Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
File: WrK6mr-B1s-AM83N68jfj34iwow.mft (raw, json)
Hash identifier: 7VtPPqyU/16DxgEWh0Nhi/p4koi6a35UPjkHzJ3fULU=
Subject key identifier: CE:A4:76:FE:66:2E:05:37:F9:4E:DE:15:42:3F:33:29:64:A3:44:2F
Authority key identifier: 5A:B2:BA:9A:BF:81:D6:CF:80:33:CD:CD:EB:C8:DF:8F:7E:22:C2:8C
Certificate issuer: /CN=5ab2ba9abf81d6cf8033cdcdebc8df8f7e22c28c
Certificate serial: 0194BAF1F599D63D6E7CCE2C4184CAD3FB42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
Manifest number: D9
Signing time: Fri 31 Jan 2025 06:00:06 +0000
Manifest this update: Fri 31 Jan 2025 06:00:06 +0000
Manifest next update: Sat 01 Feb 2025 06:00:06 +0000
Files and hashes: 1: HfvQGv3fkx8EbAZWjLyDRRI_Z8o.roa (hash: L6g/T7YHsTiEPnLp25ze+rccMiIRyJAPI1nh81w0wDo=)
2: WrK6mr-B1s-AM83N68jfj34iwow.crl (hash: c/tAv00zPsfJ+EIypLBJ9hW4pFJmHBaTpQCjvjSojjE=)
3: x4NMd_GpZKC3wjvt7UJp4kwmNNg.roa (hash: KiYRpe0+Ri1YnwEQ5QKwXeajhvNgmP7QYMIxZrED/ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f1:f5:99:d6:3d:6e:7c:ce:2c:41:84:ca:d3:fb:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ab2ba9abf81d6cf8033cdcdebc8df8f7e22c28c
Validity
Not Before: Jan 31 06:00:06 2025 GMT
Not After : Feb 1 06:00:06 2025 GMT
Subject: CN=cea476fe662e0537f94ede15423f332964a3442f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:90:46:18:34:38:38:c8:e6:48:6a:df:49:26:
d9:cc:43:49:e5:c8:ec:0a:f9:b4:9f:0f:b4:8e:33:
05:c9:dc:f4:29:62:27:17:1d:fd:84:33:d3:9a:b4:
39:c4:43:13:14:b2:ce:07:b0:2b:7b:6d:47:84:3e:
53:14:44:a0:c2:52:e2:24:cc:d5:45:da:f1:e1:fd:
e9:5b:d6:35:d8:54:b2:42:dc:f6:19:72:9c:f3:a4:
c4:53:66:72:0f:94:09:e3:9f:e5:e1:08:7c:54:bc:
94:5a:71:eb:8d:fc:a7:d9:af:16:c5:c6:d9:0f:83:
46:51:d9:f1:86:78:3d:52:d1:2c:50:e1:31:6d:00:
27:7a:99:93:24:b3:fe:b0:00:e5:d0:d3:95:6f:fd:
57:5b:c4:17:42:92:42:20:70:a8:77:32:c2:cc:d4:
15:76:74:4d:43:2b:2b:c9:00:cc:e3:23:3e:be:53:
a8:1e:83:3b:ea:e6:d2:65:23:76:3b:ad:b3:05:a5:
2d:6d:9f:ed:bc:b7:83:a9:47:35:25:46:e9:79:f4:
73:2d:fe:ab:ab:8e:8f:76:01:04:fb:bb:b0:aa:dc:
76:a2:27:2a:d4:8b:6c:b2:7e:5f:6f:e5:32:6b:00:
31:57:6d:48:c9:e2:79:d5:09:e7:25:57:f1:a6:31:
2c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A4:76:FE:66:2E:05:37:F9:4E:DE:15:42:3F:33:29:64:A3:44:2F
X509v3 Authority Key Identifier:
keyid:5A:B2:BA:9A:BF:81:D6:CF:80:33:CD:CD:EB:C8:DF:8F:7E:22:C2:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ff:0a:1a:77:1b:1e:5c:45:c9:75:68:2c:4b:af:57:4d:5a:
6a:98:d2:53:86:5f:36:b6:f5:17:db:df:45:d2:5e:d0:4c:3a:
6b:4f:69:d1:e9:99:16:3b:a0:4c:43:41:d8:78:ee:83:c5:2e:
16:87:e7:d8:69:4d:b4:66:7d:24:9d:b4:bb:33:ba:72:bb:d4:
36:a6:ea:af:9a:4a:e6:5a:ce:21:9a:79:06:4e:66:ba:6d:9e:
0a:f0:52:d8:fa:d4:a8:3a:c0:f3:68:e6:23:a2:82:39:08:c5:
81:f6:80:bb:a1:36:e2:ed:fd:8a:f9:68:5d:2e:ad:9b:31:04:
5d:eb:6f:23:8d:37:a9:20:35:b5:16:89:a0:e9:ec:a9:a1:4e:
e0:19:98:b5:ff:df:56:ab:2d:7a:11:13:e3:42:20:53:51:e5:
52:56:63:90:3c:5e:5c:1d:c7:55:37:44:96:c9:a7:d4:18:8c:
5b:b0:0e:51:0d:9b:ee:7f:82:c1:88:35:1a:23:fc:38:28:ca:
20:8c:b3:b2:ec:6d:f6:69:f2:c6:ef:d3:36:ee:1c:d1:53:1b:
79:15:06:a9:66:89:dc:0e:58:39:6c:41:61:fe:27:1d:6d:57:
d0:aa:e5:9c:4d:41:05:2f:ad:04:6c:b2:8a:85:ef:a4:97:f6:
5c:86:aa:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:06 2025 by rpki-client on console-fra.rpki-client.org