Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/aa9d76-305d-4ad7-9cb6-4c068ee8897f/1/WZyb6F-CikOPCNH1CvrCUz0qbsI.mft
File: WZyb6F-CikOPCNH1CvrCUz0qbsI.mft (raw, json)
Hash identifier: fRYW/l5RkR07bvizXjU6cw2Od/QWR0tShrtzchZdm5I=
Subject key identifier: 8E:9D:73:3F:AF:7B:C1:9C:97:25:01:75:78:D4:CC:42:B1:5F:AB:0C
Authority key identifier: 59:9C:9B:E8:5F:82:8A:43:8F:08:D1:F5:0A:FA:C2:53:3D:2A:6E:C2
Certificate issuer: /CN=599c9be85f828a438f08d1f50afac2533d2a6ec2
Certificate serial: 0194C3F5DCA3D37645B70708E1C6056CEEB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZyb6F-CikOPCNH1CvrCUz0qbsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/aa9d76-305d-4ad7-9cb6-4c068ee8897f/1/WZyb6F-CikOPCNH1CvrCUz0qbsI.mft
Manifest number: 03FE
Signing time: Sun 02 Feb 2025 00:00:57 +0000
Manifest this update: Sun 02 Feb 2025 00:00:57 +0000
Manifest next update: Mon 03 Feb 2025 00:00:57 +0000
Files and hashes: 1: WZyb6F-CikOPCNH1CvrCUz0qbsI.crl (hash: PishKYvrU75M0v6e/vfS9JdQrroTWML/8W1Xlpsf6U0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/aa9d76-305d-4ad7-9cb6-4c068ee8897f/1/WZyb6F-CikOPCNH1CvrCUz0qbsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/aa9d76-305d-4ad7-9cb6-4c068ee8897f/1/WZyb6F-CikOPCNH1CvrCUz0qbsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZyb6F-CikOPCNH1CvrCUz0qbsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:dc:a3:d3:76:45:b7:07:08:e1:c6:05:6c:ee:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=599c9be85f828a438f08d1f50afac2533d2a6ec2
Validity
Not Before: Feb 2 00:00:57 2025 GMT
Not After : Feb 3 00:00:57 2025 GMT
Subject: CN=8e9d733faf7bc19c9725017578d4cc42b15fab0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:69:0c:ed:45:b2:a5:6a:03:52:93:9a:e6:4f:
e2:2b:c0:3a:34:75:4c:08:cc:4c:8a:ef:65:44:2c:
e9:1a:ed:da:26:3f:00:28:b8:52:e2:38:99:39:dc:
97:9d:90:f0:fe:49:52:c1:80:05:6a:0d:64:2f:6e:
17:c8:bf:a8:0c:ad:2d:79:2a:8d:fc:98:c7:40:bb:
34:40:94:e4:02:72:cb:47:2a:29:92:9c:56:12:0e:
86:8f:99:98:21:5b:3b:7c:33:ac:e6:c9:55:3d:7a:
c2:a8:85:31:0d:31:8d:34:1f:9b:42:d7:bb:0c:da:
31:03:a6:bd:df:17:55:40:d4:60:31:71:f9:91:1f:
bb:c8:67:bf:3e:79:5b:f5:5a:b1:c0:f7:a6:49:cd:
46:bc:a8:05:50:61:56:99:b8:04:84:f8:da:c2:49:
ba:d1:b2:62:10:83:e8:85:c6:ab:ff:8f:cc:80:b2:
d4:d7:dc:ca:3e:84:e5:9c:4f:86:65:fc:25:b3:49:
cd:af:2a:8c:0a:fc:e3:c8:86:5c:ee:61:43:aa:86:
38:dd:e3:9e:d1:7e:02:3a:dd:95:27:8d:3b:e8:07:
fb:89:ab:61:f9:26:72:db:47:c5:f5:9f:80:97:78:
fc:86:28:86:1d:b3:d0:13:bd:ca:1e:6d:f1:de:e0:
58:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9D:73:3F:AF:7B:C1:9C:97:25:01:75:78:D4:CC:42:B1:5F:AB:0C
X509v3 Authority Key Identifier:
keyid:59:9C:9B:E8:5F:82:8A:43:8F:08:D1:F5:0A:FA:C2:53:3D:2A:6E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZyb6F-CikOPCNH1CvrCUz0qbsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/aa9d76-305d-4ad7-9cb6-4c068ee8897f/1/WZyb6F-CikOPCNH1CvrCUz0qbsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/aa9d76-305d-4ad7-9cb6-4c068ee8897f/1/WZyb6F-CikOPCNH1CvrCUz0qbsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:67:9c:19:b2:89:b3:d0:44:1d:d9:12:08:94:f5:37:ad:6f:
80:3e:5a:e7:7b:87:2b:9d:d8:43:4a:57:96:53:66:76:6a:a6:
f9:73:08:91:e4:a5:81:26:83:03:4b:c9:cb:ef:57:46:56:13:
a4:be:57:c9:e8:49:dd:5e:f1:65:0b:21:0d:b0:24:70:68:82:
82:d1:86:88:10:f1:66:df:8b:d6:71:65:6d:85:53:69:13:83:
93:b2:4c:4e:3a:7f:38:83:5b:ef:fe:7b:af:1c:14:36:2a:1d:
fb:a7:c0:15:cd:98:55:50:c9:f2:79:30:c1:dd:fc:69:06:77:
cd:26:73:f1:78:92:98:10:a7:ec:83:83:7f:49:12:fb:2a:a7:
b9:37:03:b8:41:1a:c6:e2:84:2d:b9:56:9b:61:e7:65:f6:b8:
30:ba:ff:d8:73:db:02:52:00:97:db:05:48:b6:da:fb:18:6e:
c3:9a:3f:3a:b2:87:5b:d6:20:28:c6:74:30:75:06:4a:a4:90:
9a:20:40:07:4d:65:0f:d8:39:3a:f5:c3:67:a1:7b:ef:00:96:
c4:42:d2:fc:29:b7:35:b4:31:81:27:1d:b4:99:b5:65:58:0a:
f2:3b:fd:d1:92:aa:04:f4:3d:c3:c1:a8:7e:f9:25:91:38:35:
15:69:24:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:45 2025 by rpki-client