Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
File: WKXtjj7MkqLejICr6agZXV_5l-Y.mft (raw, json)
Hash identifier: t7Un8KKlj9fDpLceXxrC1cvhMAPFlLRYd10A+Z85X2A=
Subject key identifier: CA:A8:C9:F2:33:CE:5A:DD:11:A9:D6:21:74:CB:E6:17:46:E2:36:0F
Authority key identifier: 58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6
Certificate issuer: /CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
Certificate serial: 0190448BCF1062F361FA16EC22F6B7AE3855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
Manifest number: 0940
Signing time: Sun 23 Jun 2024 10:02:11 +0000
Manifest this update: Sun 23 Jun 2024 10:02:11 +0000
Manifest next update: Mon 24 Jun 2024 10:02:11 +0000
Files and hashes: 1: VMVnclwVco8xnDBY2RKFb7JtIJI.roa (hash: UbSx9ru3MPr6YvZKD0fF4/l79uTe7gOWptlTS6Wn+II=)
2: WKXtjj7MkqLejICr6agZXV_5l-Y.crl (hash: jLUFFnCBpn6pLlUxd5eNT/ZTqyp4gL+quZOuBxnq/u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:8b:cf:10:62:f3:61:fa:16:ec:22:f6:b7:ae:38:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
Validity
Not Before: Jun 23 10:02:11 2024 GMT
Not After : Jun 24 10:02:11 2024 GMT
Subject: CN=caa8c9f233ce5add11a9d62174cbe61746e2360f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:84:2f:b9:6a:bc:84:91:da:fc:0b:4b:da:48:
3e:e1:9a:86:de:98:f0:c3:6c:0b:ea:9e:05:1a:c1:
10:71:a5:c0:73:42:f9:47:fc:69:3a:38:32:81:82:
66:19:4f:f2:9b:b5:ff:a9:48:0d:f8:1b:5e:2d:81:
2f:90:ef:85:e7:54:a4:c5:f9:c4:11:28:14:84:f6:
27:f3:38:05:57:bd:a0:7e:cc:cd:ca:84:d9:aa:b5:
6d:9b:4b:25:5c:0d:7a:c1:fa:c8:f7:23:33:9b:ad:
99:8b:e9:93:19:d6:77:a9:35:b1:95:5b:fb:31:c7:
78:32:b8:b5:7d:ca:2c:42:39:fa:f8:21:72:7d:92:
ca:fc:23:73:8c:30:26:83:61:cf:73:06:2c:d4:59:
b4:75:55:7b:d8:74:c7:46:35:00:59:ee:f9:26:31:
61:a9:7c:d0:1f:e7:24:f9:3f:29:23:4e:d2:48:cc:
c4:37:01:03:ba:6f:13:fe:5e:45:69:97:1d:ff:b7:
d9:7d:03:5b:a1:28:0b:7a:1d:f9:5c:43:53:80:a6:
99:5c:ed:d7:15:e5:5a:4b:12:fb:be:62:94:7e:91:
06:db:f2:5a:d6:2a:e6:98:33:47:d5:0c:ef:f1:e5:
22:67:38:ce:9f:80:80:6a:8b:89:01:6d:40:d3:4a:
56:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A8:C9:F2:33:CE:5A:DD:11:A9:D6:21:74:CB:E6:17:46:E2:36:0F
X509v3 Authority Key Identifier:
keyid:58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:05:d2:ca:c9:b5:fb:2a:8f:01:c0:c2:7c:06:ff:6e:d0:25:
e0:e8:8a:26:51:37:02:a3:dc:c2:f5:eb:92:3b:a1:90:31:c7:
