Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
File: leiDWblaOWSub5oM2q4H9Xn5jDU.mft (raw, json)
Hash identifier: jH/WQBDox5ozP8GU1a8dAQh1VjDsWA/wuLJE1v684QI=
Subject key identifier: 79:10:67:25:4B:1A:EB:9F:E5:37:C9:D9:0D:0D:D6:A3:97:6D:1B:52
Authority key identifier: 95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35
Certificate issuer: /CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
Certificate serial: 0194C3F582E218AF20503768734000AF5EAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
Manifest number: 01F0
Signing time: Sun 02 Feb 2025 00:00:34 +0000
Manifest this update: Sun 02 Feb 2025 00:00:34 +0000
Manifest next update: Mon 03 Feb 2025 00:00:34 +0000
Files and hashes: 1: leiDWblaOWSub5oM2q4H9Xn5jDU.crl (hash: tXSrFkIAE84Tg2EZgAdVE5ibtKnj7nlJdzd6C7dJTe4=)
2: pe1o9e3jWHQk95p2Ei_dXirE0kc.roa (hash: 7nIBr99cFeZBlfuF7+XYt3ntEwToRh90vxok7wcdM9Q=)
3: rzPMwtKJbrfVAK2tZQ7ho2lMTko.roa (hash: 6lSfgp9VWZJODBNAF2r5pCybLvr4sFR9bMz2OJU8t8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:82:e2:18:af:20:50:37:68:73:40:00:af:5e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
Validity
Not Before: Feb 2 00:00:34 2025 GMT
Not After : Feb 3 00:00:34 2025 GMT
Subject: CN=791067254b1aeb9fe537c9d90d0dd6a3976d1b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a2:6e:f6:16:6f:bd:54:9a:b5:af:c2:f5:cf:
ed:80:9b:d6:03:c1:bc:48:82:0b:ad:05:60:85:95:
ab:c8:c7:8b:bd:1d:20:25:7c:41:90:9f:5c:a9:13:
02:35:b5:ab:e7:a5:4e:c6:54:c5:e9:9e:7a:ca:17:
3e:fa:1f:d0:39:96:8f:87:b8:f3:3b:69:75:c4:2f:
ca:5e:2d:81:55:50:68:38:d2:ba:ca:59:2c:a4:0c:
6f:fd:c2:dc:34:38:45:77:a3:ab:58:bc:6b:27:df:
e1:e7:c7:f5:c8:ba:13:f9:c1:36:1f:87:da:c6:03:
57:bb:da:fe:57:0e:ea:60:b7:23:fb:c0:22:ae:a0:
43:b4:99:19:f0:25:76:ff:94:51:d3:08:65:2b:a0:
cd:92:d5:11:41:ac:23:e3:5b:98:f0:bf:05:5f:2d:
98:8a:31:08:3b:16:49:09:a3:42:80:47:4a:12:ea:
73:2f:b1:47:72:ac:9f:7a:d8:db:86:82:c6:01:df:
15:53:11:7a:da:fe:59:41:4a:ab:e1:2e:2b:69:09:
a2:e1:ee:e9:00:cd:18:96:b7:30:d7:1d:bd:fb:80:
ef:0a:eb:22:6d:3d:25:31:cc:ec:1d:d9:c4:7d:b4:
ac:98:f4:17:cb:c2:28:4c:c3:ac:da:a2:d8:fd:6f:
68:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:10:67:25:4B:1A:EB:9F:E5:37:C9:D9:0D:0D:D6:A3:97:6D:1B:52
X509v3 Authority Key Identifier:
keyid:95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:59:58:a2:76:02:94:23:63:23:9b:53:48:ed:e9:d4:80:13:
86:c7:7e:39:32:a4:67:27:b8:25:bc:2d:51:dd:98:93:86:77:
51:61:af:23:48:c3:00:90:7e:f7:2b:98:ca:f8:71:4e:6d:c6:
d7:ef:c5:d5:0f:95:f1:2f:2b:4c:7b:c4:70:3a:33:e2:63:5c:
57:41:e4:91:f2:85:46:f5:23:e9:34:52:a5:7a:4c:ae:e4:16:
80:f5:40:cc:e2:67:f5:2c:b8:a8:51:c6:6f:60:f6:cb:c2:e7:
75:ca:31:5c:2d:d2:d6:7c:14:e4:09:73:1e:ae:d7:7f:62:f3:
b0:45:4f:10:ad:e9:a3:72:02:2f:7c:26:b5:e6:88:2a:0a:08:
3d:0e:58:92:eb:28:1f:9b:f5:da:76:7a:45:84:96:b6:46:39:
a5:fc:35:c2:d9:a9:e1:6d:ff:67:17:eb:62:d6:9d:6e:95:c9:
94:5b:e7:b7:92:a7:a2:74:85:71:54:e9:30:21:c0:88:2d:0f:
35:57:a5:d3:a0:e7:cb:46:ca:02:ec:ec:1d:69:d6:9c:12:97:
c9:07:b1:65:b9:eb:3a:84:3b:10:ea:2b:79:c1:bc:7d:2a:ce:
4f:e1:fe:8f:5b:ed:fa:50:a9:26:6f:08:47:88:66:a3:48:83:
a8:b7:1d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:19 2025 by rpki-client