Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
File: X-WOcyoPcfTwEwLWIWcXO9mxfME.mft (raw, json)
Hash identifier: KOAAjvA2GgZhylokMW1NiHx4pExFigqGxQNaWNpyaro=
Subject key identifier: C8:6D:F5:46:AF:6B:A8:21:57:11:83:70:C6:93:1F:43:A7:45:B1:3D
Authority key identifier: 5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1
Certificate issuer: /CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1
Certificate serial: 0194BA841CCF707FDBED85C25CCB176B1427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
Manifest number: 0EF8
Signing time: Fri 31 Jan 2025 04:00:07 +0000
Manifest this update: Fri 31 Jan 2025 04:00:07 +0000
Manifest next update: Sat 01 Feb 2025 04:00:07 +0000
Files and hashes: 1: X-WOcyoPcfTwEwLWIWcXO9mxfME.crl (hash: dORRtxuT/e4yGV3+WLNTBcy6VupbCzaYAAGGf3Seyd8=)
2: xBWezcOjf0HLBQBmbtDyglq06CU.roa (hash: dlL0ZUaafY/fyT+lFkSao0d0hLl5qFvGU+tiAKR4bcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:1c:cf:70:7f:db:ed:85:c2:5c:cb:17:6b:14:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1
Validity
Not Before: Jan 31 04:00:07 2025 GMT
Not After : Feb 1 04:00:07 2025 GMT
Subject: CN=c86df546af6ba82157118370c6931f43a745b13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:23:45:82:c3:a9:0f:81:88:0c:b7:49:09:1f:
53:d3:b3:79:06:5f:04:fa:f8:41:18:0a:dc:d0:7d:
32:7f:51:15:4a:80:5e:97:72:57:10:ef:a7:30:bd:
e2:f3:8a:8a:2e:86:c6:6a:c1:7e:db:9a:9b:c8:26:
c7:e3:75:29:6d:50:67:e4:50:b8:91:e4:16:64:32:
4e:fc:39:c9:44:e3:b7:14:fa:f3:04:13:2a:ff:d2:
7f:48:e5:69:99:47:46:af:e5:44:b5:da:50:31:ab:
ac:6d:11:e9:59:2a:02:6f:e2:f2:c7:23:a5:3d:b8:
a8:e2:75:cc:7f:73:9b:d4:4f:a7:4f:f2:73:66:94:
b0:da:7d:3f:dd:04:b9:b4:b4:58:e9:96:b9:54:3c:
21:90:9d:ea:a6:bb:91:66:31:63:97:89:59:80:e3:
48:33:5e:ee:7f:c6:c3:89:17:1d:83:6e:88:91:a5:
50:6c:f1:8e:ce:9e:5c:c0:32:d7:b1:93:01:f6:f1:
1d:d2:bd:d1:97:cc:51:05:4d:e1:93:d9:e4:85:be:
95:4a:6f:c2:79:04:7e:eb:33:43:b9:66:49:41:94:
3a:ff:94:a7:56:8c:c2:b1:c5:ac:b9:0e:da:f2:cf:
9d:b6:0c:8b:70:7a:15:8b:ad:58:a9:c9:de:73:7a:
3e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6D:F5:46:AF:6B:A8:21:57:11:83:70:C6:93:1F:43:A7:45:B1:3D
X509v3 Authority Key Identifier:
keyid:5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:3e:b3:18:29:71:a5:a3:71:5c:2d:95:0f:81:e2:0a:64:34:
8d:54:ce:a8:43:e4:7e:d7:57:6b:69:bb:f9:3c:a7:48:17:d6:
7b:61:2a:c1:c1:4f:87:b6:15:d3:28:16:59:70:5c:c1:85:73:
41:7a:e4:62:28:21:f7:e0:c1:b6:eb:26:91:99:6c:77:86:37:
c3:a3:86:18:ab:82:7b:08:c3:e3:e3:66:32:b5:58:85:79:21:
51:b3:5d:65:95:48:10:d5:d9:2b:9f:e6:18:9b:b6:47:df:63:
cd:ae:0a:85:d3:e0:f6:ba:a1:85:8d:a2:67:d9:5e:65:bc:34:
4f:c0:54:61:1a:6c:a4:3b:24:ab:1f:83:70:3a:b7:83:16:95:
cd:7e:34:50:4b:0e:e0:f5:ef:72:84:ff:21:e6:63:8f:02:60:
39:d3:92:30:b8:fb:31:a8:69:bd:0c:79:98:06:cf:4b:34:cb:
82:01:1c:aa:92:d3:cd:9c:2e:0f:1c:78:0f:62:7d:2e:b5:30:
59:23:93:cd:44:59:f1:c5:01:35:e9:42:50:a1:3f:2a:5b:0d:
b7:72:d4:0c:ae:84:fc:92:25:eb:88:24:f8:0c:de:44:11:e3:
60:79:1c:a0:b5:f2:bf:dc:70:21:db:77:49:5f:6a:c7:10:55:
29:2e:96:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:19 2025 by rpki-client on console-fra.rpki-client.org