Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
File: WGsBghBbsnsMi88oQr08GoUWS9E.mft (raw, json)
Hash identifier: AMiOJJnFzUXrlZWDEogeqFo7NFm1xRrd1cfBC5fv+EE=
Subject key identifier: 83:82:A8:86:13:53:B3:E5:21:30:94:24:F2:E7:79:F6:91:DD:1C:BA
Authority key identifier: 58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
Certificate issuer: /CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Certificate serial: 01935162AFE95855832605F1533A6DCCA449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
Manifest number: 136E
Signing time: Fri 22 Nov 2024 01:00:42 +0000
Manifest this update: Fri 22 Nov 2024 01:00:42 +0000
Manifest next update: Sat 23 Nov 2024 01:00:42 +0000
Files and hashes: 1: WGsBghBbsnsMi88oQr08GoUWS9E.crl (hash: s2eL3HNo1xVq64l8Tdi7t/Va8ZoNPajjlgcSZEM1M2w=)
2: hLse4DbMlzlFABNIrsPy_j2_ePs.roa (hash: D52qDJ65U/hg0sO9IjQ/RNMvSnu/OhTuzuZwufYcWhU=)
3: w4SJnjwr5olmQDgJ-TbHDtA7FKU.roa (hash: jcWvnEfadLtXVMRgXchDLNsk7Gz2YXmmXic7j+UfmYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:62:af:e9:58:55:83:26:05:f1:53:3a:6d:cc:a4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Validity
Not Before: Nov 22 01:00:42 2024 GMT
Not After : Nov 23 01:00:42 2024 GMT
Subject: CN=8382a8861353b3e521309424f2e779f691dd1cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:10:d7:fe:ce:ee:ea:2a:57:27:99:5d:49:bd:
31:47:3d:3e:ee:fa:b7:7b:a4:43:33:4c:53:44:e4:
f0:20:87:56:64:4f:08:08:96:5d:fb:25:5d:ab:94:
1d:52:b5:ae:5d:4b:86:3b:57:3a:0a:a6:18:da:bc:
67:96:5a:76:07:e9:9d:65:84:f6:a7:73:48:26:cf:
18:49:4d:16:01:ac:15:95:aa:af:7d:1d:ec:f7:61:
f3:d9:de:38:7a:3d:c5:6e:28:4c:fe:97:e0:9b:08:
0c:13:8d:2c:ec:ce:d3:51:4a:10:ff:c0:5f:54:1b:
17:a5:f7:29:af:d0:0e:d1:77:b7:b9:b6:fd:11:74:
44:6a:f0:36:06:dc:3a:41:24:8e:90:88:38:c1:23:
03:ec:f5:36:6b:3f:46:c3:e6:26:94:0a:dd:ac:b0:
19:d0:21:fc:f0:3f:65:d0:43:a2:ae:2f:96:99:1c:
88:b8:05:66:8c:29:5d:7d:94:5d:ae:2d:2d:f0:27:
a4:2d:ab:06:9a:59:4d:60:50:12:5e:ec:0f:1e:ea:
49:48:b6:4c:7c:8c:18:1f:26:d5:50:b9:73:1d:04:
ef:48:0b:8e:84:8c:ab:e3:91:c4:91:76:aa:22:29:
23:44:9c:dd:b7:f2:4d:64:26:4e:60:7a:0c:78:5e:
ca:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:82:A8:86:13:53:B3:E5:21:30:94:24:F2:E7:79:F6:91:DD:1C:BA
X509v3 Authority Key Identifier:
keyid:58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:50:a4:3b:a0:77:4d:a3:65:b1:6f:4e:17:47:90:3f:6c:ad:
0b:3f:7b:ce:60:03:72:49:86:cc:6d:d9:5e:d7:92:31:19:e3:
