Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
File: w4yh1BjCGOJveVGBqeO7e3nURD8.mft (raw, json)
Hash identifier: GdLrnlUVS3H8v6VyNKDjrTndvTjoRpQa3yn8Ci2iqho=
Subject key identifier: A9:A5:76:40:3C:54:42:CB:3B:74:79:88:12:CA:2F:50:47:F2:6B:A0
Authority key identifier: C3:8C:A1:D4:18:C2:18:E2:6F:79:51:81:A9:E3:BB:7B:79:D4:44:3F
Certificate issuer: /CN=c38ca1d418c218e26f795181a9e3bb7b79d4443f
Certificate serial: 0194BB975CF3228A99EDE19ED4DA380CEC53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 09:00:46 +0000
Manifest this update: Fri 31 Jan 2025 09:00:46 +0000
Manifest next update: Sat 01 Feb 2025 09:00:46 +0000
Files and hashes: 1: HtKtiVg-0zn3K5n3LScDDg1_p88.roa (hash: to3WuOq+FMznKALAAApfBe9RQEcWrRQ420WrsW7wdUU=)
2: w4yh1BjCGOJveVGBqeO7e3nURD8.crl (hash: un0Yk3pAvzV00vRfLIhb1ssZwAFg6HwRpoCNRkTYnwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:5c:f3:22:8a:99:ed:e1:9e:d4:da:38:0c:ec:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38ca1d418c218e26f795181a9e3bb7b79d4443f
Validity
Not Before: Jan 31 09:00:46 2025 GMT
Not After : Feb 1 09:00:46 2025 GMT
Subject: CN=a9a576403c5442cb3b74798812ca2f5047f26ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:41:68:1d:5b:37:92:bb:9f:79:4b:73:94:10:
8c:ef:bf:59:1b:ff:b0:ff:92:02:e8:32:b0:e4:54:
b8:b0:be:b8:24:a7:22:bb:10:40:a1:a8:61:79:18:
f8:e1:2b:1e:de:77:d0:45:f3:b0:02:9c:1b:35:57:
7d:3e:22:90:83:a2:7d:a0:53:dd:f8:d8:9b:5d:92:
b1:ce:64:7b:9f:36:00:84:2f:df:24:d2:b7:cd:00:
b3:de:90:f2:3d:26:06:a8:92:5d:9d:f3:ba:fe:81:
e5:34:e8:d7:7d:a4:f3:0e:57:9e:94:7a:ec:24:11:
1c:89:36:0a:5d:79:e9:91:29:d6:fa:74:13:45:4c:
00:a0:e8:16:be:59:08:e7:bf:60:94:3a:88:ed:73:
9e:65:95:f4:22:67:c8:44:3a:8f:eb:37:6f:3d:cc:
32:ab:dc:3c:57:31:3f:ad:c8:6e:0d:f2:8f:ec:e3:
e9:28:95:33:3c:bb:35:d2:84:9c:ce:b2:f5:b1:2d:
04:28:df:ab:45:16:65:a9:14:cb:40:e6:af:d1:ac:
8a:df:5e:9a:8f:85:8c:c9:23:7f:10:5c:d6:2c:a1:
56:93:24:86:73:e6:51:da:21:35:a6:5c:00:17:6d:
45:bb:77:7f:32:9a:9e:d4:b4:73:70:c4:dc:76:dc:
70:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A5:76:40:3C:54:42:CB:3B:74:79:88:12:CA:2F:50:47:F2:6B:A0
X509v3 Authority Key Identifier:
keyid:C3:8C:A1:D4:18:C2:18:E2:6F:79:51:81:A9:E3:BB:7B:79:D4:44:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:1a:02:6c:2c:3d:6e:12:cd:56:00:ab:4b:fe:1b:64:e3:f9:
8c:47:72:a0:88:aa:db:af:b8:fe:4b:29:8c:a4:f4:66:61:05:
c3:1d:78:dd:84:26:e9:cf:96:eb:ea:2f:8c:04:7e:69:da:ad:
92:0f:84:18:c0:ad:61:6f:14:cf:37:c2:a2:a3:03:f4:fd:42:
e4:87:c3:b5:e6:a4:d9:63:f3:cc:c9:ca:13:5b:c7:23:72:83:
d1:40:e5:bb:d1:13:c0:d3:7e:f0:6a:49:0e:cf:18:01:2e:a1:
cb:de:42:8f:e6:f1:41:b0:cf:80:67:32:c3:dd:0d:d0:4e:0e:
87:0f:1e:c6:da:71:08:d9:4f:83:21:24:ce:67:df:78:da:db:
e0:15:b7:19:57:9e:d4:55:4e:28:24:2c:d8:93:c7:32:87:57:
fd:9c:06:90:84:ae:18:3d:a1:d9:37:e2:b5:cd:59:06:f2:58:
65:b6:4f:4e:01:c9:05:73:ba:99:87:de:5a:14:8f:9b:c7:11:
70:ce:f9:09:76:69:0b:27:d6:fe:62:fe:fa:67:d5:ac:71:a1:
38:1e:e2:a5:dc:85:76:e7:bc:31:45:a1:59:87:a2:e1:b6:40:
7e:ea:de:92:81:ca:39:15:5d:7e:33:6c:14:26:3b:ce:37:ba:
1f:89:dc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:16 2025 by rpki-client on console-fra.rpki-client.org