Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
File: wd13fOfXCSaMDFWlnADGrqWyGb0.mft (raw, json)
Hash identifier: VC7BiA0dKyBE29INcK9xcZPxfF29/E/ijBgCiGexJwY=
Subject key identifier: D1:AD:44:FA:FA:CC:2C:13:62:78:B6:48:28:E3:FD:D4:0D:91:10:FF
Authority key identifier: C1:DD:77:7C:E7:D7:09:26:8C:0C:55:A5:9C:00:C6:AE:A5:B2:19:BD
Certificate issuer: /CN=c1dd777ce7d709268c0c55a59c00c6aea5b219bd
Certificate serial: 0195116BB8FD2A5BBEA52096A72BB9C2ED2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
Manifest number: 0F44
Signing time: Mon 17 Feb 2025 01:00:27 +0000
Manifest this update: Mon 17 Feb 2025 01:00:27 +0000
Manifest next update: Tue 18 Feb 2025 01:00:27 +0000
Files and hashes: 1: Ex-cB_4h1wPjXU2C6qgnvAowG6s.roa (hash: Pfofg8M1L5a51wZ24aPVDYrdbmmkhLSc6VaiAue9C68=)
2: wd13fOfXCSaMDFWlnADGrqWyGb0.crl (hash: C3a0M4blo8Tmm+DXIK5JJDijFvdesOPnxPRaH+GMumU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:b8:fd:2a:5b:be:a5:20:96:a7:2b:b9:c2:ed:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dd777ce7d709268c0c55a59c00c6aea5b219bd
Validity
Not Before: Feb 17 01:00:27 2025 GMT
Not After : Feb 18 01:00:27 2025 GMT
Subject: CN=d1ad44fafacc2c136278b64828e3fdd40d9110ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:73:1c:7e:85:01:97:c0:9a:76:57:e8:64:68:
c4:9e:10:32:b0:33:59:4d:1c:45:e5:79:31:97:2f:
d1:57:f4:4a:cf:02:86:90:49:cf:01:de:12:c1:de:
44:4a:e6:52:a3:d9:50:40:ba:20:ee:e7:0d:86:88:
a0:ad:36:10:8b:af:06:be:a1:c7:2c:27:4b:65:b7:
9c:4b:c9:b1:d6:af:4e:75:a6:68:82:5e:64:d2:ef:
1e:c0:e7:87:87:74:f6:49:7b:6e:df:f0:40:ba:9d:
61:1e:08:13:1c:06:f4:3e:59:4c:14:cc:f6:f3:66:
c2:0c:ff:08:1a:db:f5:50:35:fb:ac:ea:54:9c:ef:
4f:68:eb:ee:41:64:12:40:39:4e:9f:5f:6d:21:67:
00:e8:30:cd:c7:67:57:3e:45:22:c0:cc:05:df:7e:
08:3c:7d:cf:c4:cd:07:26:df:12:34:c5:1b:61:12:
3a:5c:5c:73:12:41:c5:8b:87:2d:2a:ae:51:8b:2f:
6d:44:4d:75:8c:58:93:19:04:fc:8d:51:0c:8d:17:
79:8a:de:09:b1:c0:5c:bb:f2:df:35:4b:40:a8:fe:
18:f9:bd:7b:38:10:66:c8:44:9b:2f:1a:15:59:c3:
e9:a2:85:fb:c1:be:66:c0:c3:ff:48:55:c3:65:a1:
cd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AD:44:FA:FA:CC:2C:13:62:78:B6:48:28:E3:FD:D4:0D:91:10:FF
X509v3 Authority Key Identifier:
keyid:C1:DD:77:7C:E7:D7:09:26:8C:0C:55:A5:9C:00:C6:AE:A5:B2:19:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ce:77:7f:c1:07:eb:5a:5f:dd:5c:52:76:9d:02:bc:f7:aa:
06:62:c8:25:2a:10:d0:4e:bc:32:3c:e5:66:ea:9b:40:d0:1c:
d8:9a:94:4f:28:c4:4c:7a:bb:c8:85:d5:f2:56:77:11:61:37:
0c:f4:ed:3b:5f:b8:97:78:f8:32:f4:9a:69:a6:ec:5a:8d:2d:
6a:08:97:db:42:b3:03:5c:87:fc:49:ae:74:a3:95:4b:74:1c:
a6:f2:73:59:63:30:fb:8b:e8:14:c3:bf:5e:df:99:74:55:09:
7c:61:02:73:a5:3c:f6:5c:d6:4f:19:e1:3b:49:eb:ea:68:6a:
41:9a:4e:83:1f:a9:c2:7f:f1:ed:5b:fe:2b:e3:8c:ad:a7:89:
77:ba:a0:3f:da:16:6a:0b:a9:79:fc:77:4f:6d:d5:f3:c2:30:
72:d9:5b:ac:15:36:e0:75:05:7f:9a:5d:57:e9:35:bc:54:eb:
83:9a:51:59:1f:67:65:c4:78:39:b5:c0:ec:de:d6:f1:4b:74:
ef:a9:be:cb:a6:f0:bc:c1:e7:fa:91:c8:7b:fe:5f:dd:fa:b1:
e8:e4:3f:31:c0:95:8f:30:5e:45:bc:8c:3e:85:52:00:1c:a1:
f5:8d:b2:29:cc:6f:bf:06:7e:3a:59:99:da:ce:2c:5b:28:45:
d4:e8:d0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:39 2025 by rpki-client