Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
File: W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft (raw, json)
Hash identifier: AOLJWQilRSl8e690Jm5Gq1czsqLDK9wejqO1+e+F+PE=
Subject key identifier: AB:65:8D:33:57:68:E1:AF:D2:BB:9D:07:6D:C3:7B:5E:06:DB:FB:F4
Authority key identifier: 5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
Certificate issuer: /CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
Certificate serial: 0194BA8482D4A59586D625625A37199BC157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 04:00:33 +0000
Manifest this update: Fri 31 Jan 2025 04:00:33 +0000
Manifest next update: Sat 01 Feb 2025 04:00:33 +0000
Files and hashes: 1: D7wvDXUsXUNReHXB-ElMhZdvj4w.roa (hash: YElp4tNhBybnsgMrPzJJrWGgoM31szDQK/CjgNi5G0I=)
2: W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl (hash: hOsjUy3jqDSjezQ4T9BCTDvH6lSo5wCPYZ1aVT6XMWI=)
3: fV4CO55wgQW9hfh18y1_D2jQQS0.roa (hash: zkhm9MY22kTd2LgUoPIq1ls+LADDlKBeCuVAbz9l9VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:82:d4:a5:95:86:d6:25:62:5a:37:19:9b:c1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
Validity
Not Before: Jan 31 04:00:33 2025 GMT
Not After : Feb 1 04:00:33 2025 GMT
Subject: CN=ab658d335768e1afd2bb9d076dc37b5e06dbfbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ba:19:be:62:2d:77:9c:c0:6f:48:f8:f1:50:
ee:6b:af:a8:32:0b:c2:8e:4c:88:45:94:7d:af:9f:
13:e2:58:ba:ef:ce:ed:6b:c8:55:00:3b:3d:3d:9c:
01:84:8d:62:78:6f:c8:6e:6b:1f:92:78:01:6d:69:
0b:06:b5:a4:b5:c4:8e:17:30:d2:4c:6f:69:1d:42:
6d:56:d3:5d:1e:f8:e2:1d:3e:4f:ff:bb:b6:35:c4:
26:a0:7e:50:3c:a5:ef:62:9f:09:d4:bf:2a:b1:70:
10:0d:ea:0a:b7:dc:46:bf:72:5b:a0:55:d7:75:51:
ee:66:ce:66:dc:91:72:14:2b:5f:f0:bd:ec:ad:ee:
b4:bb:b1:a5:70:da:b6:fd:10:23:9b:11:67:f9:41:
32:83:4f:01:bd:97:e1:ef:9c:ce:ac:c3:25:e7:a1:
4b:8f:93:52:50:73:20:15:1b:dd:94:b0:d7:0d:51:
a4:5f:89:cc:ed:d0:95:e5:83:ee:3a:ed:c3:8c:68:
74:71:95:71:0f:94:ce:50:bb:9a:44:b9:22:fc:ae:
95:6b:97:31:86:63:58:b6:27:a6:ab:97:e2:43:6e:
57:b3:b6:21:fa:31:aa:0d:15:71:5c:5c:26:63:31:
61:fc:60:e6:93:e8:2b:9a:e2:72:57:7c:83:cc:85:
39:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:65:8D:33:57:68:E1:AF:D2:BB:9D:07:6D:C3:7B:5E:06:DB:FB:F4
X509v3 Authority Key Identifier:
keyid:5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ab:42:38:c4:2e:d8:74:da:e1:1e:8e:a1:c7:36:98:1c:e2:
3c:70:96:36:41:ee:20:8a:c9:e8:ed:9a:53:d4:3f:4b:de:02:
08:00:86:85:af:cb:98:9c:38:c6:a0:83:1d:1c:a1:fc:71:7b:
58:ad:02:04:f1:4c:4a:0c:bd:1d:d4:c3:05:66:38:ed:6f:60:
92:b8:35:eb:12:f1:47:43:9d:19:36:2e:13:bc:96:7f:41:d7:
d8:47:1a:fc:73:ce:d7:36:b7:ea:bb:72:fb:55:d3:82:69:26:
82:24:b3:c2:9c:aa:db:f6:c6:d1:ff:df:13:a7:58:9c:63:23:
bd:e6:ef:66:c3:46:05:ad:14:88:7a:7b:af:cb:85:6c:4f:e6:
59:6c:1f:70:62:c8:96:57:65:33:68:6d:56:46:e1:ce:94:44:
02:7e:1d:5d:95:ba:86:68:37:7b:a0:df:2b:b3:14:61:61:5b:
ee:1d:28:81:95:72:0b:c9:63:6f:00:64:1b:eb:56:5e:6a:8a:
39:f4:bf:28:c5:ff:6c:87:a3:89:60:7c:fc:76:6b:54:d7:f7:
5c:6b:24:84:6d:49:a8:d4:1e:67:fe:e5:98:f3:77:00:a5:98:
68:f0:bb:5b:1f:3f:bd:50:29:dd:68:98:99:15:48:d8:bc:f1:
61:6a:d1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:41 2025 by rpki-client on console-fra.rpki-client.org