Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
File: o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft (raw, json)
Hash identifier: YBKy5hMlIYIAFZfZ9+xsuXXTmbJLAqMtNvCirYN0954=
Subject key identifier: B1:D9:5E:18:3F:24:0A:50:DD:15:D9:DE:CA:2A:D3:24:77:9E:A0:C7
Authority key identifier: A3:E5:99:92:83:AA:F2:E4:39:50:79:EA:37:16:DD:FC:2B:13:0F:07
Certificate issuer: /CN=a3e5999283aaf2e4395079ea3716ddfc2b130f07
Certificate serial: 0194BB293CA0D3B1A7603E1CFF2C239429EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
Manifest number: 01B8
Signing time: Fri 31 Jan 2025 07:00:29 +0000
Manifest this update: Fri 31 Jan 2025 07:00:29 +0000
Manifest next update: Sat 01 Feb 2025 07:00:29 +0000
Files and hashes: 1: CmAE8B1t5vtl2bRQPtAcN7cxb3s.roa (hash: EUyII4SPPS8NnneMNy5H1gGoK71/rhaPmoIV02VhFv0=)
2: o-WZkoOq8uQ5UHnqNxbd_CsTDwc.crl (hash: CZu8QU/VddrWy3aTLcpEqxxCdwz/i38pDt0JVMEPU5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:3c:a0:d3:b1:a7:60:3e:1c:ff:2c:23:94:29:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e5999283aaf2e4395079ea3716ddfc2b130f07
Validity
Not Before: Jan 31 07:00:29 2025 GMT
Not After : Feb 1 07:00:29 2025 GMT
Subject: CN=b1d95e183f240a50dd15d9deca2ad324779ea0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b5:8c:3e:72:a6:3c:d2:f8:43:bc:43:54:ea:
b9:3b:aa:5b:d3:51:8f:2f:c6:05:7a:41:24:e5:4c:
09:71:c7:8e:cf:cb:c3:86:40:80:82:24:9b:53:e3:
72:d5:e7:98:74:06:f1:b4:6d:43:a4:d3:1d:2b:be:
cb:b3:4e:14:8c:6c:3a:5d:19:04:04:b4:94:7a:63:
9a:28:c3:d2:1d:3b:90:2d:f4:55:84:4a:a9:98:24:
a0:9f:d5:c3:85:be:28:86:a8:fc:e0:4a:14:4c:bf:
a3:11:c0:08:09:c4:a7:6d:19:e1:57:4d:fe:56:56:
60:42:f2:90:f4:d5:0f:17:bf:65:e3:8d:67:a1:20:
73:93:fb:dc:7e:c9:ea:55:a4:59:8e:fb:52:7d:51:
a2:40:21:b4:90:76:97:d9:b4:b0:1b:90:0f:18:d0:
f3:e5:5e:e8:17:c4:27:69:12:15:a0:b5:35:e0:e5:
ba:94:e8:d4:7d:dc:9a:d8:ce:98:b0:bc:ab:96:3c:
4a:da:62:7e:55:93:4d:5a:79:5d:9c:b0:fc:cb:06:
f6:7f:32:df:3d:d9:59:b2:30:9d:ff:41:65:0a:82:
25:e3:cd:d4:e6:33:a7:7d:c4:5b:eb:cc:43:9f:53:
d8:5e:e0:1e:8d:8f:3e:6d:c8:1a:af:5f:20:14:31:
2a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D9:5E:18:3F:24:0A:50:DD:15:D9:DE:CA:2A:D3:24:77:9E:A0:C7
X509v3 Authority Key Identifier:
keyid:A3:E5:99:92:83:AA:F2:E4:39:50:79:EA:37:16:DD:FC:2B:13:0F:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b8:70:45:f0:4f:19:0e:aa:e6:25:d9:39:3e:76:cc:78:42:
17:3e:68:4c:66:ea:71:d4:47:80:97:f9:3d:02:49:0d:6b:5c:
72:ac:a6:75:77:b2:32:fe:11:b7:4f:fd:00:ca:c3:17:dd:e3:
6e:d6:ba:8c:9b:5f:14:e2:f3:48:e0:be:56:d7:92:62:b9:0c:
bb:b9:95:33:47:28:44:17:69:dc:3a:7b:b5:99:35:71:a9:34:
a1:db:57:a1:14:19:78:61:b0:03:82:78:75:37:46:c4:68:6d:
74:70:29:12:7e:f0:87:17:b9:98:b1:d8:2d:de:93:a1:28:b8:
86:cb:6e:68:44:30:bd:a3:43:3d:e4:a5:e2:f4:39:77:cd:4a:
8c:85:e0:03:87:04:98:c9:ae:34:05:b5:40:f2:95:d4:23:ce:
f4:2c:be:05:28:09:51:1b:ab:20:80:d3:ea:c6:c2:fd:47:03:
87:b5:11:bc:04:e4:4b:d3:b2:ea:b7:f9:38:fe:de:00:2c:8d:
b2:36:4c:cd:7c:68:78:b7:5c:66:a0:e6:c1:d2:00:60:ea:39:
63:48:fe:8e:c2:d8:60:f8:79:23:ea:50:40:af:54:b6:1e:e6:
b5:67:61:d7:71:46:83:d4:e6:92:77:ca:79:34:38:c9:f3:8f:
65:68:48:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:23 2025 by rpki-client on console-fra.rpki-client.org