91:94:97:95:28:21:b7:f9:44:c0:2c:ff:37:a7:59:ee:b8:4d:
bc:b7:c4:3d:65:2c:93:65:07:17:b9:f4:56:4a:eb:67:62:48:
9b:e5:13:ea:da:af:e6:2f:46:6c:9e:f9:d4:63:62:c0:2f:4f:
33:0c:dc:43:b3:10:71:5e:f9:30:ad:86:07:4f:d4:24:1e:3c:
64:e4:3b:57:b2:b4:84:3d:76:14:13:82:54:b6:1e:41:63:c0:
84:01:55:94:ae:38:af:dd:47:bb:68:52:16:ad:5f:cc:28:59:
43:43:60:ff:60:51:a7:eb:68:fe:71:f6:df:da:09:bc:4c:5c:
49:db:6d:a4:c4:f9:ce:8e:4e:57:98:be:ba:d8:68:5b:0e:fe:
0a:15:51:4b:63:1a:83:f2:6d:83:f8:72:60:3f:33:d8:b4:88:
3b:76:23:09:f3:6a:b2:dc:31:51:f9:6b:48:ab:b8:ce:b6:28:
48:79:66:80:e4:27:da:d1:56:61:49:f9:5c:1f:a2:24:9b:9d:
d4:06:3f:6a:e9:8a:3b:17:b8:16:4d:49:39:de:32:ff:85:82:
73:11:03:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBEi88QYvNh+hbsIva3rjhVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YTVlZDhlM2VjYzkyYTJkZThjODBhYmU5YTgxOTVkNWZm
OTk3ZTYwHhcNMjQwNjIzMTAwMjExWhcNMjQwNjI0MTAwMjExWjAzMTEwLwYDVQQD
EyhjYWE4YzlmMjMzY2U1YWRkMTFhOWQ2MjE3NGNiZTYxNzQ2ZTIzNjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4QvuWq8hJHa/AtL2kg+4ZqG3pjw
w2wL6p4FGsEQcaXAc0L5R/xpOjgygYJmGU/ym7X/qUgN+BteLYEvkO+F51SkxfnE
ESgUhPYn8zgFV72gfszNyoTZqrVtm0slXA16wfrI9yMzm62Zi+mTGdZ3qTWxlVv7
Mcd4Mri1fcosQjn6+CFyfZLK/CNzjDAmg2HPcwYs1Fm0dVV72HTHRjUAWe75JjFh
qXzQH+ck+T8pI07SSMzENwEDum8T/l5FaZcd/7fZfQNboSgLeh35XENTgKaZXO3X
FeVaSxL7vmKUfpEG2/Ja1irmmDNH1Qzv8eUiZzjOn4CAaouJAW1A00pWrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqoyfIzzlrdEanWIXTL5hdG4jYPMB8GA1UdIwQY
MBaAFFil7Y4+zJKi3oyAq+moGV1f+ZfmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0tYdGpqN01rcUxlaklDcjZhZ1pYVl81bC1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jNTgxODktZDU3ZS00MTVkLWI5Nzct
MDA2N2JjYWYzNzcwLzEvV0tYdGpqN01rcUxlaklDcjZhZ1pYVl81bC1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9jNTgxODktZDU3ZS00MTVkLWI5NzctMDA2N2JjYWYzNzcw
LzEvV0tYdGpqN01rcUxlaklDcjZhZ1pYVl81bC1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQgXSysm1
+yqPAcDCfAb/btAl4OiKJlE3AqPcwvXrkjuhkDHHkZSXlSght/lEwCz/N6dZ7rhN
vLfEPWUsk2UHF7n0VkrrZ2JIm+UT6tqv5i9GbJ751GNiwC9PMwzcQ7MQcV75MK2G
B0/UJB48ZOQ7V7K0hD12FBOCVLYeQWPAhAFVlK44r91Hu2hSFq1fzChZQ0Ng/2BR
p+to/nH239oJvExcSdttpMT5zo5OV5i+uthoWw7+ChVRS2Mag/Jtg/hyYD8z2LSI
O3YjCfNqstwxUflrSKu4zrYoSHlmgOQn2tFWYUn5XB+iJJud1AY/aumKOxe4Fk1J
Od4y/4WCcxED+Q==
-----END CERTIFICATE-----
Generated at Sun Jun 23 17:58:55 2024 by rpki-client on console-ams.rpki-client.org