Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
File: woWhR044Yn4wGlUb4076RYKlzzk.mft (raw, json)
Hash identifier: ZUmW1jjom2BqPXqdpLFrsR7yWa1V3DvjagPajYYKI3Y=
Subject key identifier: 6E:FD:6E:3C:B3:58:74:04:86:A4:C8:94:7D:59:71:EE:07:5A:06:FF
Authority key identifier: C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
Certificate issuer: /CN=c285a1474e38627e301a551be34efa4582a5cf39
Certificate serial: 0194BC3C6171150FF614FBB83DAC15054CA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:01:01 +0000
Manifest this update: Fri 31 Jan 2025 12:01:01 +0000
Manifest next update: Sat 01 Feb 2025 12:01:01 +0000
Files and hashes: 1: BVOoOEB4gLobrgdxyI5-9zlLWgE.roa (hash: pTz91HcnSysQwLiCozFtJaXWh/WUZ9JSyAK8aIEd67c=)
2: TKlbM4JoTI14SvlWl9KxKwEmigw.roa (hash: YEHXScxruB3ZAlC0fbNpVAnfjw2qlaMRSrlrmf/M0XY=)
3: woWhR044Yn4wGlUb4076RYKlzzk.crl (hash: tvWUSkI0T2k8hgrYj28y2Y7zOS/poah+ggloSZmlelc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 11:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:61:71:15:0f:f6:14:fb:b8:3d:ac:15:05:4c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c285a1474e38627e301a551be34efa4582a5cf39
Validity
Not Before: Jan 31 12:01:01 2025 GMT
Not After : Feb 1 12:01:01 2025 GMT
Subject: CN=6efd6e3cb358740486a4c8947d5971ee075a06ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e3:e1:eb:30:17:d2:16:52:c5:07:57:f1:dc:
13:a3:dc:a2:62:50:55:0b:74:01:93:37:c2:83:e5:
55:6f:27:1a:ff:1b:27:0a:9c:c1:2c:43:44:17:bf:
84:88:78:e9:f0:35:5d:4f:bc:2b:b5:82:6e:46:15:
8e:ff:6c:e6:36:c2:62:31:34:88:0b:1a:dc:43:00:
88:57:a7:45:3b:b8:66:18:ca:c4:e2:6d:84:88:80:
da:fc:ec:03:29:23:82:23:d5:fb:c4:aa:a1:3b:1f:
91:94:4a:3b:c1:fc:1f:96:ad:45:e3:d7:2d:e6:6e:
cb:bf:d9:78:58:98:c9:e9:ef:7f:19:75:e0:b9:ee:
07:ce:17:d6:85:5c:c9:c7:1f:8b:0d:e8:8a:53:14:
7a:c4:74:69:62:6e:e5:92:d0:fb:64:59:52:4a:cc:
3a:69:6b:7c:b1:3d:2a:a5:c1:80:de:32:06:65:5c:
ec:f6:d4:ac:15:7a:e9:d5:b4:57:ce:d1:76:30:99:
17:a7:be:7d:98:83:b9:93:71:78:3f:da:38:50:89:
84:c1:6e:11:f8:dd:27:9d:8f:d0:d9:7f:b8:b5:51:
1f:08:25:ce:6f:70:f1:b4:86:48:4f:35:4d:e1:ec:
fb:3e:03:d9:15:cd:6a:5b:a4:c0:6e:d7:e9:68:98:
02:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FD:6E:3C:B3:58:74:04:86:A4:C8:94:7D:59:71:EE:07:5A:06:FF
X509v3 Authority Key Identifier:
keyid:C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:09:59:b9:27:e3:e6:40:84:c0:7e:7d:74:32:af:e0:e9:13:
c8:c8:be:1b:6c:89:79:22:71:3c:6f:7b:c8:b3:40:b9:c8:04:
1d:d1:4d:4a:5c:01:e6:b7:78:aa:87:74:97:3f:f1:1b:e0:31:
8b:3f:b3:2d:a2:4a:dd:96:97:cf:ed:ad:59:05:b9:fb:1f:71:
c5:69:9e:ca:14:d2:fd:e2:a9:3f:5d:79:7b:bd:d2:05:79:e9:
2a:30:7d:04:22:dd:81:09:7c:1a:f6:9f:22:af:be:f9:20:dd:
d5:aa:3a:3b:9e:3e:12:22:53:0d:27:ee:e6:d8:5b:06:51:75:
b0:7c:26:20:81:db:64:a4:92:1b:d7:71:f5:46:30:2b:a9:1e:
b9:8b:15:be:a2:c3:05:6f:ac:e4:95:19:e5:14:74:84:dd:09:
1b:0f:e2:ed:57:c1:49:56:09:28:2e:95:25:ad:1c:12:1b:08:
76:2f:39:68:6d:2f:36:30:c8:26:50:96:d3:b1:d9:6a:a7:d8:
6c:54:b2:72:35:8b:61:0c:67:74:32:56:4a:4c:c6:64:6b:39:
9d:cb:a7:4c:4a:72:72:c6:ed:d4:f8:d9:00:be:ee:25:4e:b7:
7c:c8:a7:b2:a1:76:ee:3d:f0:27:28:6d:3d:70:a2:80:fa:f2:
c3:8d:68:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:30 2025 by rpki-client on console-fra.rpki-client.org