Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a159a5-2129-4817-851b-b84cfff2671c/1/w-n8ZGejquEeyh5P15bA8hUYrAA.mft
File: w-n8ZGejquEeyh5P15bA8hUYrAA.mft (raw, json)
Hash identifier: OMtAPDaxtk5ckQsju1KTD875W6oyYKky0iJCZeCOFXQ=
Subject key identifier: 32:B4:D8:31:B0:B2:20:C3:09:33:D5:D9:A9:4C:EB:F4:4C:3D:18:04
Authority key identifier: C3:E9:FC:64:67:A3:AA:E1:1E:CA:1E:4F:D7:96:C0:F2:15:18:AC:00
Certificate issuer: /CN=c3e9fc6467a3aae11eca1e4fd796c0f21518ac00
Certificate serial: 0194BB6016723854FC868649BE5F89CE3EAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-n8ZGejquEeyh5P15bA8hUYrAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a159a5-2129-4817-851b-b84cfff2671c/1/w-n8ZGejquEeyh5P15bA8hUYrAA.mft
Manifest number: 0328
Signing time: Fri 31 Jan 2025 08:00:24 +0000
Manifest this update: Fri 31 Jan 2025 08:00:24 +0000
Manifest next update: Sat 01 Feb 2025 08:00:24 +0000
Files and hashes: 1: w-n8ZGejquEeyh5P15bA8hUYrAA.crl (hash: CEnKZovtaE087Rnl5QtcMqszW1NvmnzWDyE7NRF+/S8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/a159a5-2129-4817-851b-b84cfff2671c/1/w-n8ZGejquEeyh5P15bA8hUYrAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/a159a5-2129-4817-851b-b84cfff2671c/1/w-n8ZGejquEeyh5P15bA8hUYrAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-n8ZGejquEeyh5P15bA8hUYrAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:16:72:38:54:fc:86:86:49:be:5f:89:ce:3e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e9fc6467a3aae11eca1e4fd796c0f21518ac00
Validity
Not Before: Jan 31 08:00:24 2025 GMT
Not After : Feb 1 08:00:24 2025 GMT
Subject: CN=32b4d831b0b220c30933d5d9a94cebf44c3d1804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3a:6c:57:ec:f5:72:cb:c5:3a:60:59:57:7b:
6c:c2:a6:d2:86:88:73:bc:8b:f9:93:04:33:ca:63:
e6:45:58:93:f6:0a:04:b2:10:2c:45:8f:85:c4:58:
22:4b:4d:43:e3:b4:0b:38:e9:0e:58:c4:29:87:23:
15:05:f7:94:b7:00:69:20:43:c5:11:95:f7:eb:30:
46:af:44:5c:25:3b:1d:04:a0:54:aa:47:bb:59:b0:
e8:9c:fd:7f:05:65:c2:f6:c3:98:6b:ac:54:5c:85:
16:bd:56:da:03:ec:0a:33:2e:22:1d:2b:a4:86:d0:
dc:46:92:9c:bc:e4:34:7c:93:71:9f:57:f1:f4:d8:
71:d8:11:11:c0:5d:eb:f3:0a:59:98:4e:7f:59:50:
6c:32:bd:40:e0:58:02:24:19:78:d2:97:d0:23:c1:
eb:19:cb:99:f6:d2:8d:17:16:71:5b:47:f9:20:27:
6d:b1:4d:9b:bb:05:55:d1:23:c2:2f:2a:0a:34:cd:
ad:9b:55:7b:d5:c0:94:28:1f:04:d1:6b:db:3a:4f:
53:3f:0e:d6:c3:8d:7b:36:21:4f:76:01:8c:3c:78:
28:cb:86:df:c7:af:a9:98:e2:bd:cc:18:40:f7:f0:
c5:42:ef:b1:a2:07:d8:22:9b:1d:7a:08:7c:1f:64:
ad:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B4:D8:31:B0:B2:20:C3:09:33:D5:D9:A9:4C:EB:F4:4C:3D:18:04
X509v3 Authority Key Identifier:
keyid:C3:E9:FC:64:67:A3:AA:E1:1E:CA:1E:4F:D7:96:C0:F2:15:18:AC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-n8ZGejquEeyh5P15bA8hUYrAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a159a5-2129-4817-851b-b84cfff2671c/1/w-n8ZGejquEeyh5P15bA8hUYrAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a159a5-2129-4817-851b-b84cfff2671c/1/w-n8ZGejquEeyh5P15bA8hUYrAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:89:17:b3:fb:4f:3d:de:1b:b6:5d:4f:81:68:93:5b:da:86:
c7:2c:5e:ee:8f:bf:75:31:4d:02:11:2f:28:1e:88:97:9c:b8:
ba:ac:76:d3:9c:52:79:6f:9c:8a:a2:8f:9c:a6:69:8a:e0:81:
47:b5:e8:dc:33:24:20:eb:48:3a:40:8b:ff:0a:8f:fe:84:0f:
4e:89:bb:b2:20:55:1f:1b:69:84:04:c7:c8:02:ce:4f:15:36:
c0:9e:15:dd:96:33:4e:5b:d6:0c:b5:36:af:33:be:95:7b:7f:
c7:f3:d2:d1:db:e0:f5:92:5f:e2:6c:16:83:a0:7c:62:61:68:
2a:44:1a:7c:83:22:99:15:03:29:f8:56:4f:05:b7:f3:89:4b:
a8:2e:b8:97:bb:c1:94:d1:49:07:9c:77:e4:cb:f3:aa:69:55:
53:e5:c7:3f:22:d2:06:15:33:5b:43:18:b4:9c:64:03:70:47:
92:59:ea:b6:13:ed:e0:dc:e7:a4:7c:26:5b:fb:35:9c:29:6c:
85:b2:d2:cf:74:3e:32:e8:62:f2:3a:2e:73:53:cb:f1:96:9c:
aa:9e:04:7a:84:54:18:3d:4d:58:b6:8f:c2:c5:5b:c1:d9:04:
13:f6:a9:2d:37:b7:cf:de:8c:73:04:c8:65:87:01:15:dd:99:
8f:31:8f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:42 2025 by rpki-client on console-fra.rpki-client.org