43:78:e3:87:84:49:bb:43:c7:6d:48:aa:9d:34:b4:fe:66:94:
6c:e9:69:1d:a4:8d:81:fe:da:e3:c2:db:c5:72:ef:9a:43:bd:
92:d7:94:09:ea:a0:84:1e:6e:c5:03:a4:29:aa:fc:d8:8e:93:
0f:2d:1f:39:90:0e:7d:36:a4:af:f2:fe:8b:81:21:08:cf:56:
98:97:b5:83:a7:a2:67:92:85:3b:b9:72:9b:2d:34:8b:ff:eb:
7d:a5:b2:da:6f:a1:6a:bf:1e:30:56:2f:c9:6c:ff:f9:00:f4:
67:14:a5:1d:67:f0:99:2b:02:14:d8:fe:b7:ee:ea:0b:79:4a:
81:9e:48:5d:01:54:51:11:bd:b4:5f:84:61:bf:b1:ac:9f:70:
56:c7:22:c5:f1:99:2e:c5:49:47:8c:79:f1:3c:36:10:27:1e:
21:95:78:ee:8c:2b:06:1b:fb:ad:f2:b4:31:87:c3:2f:c8:43:
50:8d:37:40:47:b1:1a:3e:9d:f4:8d:19:69:cd:ad:8d:76:78:
b7:75:f9:f4:8f:1c:7e:34:a9:da:09:6b:48:0f:85:8c:38:e4:
63:6a:8c:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNRYq/pWFWDJgXxUzptzKRJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NmIwMTgyMTA1YmIyN2IwYzhiY2YyODQyYmQzYzFhODUx
NjRiZDEwHhcNMjQxMTIyMDEwMDQyWhcNMjQxMTIzMDEwMDQyWjAzMTEwLwYDVQQD
Eyg4MzgyYTg4NjEzNTNiM2U1MjEzMDk0MjRmMmU3NzlmNjkxZGQxY2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RDX/s7u6ipXJ5ldSb0xRz0+7vq3
e6RDM0xTROTwIIdWZE8ICJZd+yVdq5QdUrWuXUuGO1c6CqYY2rxnllp2B+mdZYT2
p3NIJs8YSU0WAawVlaqvfR3s92Hz2d44ej3FbihM/pfgmwgME40s7M7TUUoQ/8Bf
VBsXpfcpr9AO0Xe3ubb9EXREavA2Btw6QSSOkIg4wSMD7PU2az9Gw+YmlArdrLAZ
0CH88D9l0EOiri+WmRyIuAVmjCldfZRdri0t8CekLasGmllNYFASXuwPHupJSLZM
fIwYHybVULlzHQTvSAuOhIyr45HEkXaqIikjRJzdt/JNZCZOYHoMeF7KTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOCqIYTU7PlITCUJPLnefaR3Ry6MB8GA1UdIwQY
MBaAFFhrAYIQW7J7DIvPKEK9PBqFFkvRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0dzQmdoQmJzbnNNaTg4b1FyMDhHb1VXUzlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81MmI0ODEtZjMwMy00YTk2LTk3ZGQt
NzM3MGZkODBkZjZjLzEvV0dzQmdoQmJzbnNNaTg4b1FyMDhHb1VXUzlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81MmI0ODEtZjMwMy00YTk2LTk3ZGQtNzM3MGZkODBkZjZj
LzEvV0dzQmdoQmJzbnNNaTg4b1FyMDhHb1VXUzlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx1CkO6B3
TaNlsW9OF0eQP2ytCz97zmADckmGzG3ZXteSMRnjQ3jjh4RJu0PHbUiqnTS0/maU
bOlpHaSNgf7a48LbxXLvmkO9kteUCeqghB5uxQOkKar82I6TDy0fOZAOfTakr/L+
i4EhCM9WmJe1g6eiZ5KFO7lymy00i//rfaWy2m+har8eMFYvyWz/+QD0ZxSlHWfw
mSsCFNj+t+7qC3lKgZ5IXQFUURG9tF+EYb+xrJ9wVscixfGZLsVJR4x58Tw2ECce
IZV47owrBhv7rfK0MYfDL8hDUI03QEexGj6d9I0Zac2tjXZ4t3X59I8cfjSp2glr
SA+FjDjkY2qMyw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:57:29 2024 by rpki-client on console-ams.rpki-client.org