Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/a1c15f-8993-478d-a66d-1281823422e8/1/o8_wuehy-XXMo7I7IJEc9nj_9L4.mft
File: o8_wuehy-XXMo7I7IJEc9nj_9L4.mft (raw, json)
Hash identifier: qw3oM6gOTOlYVKAo8GV6lZkJjdcQ50TAF7at/NZy+UU=
Subject key identifier: B4:25:A5:68:21:E6:B2:1D:FB:87:C6:50:70:BA:9D:98:99:AA:21:C7
Authority key identifier: A3:CF:F0:B9:E8:72:F9:75:CC:A3:B2:3B:20:91:1C:F6:78:FF:F4:BE
Certificate issuer: /CN=a3cff0b9e872f975cca3b23b20911cf678fff4be
Certificate serial: 0194C387736F3429DCA79674FF6C7C9273B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8_wuehy-XXMo7I7IJEc9nj_9L4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/a1c15f-8993-478d-a66d-1281823422e8/1/o8_wuehy-XXMo7I7IJEc9nj_9L4.mft
Manifest number: 57
Signing time: Sat 01 Feb 2025 22:00:21 +0000
Manifest this update: Sat 01 Feb 2025 22:00:21 +0000
Manifest next update: Sun 02 Feb 2025 22:00:21 +0000
Files and hashes: 1: U5Sf8EIwweiyj9hzrhIGMqactzI.roa (hash: CZTXsy5CHfC3TM0twqbE3UTsU0jwuA9uX3y0Y/QOrU4=)
2: o8_wuehy-XXMo7I7IJEc9nj_9L4.crl (hash: Y+guv0rZAGHT3z5WBTu74B/9+xzUmeB4r88UXqWHZ5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/a1c15f-8993-478d-a66d-1281823422e8/1/o8_wuehy-XXMo7I7IJEc9nj_9L4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/a1c15f-8993-478d-a66d-1281823422e8/1/o8_wuehy-XXMo7I7IJEc9nj_9L4.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8_wuehy-XXMo7I7IJEc9nj_9L4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:73:6f:34:29:dc:a7:96:74:ff:6c:7c:92:73:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3cff0b9e872f975cca3b23b20911cf678fff4be
Validity
Not Before: Feb 1 22:00:21 2025 GMT
Not After : Feb 2 22:00:21 2025 GMT
Subject: CN=b425a56821e6b21dfb87c65070ba9d9899aa21c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7e:f1:fe:91:16:78:5c:df:bd:ae:3c:ce:95:
69:bb:e7:0b:a7:66:7a:da:54:bb:86:cc:8d:5b:0d:
f8:81:cf:f4:5c:86:51:fc:4e:77:1b:ad:af:70:ea:
aa:4d:c0:8d:0a:c9:8f:1e:16:56:53:ce:88:fe:16:
5f:83:24:06:bd:af:01:54:85:58:c6:ec:41:00:d9:
09:c7:a9:e7:12:0d:e5:59:06:ef:a5:7a:d2:8f:2e:
f7:9d:41:57:1c:85:11:a6:92:bf:0a:dc:00:06:01:
8d:ae:6c:79:9b:d3:db:26:fd:d6:9b:73:da:c1:8c:
90:01:46:c3:f4:01:59:93:12:2c:4f:b7:5c:1e:e8:
ea:c0:12:21:7c:55:10:15:1a:09:76:0f:61:d8:ed:
1a:9a:4d:16:7a:79:50:a0:38:2b:ab:10:ed:01:85:
69:c3:7d:68:c9:a7:21:df:5f:28:6d:0b:e4:77:94:
50:e9:75:e4:94:9c:d2:fa:65:c0:4b:15:20:69:2b:
8d:d3:26:11:df:04:41:e0:b7:11:b9:fd:13:09:3b:
12:f3:fe:cb:85:99:0b:ac:4a:e2:a2:0b:09:ed:2d:
a9:e8:6f:c6:bb:b9:fc:08:e0:14:28:44:db:1e:df:
45:dc:e5:a7:fd:86:23:10:6c:ce:cd:6f:73:ff:6d:
ab:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:25:A5:68:21:E6:B2:1D:FB:87:C6:50:70:BA:9D:98:99:AA:21:C7
X509v3 Authority Key Identifier:
keyid:A3:CF:F0:B9:E8:72:F9:75:CC:A3:B2:3B:20:91:1C:F6:78:FF:F4:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8_wuehy-XXMo7I7IJEc9nj_9L4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/a1c15f-8993-478d-a66d-1281823422e8/1/o8_wuehy-XXMo7I7IJEc9nj_9L4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/a1c15f-8993-478d-a66d-1281823422e8/1/o8_wuehy-XXMo7I7IJEc9nj_9L4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c3:6e:4b:a2:51:0a:bd:31:31:05:e1:19:cb:6f:51:8d:0e:
da:39:fc:9a:ac:67:c6:45:76:21:fe:12:85:d9:be:f3:cd:a7:
e1:1c:dc:67:f2:a7:9d:5f:88:a9:60:a7:8d:3e:42:f6:93:b0:
e5:b1:7b:75:ee:56:39:7d:23:c9:11:bb:a6:9d:32:74:11:1c:
1c:5e:91:04:91:75:23:be:15:d4:c7:d2:73:61:3a:5b:6d:95:
89:75:6c:7b:d8:a5:ee:56:8a:68:d2:06:e1:55:c5:7f:85:6b:
1a:ac:7a:dc:d2:c2:e8:8a:d4:da:18:3b:4a:ea:39:5a:8a:1a:
1a:82:02:aa:dc:bc:bc:00:63:b4:9d:f2:4b:63:98:30:8c:5b:
10:b2:70:4d:a1:29:5e:4c:b1:ed:57:3a:9d:6c:af:94:0f:7e:
8d:6f:f7:38:88:4c:16:05:03:3f:8c:05:3d:88:8e:0f:19:ba:
69:b6:0d:1c:da:48:6e:49:12:65:64:af:04:e9:f3:b6:da:81:
77:6d:e2:b0:49:0f:2f:a0:c6:41:e7:f2:d9:60:3f:9c:8a:91:
bd:30:22:03:27:50:b2:b1:a5:5f:00:b9:73:c7:a0:56:e3:0d:
00:8d:b5:ec:23:15:e4:cf:da:b2:7e:2c:a2:45:7a:1c:6c:8b:
f1:aa:3a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:56:22 2025 by rpki-client