Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft
File: w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft (raw, json)
Hash identifier: lzzR/CwhpbZnbMDafujufbhPImQiI4cuJZiZSyFZh08=
Subject key identifier: 16:16:3E:FC:95:47:06:00:D9:7C:4B:02:48:67:ED:CA:79:69:93:D4
Authority key identifier: C3:B3:96:2A:EE:4E:8A:E4:C6:CC:D8:97:9E:53:98:02:EA:0E:4C:E7
Certificate issuer: /CN=c3b3962aee4e8ae4c6ccd8979e539802ea0e4ce7
Certificate serial: 0194C42C39A278AE74F93DBFE2EDB61D7587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft
Manifest number: 0A0B
Signing time: Sun 02 Feb 2025 01:00:20 +0000
Manifest this update: Sun 02 Feb 2025 01:00:20 +0000
Manifest next update: Mon 03 Feb 2025 01:00:20 +0000
Files and hashes: 1: fZsTaHsMiRTOQx_qTx-PLjSdXVE.roa (hash: 7tvMPnX4kI566+vmNqApn9A48bhDZNJ8LvI46Pf6Yd0=)
2: w7OWKu5OiuTGzNiXnlOYAuoOTOc.crl (hash: KmnBF889tMOnuIcxIDeqh19Snybi8GjNdXAMzHdFO2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:39:a2:78:ae:74:f9:3d:bf:e2:ed:b6:1d:75:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b3962aee4e8ae4c6ccd8979e539802ea0e4ce7
Validity
Not Before: Feb 2 01:00:20 2025 GMT
Not After : Feb 3 01:00:20 2025 GMT
Subject: CN=16163efc95470600d97c4b024867edca796993d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5b:ef:c1:0a:ac:67:1b:70:a7:9f:f8:f1:de:
fc:1c:f5:dc:e7:56:bb:6f:df:7d:8d:d4:1d:9c:5a:
98:87:0c:b7:df:f1:54:24:7f:25:42:82:61:fa:a9:
a5:4a:c6:41:a7:ca:49:c3:1a:56:59:0f:70:5e:63:
86:fe:32:e6:7a:13:d5:ea:b0:d0:d0:73:58:cd:98:
1f:fe:9d:52:dd:fe:c8:02:bf:fa:ad:e1:60:7b:80:
a5:72:7a:ed:81:28:c7:e2:87:8d:81:f0:0c:16:bb:
a4:bc:db:84:9a:db:39:3f:a7:8c:bd:06:60:ab:5f:
c8:8a:01:56:1b:81:ac:ac:c4:de:1b:a2:72:31:cc:
d9:4f:a0:33:be:a1:2b:c9:09:16:f2:15:c2:4f:ab:
2f:c7:7b:36:40:ff:62:52:fc:95:ca:63:b6:34:2a:
22:02:b7:78:b0:86:ee:a7:e0:88:0c:bf:45:6e:6b:
4e:fe:82:0a:4f:85:85:b8:ce:0b:0a:18:6c:95:22:
20:5f:06:a3:dc:ca:12:84:52:19:c0:c6:af:dc:c1:
26:f2:87:9e:e5:2d:ab:a2:b2:7c:e9:bb:34:47:a1:
81:51:b6:53:27:8e:3f:40:50:91:e5:f7:d2:18:a3:
0f:ce:7a:a2:03:09:e8:db:e2:06:fc:36:b1:4a:54:
0a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:16:3E:FC:95:47:06:00:D9:7C:4B:02:48:67:ED:CA:79:69:93:D4
X509v3 Authority Key Identifier:
keyid:C3:B3:96:2A:EE:4E:8A:E4:C6:CC:D8:97:9E:53:98:02:EA:0E:4C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:0b:5a:02:ea:6d:4b:ff:98:41:b6:29:70:5a:29:51:ab:88:
29:d8:90:52:cd:ac:a0:26:c0:ad:dc:f1:00:c1:3e:40:c4:fe:
99:f9:79:07:db:c4:1f:e1:7d:22:d7:08:2c:e5:21:32:d1:ad:
14:47:c4:89:b6:5f:75:7b:0b:4d:72:6d:fa:7d:8d:b8:07:1c:
bf:7b:d2:c1:25:c9:59:43:24:3e:0f:36:9b:ae:0f:7e:d4:44:
f3:57:c7:66:4a:94:00:13:59:d1:c5:de:a7:f4:d6:62:48:f4:
80:1b:36:bf:55:b3:4c:77:c8:91:9e:8b:a3:5a:60:d8:72:a5:
f4:47:ed:29:32:0e:2a:2f:9a:bb:d1:4f:f9:37:85:7c:56:01:
c0:9f:d9:e6:46:81:2d:44:2c:47:54:d2:e2:ee:94:d4:b9:58:
26:c2:8b:d0:41:ad:bf:b1:47:98:dc:b0:1e:b0:0e:ff:e0:22:
5c:0b:ed:b3:e7:4c:81:0a:26:54:bd:a9:11:6a:5d:64:c3:57:
45:80:45:2f:62:ca:61:30:99:9e:9b:4e:76:80:4d:5c:0e:61:
db:75:69:95:b8:aa:60:73:f8:45:bd:23:27:f8:d6:48:7c:f4:
57:42:6b:b2:44:a9:03:bc:24:bc:65:f1:9c:0d:8b:73:49:c4:
18:af:eb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:56:33 2025 by rpki-client