Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft
File: WpObDO0411zGPtUNblznK7tbSxA.mft (raw, json)
Hash identifier: 2SAXiUYHZOZTwzcfsHjdXnQ/3khn2RZcyRPaqA4RcdY=
Subject key identifier: 7E:8B:FD:D2:19:83:31:EE:87:10:A4:F5:4F:10:48:D5:10:2F:27:0E
Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Certificate serial: 0194BB6014A27392606F9B4E5B20FBE9DAC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft
Manifest number: 101C
Signing time: Fri 31 Jan 2025 08:00:23 +0000
Manifest this update: Fri 31 Jan 2025 08:00:23 +0000
Manifest next update: Sat 01 Feb 2025 08:00:23 +0000
Files and hashes: 1: 11dCD_28knpPV-7hcS46kYjhhGo.roa (hash: G83WGRUtYY3zSefbF+E2SJyXjgx9VV9MLKF3KXuZ9b4=)
2: 9T-QhsbRhmrkvdsVLB1PkHcPQAU.roa (hash: +YZGQdKu0ilXXmu/2SQfsBtiwU0k+RevzvRnNOLKKVY=)
3: AaM-pqC2G1Ii-4FRyyYRtfA0Ooo.roa (hash: mQFbvzX+Y9dZrtK2BakuFJ5sm6Ogm235Vho6rN3XTII=)
4: WpObDO0411zGPtUNblznK7tbSxA.crl (hash: AsCOvR2dpstGfSJ7y4oCwXg7DZdaMSfeWMgcB3EY5eA=)
5: cymC3KZ1c7BXQLRy1AilqQI6bpI.roa (hash: mlam5arUK8SsUqk4z5tLdb+v0T8UqDPPoMtwFlKuVc8=)
6: mjXUPjiVNMzLXR-2QHlKUZB-SqY.roa (hash: 9INuss7absNCiBI0T9pOtU1T9XnmEmmFvhdz0TxdOWA=)
7: pUUlfUvQW3bpVWFJSWjtqGtipWk.roa (hash: P7OmQLjENv5CK2lPe0nA9Qd4uSq82B7QZTMLiELa9bY=)
8: qnW51eXl6iLH1UGdnNVD2RBavLQ.roa (hash: ZOPFQSAJtSvVDnecEeTUqA5xZ9agsklGMdIDxOY18U4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:14:a2:73:92:60:6f:9b:4e:5b:20:fb:e9:da:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Validity
Not Before: Jan 31 08:00:23 2025 GMT
Not After : Feb 1 08:00:23 2025 GMT
Subject: CN=7e8bfdd2198331ee8710a4f54f1048d5102f270e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4e:37:9e:f2:3a:90:c0:63:5f:39:b5:5d:22:
03:17:ab:d4:50:d6:9b:77:41:43:da:9b:df:b4:a6:
74:ec:de:b0:a7:10:73:7c:13:10:fe:a6:94:da:cd:
bb:3f:d7:10:7e:fb:28:70:64:bc:b8:8c:85:37:7d:
2e:f8:7e:44:75:95:96:b3:06:5a:3c:9c:d0:5b:a4:
b4:da:d6:5d:c9:b5:30:12:21:d6:65:04:ec:66:3e:
cc:38:9d:36:5c:5b:75:19:2c:e7:69:2d:ab:c0:0a:
02:b6:c0:58:48:40:16:00:1e:b2:8c:a3:02:d6:ba:
8b:37:dd:a9:04:c5:39:76:f6:12:8f:84:e2:53:3d:
e9:ab:55:7e:c5:8c:06:92:04:0b:e1:5e:72:05:11:
9a:b4:60:26:22:fa:55:6f:a8:c1:80:f8:93:43:72:
cd:09:52:b5:92:3d:cb:5e:68:ab:a0:c8:2b:6a:3a:
c5:1e:a0:38:41:b1:0d:81:25:ed:84:df:4d:cc:41:
07:d3:45:f4:c6:36:22:bb:fd:29:42:12:4c:3f:d8:
a6:dc:d9:5a:50:7c:9d:05:7d:48:06:83:07:f9:d8:
68:a0:b3:50:bb:64:9c:66:0e:3b:f9:d5:2d:10:e3:
61:fe:4c:02:b2:96:d1:c2:4a:de:0f:69:94:73:cc:
ce:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8B:FD:D2:19:83:31:EE:87:10:A4:F5:4F:10:48:D5:10:2F:27:0E
X509v3 Authority Key Identifier:
keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:23:a5:45:1d:66:11:99:49:63:94:a6:3b:18:99:ab:7c:d2:
08:ff:5c:06:2e:28:8b:b0:b3:51:71:d0:e7:47:e0:a8:7a:8d:
01:c7:c5:5a:29:1a:1f:87:48:76:a5:01:ed:0a:89:11:d7:75:
47:ed:79:28:8c:bf:2f:eb:7c:af:83:97:d0:3a:47:ea:ea:7d:
0e:a0:ef:12:9d:b7:f1:16:50:3c:13:23:0f:fd:f3:4a:da:0e:
98:46:87:a3:77:e7:a6:2f:6b:00:9d:4a:65:bb:6c:f4:cd:9b:
ac:6c:20:9f:d3:9d:31:e6:01:a8:14:8c:ba:c6:ae:da:f9:a4:
b0:e5:d8:76:3d:b5:f8:26:34:74:b1:6b:74:42:af:1e:26:f8:
28:bc:21:78:31:be:89:6e:83:49:95:ae:e4:51:42:f6:a9:7f:
f2:ae:e5:d2:7c:79:09:48:79:69:81:bd:f7:af:3c:60:8a:9b:
58:78:b9:4c:91:5d:7a:54:47:df:87:ab:f7:23:ab:70:ee:eb:
a5:98:9a:c5:ec:5f:31:a6:5d:eb:b9:26:a8:0d:24:6d:e1:95:
45:d7:93:20:d6:f3:7f:53:c4:42:da:5c:e8:8f:54:ce:e9:b0:
71:60:d0:7d:d5:19:91:36:66:92:d2:14:f0:82:55:39:fe:8e:
ea:a4:48:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:10 2025 by rpki-client on console-fra.rpki-client.org