Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft
File: wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft (raw, json)
Hash identifier: X+QyT5j3E3pgXoxUdFAwV2txKMERdo/HKY9Xzetofz8=
Subject key identifier: 01:D4:80:CC:70:55:0F:F7:2E:6D:6C:28:F5:0B:BA:8D:AE:B0:84:0C
Authority key identifier: C1:49:7B:4E:FD:B8:BC:CA:54:60:D1:89:D7:61:8F:6B:8A:C6:8B:09
Certificate issuer: /CN=c1497b4efdb8bcca5460d189d7618f6b8ac68b09
Certificate serial: 0194C387CC82567AC94F8A53267F28EE5ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft
Manifest number: 95
Signing time: Sat 01 Feb 2025 22:00:44 +0000
Manifest this update: Sat 01 Feb 2025 22:00:44 +0000
Manifest next update: Sun 02 Feb 2025 22:00:44 +0000
Files and hashes: 1: neX2MoGsrH8B_YW8P6u0bRQHpTA.roa (hash: R0pBtoL7OVYDCk4RiVwa4ZDNGgYBxm8WfoJ2QgcKQh0=)
2: wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl (hash: 6iD9WjmxEbu4n2WU5nUZAmB/soLz2j/3+KMa5PGEGxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:cc:82:56:7a:c9:4f:8a:53:26:7f:28:ee:5a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1497b4efdb8bcca5460d189d7618f6b8ac68b09
Validity
Not Before: Feb 1 22:00:44 2025 GMT
Not After : Feb 2 22:00:44 2025 GMT
Subject: CN=01d480cc70550ff72e6d6c28f50bba8daeb0840c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:77:ac:48:22:cd:17:14:aa:86:24:be:b4:dc:
be:5d:89:74:95:5a:a3:0b:63:0a:ba:c8:40:ca:58:
83:e4:7c:55:41:7b:56:59:d6:9a:23:e0:30:21:ea:
c5:18:4e:69:59:b2:a7:24:36:51:3c:b6:3f:c6:65:
89:18:d8:d2:7b:a5:0f:7e:dd:c4:41:c2:11:e1:dd:
7c:3a:c9:fc:30:67:a7:22:f5:51:e9:4e:08:cb:61:
05:fe:fc:59:36:40:b6:15:37:0a:0f:ae:5c:02:22:
25:c4:0e:3c:3a:d6:22:89:1d:63:35:c4:c2:b3:9c:
e4:95:0b:87:50:8c:92:c4:bb:a5:a2:7d:dc:d7:30:
69:cf:a6:f9:c1:9d:92:6a:5e:7f:2d:81:ea:b4:98:
7f:29:75:4a:83:71:2e:c8:29:82:de:a5:77:5b:12:
8c:7d:cc:8b:99:97:f1:a1:6e:7e:08:68:7c:db:bb:
02:70:1f:a9:db:9d:ca:5b:c4:ab:42:d5:66:e9:54:
69:3f:b5:85:96:b7:0e:a6:0d:06:3f:4c:67:31:61:
e7:c5:98:c7:4c:b7:72:45:61:28:bc:23:e5:ae:7a:
6a:32:69:ff:a0:1d:92:b2:4c:5d:c0:43:27:cb:97:
6c:74:bf:66:96:10:07:22:3f:80:bf:70:af:3d:f9:
64:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D4:80:CC:70:55:0F:F7:2E:6D:6C:28:F5:0B:BA:8D:AE:B0:84:0C
X509v3 Authority Key Identifier:
keyid:C1:49:7B:4E:FD:B8:BC:CA:54:60:D1:89:D7:61:8F:6B:8A:C6:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:47:a4:8c:04:2c:5b:5f:be:5a:12:75:da:65:5b:e9:ab:09:
19:ef:e4:ec:ea:57:68:66:0b:a3:25:0d:96:d7:58:f7:82:19:
d0:48:2b:e7:de:5f:4d:b0:19:c3:41:92:95:66:84:80:3f:44:
2e:ae:e5:5a:00:87:98:af:fa:b6:27:1a:53:e8:1b:56:92:bf:
22:01:e1:e3:1b:6a:20:cd:2d:26:28:b2:c9:75:35:af:87:05:
94:0d:e6:7d:29:7b:03:b4:d0:3e:34:3d:d7:5a:1b:ed:64:fc:
cc:b9:d6:4e:b4:c5:ac:5c:75:a2:54:5e:73:54:33:50:a3:af:
f5:e4:8e:32:33:3a:29:a6:86:64:27:d7:80:cd:7a:b1:af:16:
72:21:a4:df:e0:01:c8:4b:27:04:7f:16:0b:d2:3e:48:0a:22:
25:3d:9b:92:2d:86:ce:6d:b4:ca:7f:5e:68:8c:c2:c8:b9:44:
54:c9:02:24:b4:cd:f8:a0:8e:ea:25:a9:bd:29:d2:d0:9b:be:
5f:2c:e2:5e:5f:28:5a:88:c8:e0:1e:a9:05:00:4c:db:55:97:
c3:4a:e1:f2:ab:d8:6f:10:1e:63:92:13:55:95:43:52:11:e1:
e4:5a:95:73:d0:f0:c9:71:1d:8d:f6:dc:c3:3d:79:37:56:c7:
f9:e6:6f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:55:05 2025 by rpki-client