Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
File: WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft (raw, json)
Hash identifier: Bt62jcmF0pVK37ong6nYzMRbzd0gDSM8BOz4C2FbNfE=
Subject key identifier: 0D:0C:FA:2B:E3:C9:0F:FB:55:8E:43:73:8D:27:D8:CE:66:40:7A:85
Authority key identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
Certificate issuer: /CN=58a127453dfba17e10c347fa34bbebab14905a57
Certificate serial: 01901DEB7BA1A3316F9A68906D7585EE1159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
Manifest number: 02D3
Signing time: Sat 15 Jun 2024 22:01:30 +0000
Manifest this update: Sat 15 Jun 2024 22:01:30 +0000
Manifest next update: Sun 16 Jun 2024 22:01:30 +0000
Files and hashes: 1: TggVPDaH2G3YILeQIuc9Qwvnl9w.roa (hash: Eoc17hEATULq2ABu44rlTaUJyZNXhapaEk8rMSw7Hoc=)
2: WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl (hash: YEeKZvOpGb5F1bb7UGlJBOZ7dG29pUJ+IctB9a90ppU=)
3: xZWQ3LurCLoNj9UeUy81wNs27v0.roa (hash: 0FeLjTVSGEwX1WhEacFPIEgbPevyUIdtD+pbT1ffaT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:eb:7b:a1:a3:31:6f:9a:68:90:6d:75:85:ee:11:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a127453dfba17e10c347fa34bbebab14905a57
Validity
Not Before: Jun 15 22:01:30 2024 GMT
Not After : Jun 16 22:01:30 2024 GMT
Subject: CN=0d0cfa2be3c90ffb558e43738d27d8ce66407a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:69:39:f2:a4:4d:f1:ae:eb:74:92:cb:e0:a2:
ce:2d:b1:aa:6d:25:73:2c:50:48:4d:4e:74:3d:47:
db:87:f9:ce:9c:02:86:da:da:ec:37:13:0c:8b:80:
dd:9a:27:38:6e:0a:35:07:45:63:3a:5d:5b:c8:7a:
a0:86:f3:fc:81:43:21:0b:1a:6b:18:cd:0f:4f:e3:
3a:c0:2b:5f:56:d4:47:55:70:53:46:06:07:05:33:
35:8f:8e:76:a3:d4:5b:67:89:94:b6:c0:14:95:6a:
c0:b6:59:50:62:d6:30:1f:cf:c0:c8:44:d9:e6:68:
56:6d:1e:e8:93:27:e8:76:a1:57:7a:19:1a:65:a8:
96:b0:70:2e:ad:eb:67:dd:7a:85:f3:86:66:50:80:
b1:17:be:2c:e5:e4:5f:97:50:d5:30:9a:90:7b:b4:
1a:42:a4:a0:f5:54:fc:8e:96:4f:5d:70:56:1e:e2:
ef:ae:46:bc:09:61:9d:2f:72:18:47:38:7f:58:90:
32:4d:34:12:55:16:eb:99:c3:85:10:2b:94:93:ef:
1e:05:c2:25:26:a3:ad:fc:00:cd:e4:5a:f8:e6:bf:
5e:39:b3:c8:55:1d:eb:17:97:8a:0f:cc:1c:60:8e:
73:4b:90:23:23:20:ea:29:d2:92:40:5f:76:8e:5e:
89:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0C:FA:2B:E3:C9:0F:FB:55:8E:43:73:8D:27:D8:CE:66:40:7A:85
X509v3 Authority Key Identifier:
keyid:58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:cb:d2:ca:44:33:de:2c:c0:6c:07:5f:28:28:77:5a:01:4e:
7b:54:79:24:87:3d:2a:fa:ba:95:cf:2b:27:d0:93:38:b2:7b:
ac:30:dd:b7:a6:0e:5e:92:d2:d8:4d:9e:c9:2d:6a:92:86:f4:
73:9d:f3:4e:04:2e:0f:67:9b:d7:a5:c6:3f:ec:a0:95:10:97:
05:0f:dc:e0:cd:3a:5c:5b:3a:82:6d:37:17:38:2a:d2:14:bf:
0a:26:8e:a4:63:69:14:18:47:3a:55:d5:92:2b:6f:95:50:43:
2d:e5:a0:30:b5:be:ff:1a:21:16:6a:50:44:15:4a:bc:b8:23:
5b:90:1b:d6:dd:dc:14:f9:50:d1:5b:cc:e0:f8:d1:4d:f5:df:
a4:d6:b4:b8:9d:fa:e8:81:02:e5:10:6a:45:6f:43:82:a7:73:
c9:0e:7e:66:e3:0c:31:2e:32:ab:1a:26:ad:4d:1b:26:69:c4:
e0:e2:0a:df:c4:b1:22:39:dc:3b:21:85:7e:27:94:a2:3b:64:
11:de:59:ef:bb:e8:2e:45:36:e0:85:1b:56:44:d3:49:28:3b:
01:c0:8b:12:4d:95:00:12:8f:2d:9a:1d:74:93:7d:02:75:76:
17:78:6f:6e:3f:41:8c:b9:3c:bb:bb:bb:9c:0e:1b:77:79:0b:
84:43:ac:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:54:27 2024 by rpki-client on console-ams.rpki-client.org