Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
File: rw3BKw8bUz2NBOxhF9a55RL8qp8.mft (raw, json)
Hash identifier: a0MbzyWWq/QgDKWRIruwXWxZQUJikLV9owjvbSV7jZg=
Subject key identifier: FD:0A:B8:FE:4B:AF:1E:AC:69:B4:72:8B:D0:70:97:EC:9C:88:22:D7
Authority key identifier: AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
Certificate issuer: /CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Certificate serial: 0194BA84656E00BE133C91ECBF4FD565B8A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
Manifest number: 11D4
Signing time: Fri 31 Jan 2025 04:00:26 +0000
Manifest this update: Fri 31 Jan 2025 04:00:26 +0000
Manifest next update: Sat 01 Feb 2025 04:00:26 +0000
Files and hashes: 1: IPW3rYP7oE9P_ES0-kMgln06Sio.roa (hash: 9eLRN0ajqZHckDjlFErwwqTneM3/U1IZfbIXWVVHKRk=)
2: S11P7YKPNs_v7YdolA0FgB6j23E.roa (hash: TBKKGcG+I3pRwCi4L7A30ry5+YnjawyAWGjuVum7Pns=)
3: rw3BKw8bUz2NBOxhF9a55RL8qp8.crl (hash: xAG32kkc+HoJf8+SJhj3LzKiikQbbQ2/50ipzmOZjv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:65:6e:00:be:13:3c:91:ec:bf:4f:d5:65:b8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Validity
Not Before: Jan 31 04:00:26 2025 GMT
Not After : Feb 1 04:00:26 2025 GMT
Subject: CN=fd0ab8fe4baf1eac69b4728bd07097ec9c8822d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:07:61:fc:e0:df:75:02:d7:6f:eb:11:32:39:
5a:a1:e2:5f:6b:58:c1:7f:0d:5e:1a:84:fe:03:33:
2b:5a:9a:60:6f:bf:07:f9:8f:1e:a1:af:1e:39:12:
3f:fa:71:30:a7:3e:f4:74:31:40:61:e1:1e:be:cf:
91:b1:72:19:53:b4:9c:6e:5a:74:15:f8:1e:4a:99:
36:06:34:ba:c9:65:b0:ff:52:6e:c0:72:c9:ec:bc:
d2:f3:0c:04:f6:9d:8c:16:ac:cd:fe:b4:74:58:61:
be:f9:ea:96:c7:e0:56:b9:55:5e:bc:81:b0:3e:a9:
39:f9:9b:57:7b:31:da:b6:a6:8a:9c:0e:5a:c5:1f:
d8:44:70:9b:34:81:8d:a2:e9:86:46:7c:b8:fe:f6:
fe:b6:56:85:c9:3b:20:a3:2b:ca:b2:df:b7:d7:32:
3b:bd:a2:1d:c7:42:61:8a:d4:57:82:62:5a:1d:52:
89:8f:7c:fb:1b:78:56:00:2d:24:24:1c:30:96:7e:
b2:33:be:8e:c1:21:10:c5:f8:41:77:ec:2d:09:ea:
19:9a:fc:b7:00:60:a0:0c:d3:5c:cd:93:b2:3f:d5:
28:e7:6a:d1:f5:ec:30:ae:21:8d:30:5b:18:2a:e2:
bb:9d:fe:bb:97:8b:6c:25:d8:57:3b:a1:a5:59:e7:
a6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0A:B8:FE:4B:AF:1E:AC:69:B4:72:8B:D0:70:97:EC:9C:88:22:D7
X509v3 Authority Key Identifier:
keyid:AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:8d:4a:17:59:d9:ae:6c:a9:72:a3:18:a5:af:49:f8:7e:ec:
cb:68:54:41:ff:dc:4c:a9:ab:8f:26:51:34:37:03:73:14:eb:
0c:73:5c:45:9c:1d:9f:ea:b0:9b:fa:14:ff:c7:3c:96:1b:dd:
01:e5:fc:c9:c7:8b:cb:b6:2b:28:12:c3:12:31:20:26:4b:31:
c4:de:3b:95:e7:8c:70:f5:55:05:1b:48:70:47:32:c9:e3:c8:
e0:71:d3:57:92:4f:f5:5b:aa:89:8b:bb:3a:d1:5c:4f:d1:a6:
8e:7e:cc:c7:58:bc:94:91:72:56:f4:5f:14:0f:2e:bd:6c:33:
bd:b5:3c:c8:ff:3b:c5:21:65:d4:e6:c1:a9:70:40:19:49:13:
68:bd:17:dd:8f:74:80:3c:c9:09:7e:6a:f3:ce:fb:ad:11:0f:
78:4b:9d:95:5b:00:1b:6b:e2:9a:ce:6c:ae:f8:3d:ac:d0:fe:
b9:cf:c2:fb:db:0b:86:f7:a5:46:df:b3:94:56:16:bb:c0:ef:
97:af:03:a5:95:3d:0d:f7:99:f7:c0:5d:cf:ec:cb:02:3b:e5:
74:45:d8:b3:1c:40:53:52:54:b2:15:9e:39:1d:4d:50:9d:79:
01:2e:c8:f1:bf:50:c9:d6:b4:0e:d6:a0:4e:3f:29:53:f2:28:
65:c6:84:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:54 2025 by rpki-client on console-fra.rpki-client.org