d2:bd:4a:82:df:5e:02:a9:7f:
95:dd:b5:1e:5e:bd:e6:56:f9:75:51:fa:20:1c:ac:3a:d9:86:
e6:93:59:c2:c5:ad:40:2d:20:78:17:24:a1:44:9e:29:01:75:
33:2a:9a:46:27:4d:79:9f:c1:d9:30:ba:d9:0c:6a:1b:d5:1d:
a1:de:3e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:54:34 2025 by rpki-client