Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
File: W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft (raw, json)
Hash identifier: 5X/RMEBiyCMFyA3VJxvk2xrbB6P0y31cAA33WHNaraE=
Subject key identifier: 58:FA:22:E6:C0:5C:72:C6:74:85:51:3B:FC:72:D4:C1:F0:79:2A:21
Authority key identifier: 5B:80:C9:D0:92:44:70:E1:C1:E3:0B:C4:EE:FF:19:90:90:A7:03:5C
Certificate issuer: /CN=5b80c9d0924470e1c1e30bc4eeff199090a7035c
Certificate serial: 0194C3885A41DDC3E8F36FBC8FE1B33BC8D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
Manifest number: 7A
Signing time: Sat 01 Feb 2025 22:01:20 +0000
Manifest this update: Sat 01 Feb 2025 22:01:20 +0000
Manifest next update: Sun 02 Feb 2025 22:01:20 +0000
Files and hashes: 1: W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl (hash: nzisLtU6HCdTK4HK06dZnpwJVNLlJa75nUINmwKTPKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:5a:41:dd:c3:e8:f3:6f:bc:8f:e1:b3:3b:c8:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b80c9d0924470e1c1e30bc4eeff199090a7035c
Validity
Not Before: Feb 1 22:01:20 2025 GMT
Not After : Feb 2 22:01:20 2025 GMT
Subject: CN=58fa22e6c05c72c67485513bfc72d4c1f0792a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a3:7c:1d:a4:29:1a:c5:7e:6e:86:34:2d:2e:
ce:2a:9e:a1:2b:47:13:d0:59:4a:16:cb:06:f6:35:
fa:fb:40:7c:7b:3c:41:a3:f6:47:58:0f:01:b9:b2:
0b:99:f2:66:3a:ce:f6:6a:10:22:90:6d:4b:f7:75:
26:d5:92:c5:72:1d:a3:46:fd:33:5b:f4:3a:b2:10:
2c:ce:64:26:4a:d2:de:84:09:cc:03:27:b8:28:15:
46:0f:33:29:e5:0a:8d:56:41:92:ed:ab:2e:df:65:
29:c7:3c:0c:cb:27:c3:01:15:9c:83:6d:80:9a:ce:
44:8f:24:4c:20:3d:64:26:07:32:02:5f:d2:c6:d9:
83:f9:1a:bf:56:23:65:e5:41:58:07:4c:ed:0a:ba:
b2:9d:a5:93:7c:b6:94:60:18:f6:11:6f:b4:b0:cb:
c6:e9:e6:e7:ac:8a:e7:bc:39:78:e5:62:35:89:3e:
fe:27:d0:a4:4e:87:1b:b7:82:50:1d:7c:49:84:45:
93:2f:b6:fc:74:70:14:f6:53:ca:c4:cd:bd:86:32:
b1:b7:5d:27:e5:57:88:77:82:07:b1:ab:5c:87:be:
11:09:f6:5c:de:f6:9c:55:6c:94:0b:fb:7f:48:14:
d3:97:d4:12:e1:70:f2:5f:9a:70:06:81:8f:59:8a:
bb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FA:22:E6:C0:5C:72:C6:74:85:51:3B:FC:72:D4:C1:F0:79:2A:21
X509v3 Authority Key Identifier:
keyid:5B:80:C9:D0:92:44:70:E1:C1:E3:0B:C4:EE:FF:19:90:90:A7:03:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:4d:0d:10:ff:bf:02:ad:0c:b8:96:00:2c:7e:ef:b4:56:9a:
0d:05:92:2f:1b:95:46:4c:82:70:1f:42:ef:c5:6c:21:24:67:
49:2c:69:f8:4e:65:2d:f2:23:08:32:02:79:92:18:37:83:6c:
e1:d3:d7:2d:00:ea:a5:54:71:b5:22:3f:22:23:a2:17:4d:d8:
fd:06:c5:d6:2b:63:44:8f:0d:31:6f:02:2e:e8:81:5f:62:e6:
e2:42:82:03:55:ce:9a:1d:16:c0:95:71:fc:5c:3d:dc:05:39:
43:47:cc:75:61:5e:46:6d:99:04:ba:3b:ea:e2:d1:e7:75:9a:
19:94:9c:c8:6c:b7:7c:7c:e9:85:7d:cd:c9:e9:64:1c:8e:18:
05:c4:41:f8:06:2e:d4:e7:25:da:bd:fa:33:5e:72:7b:4c:e6:
16:b3:ef:c1:48:8d:5f:46:49:8a:cb:56:33:c7:e7:31:0c:ca:
9c:dc:60:9f:7a:59:1a:5e:bb:53:21:82:39:b7:fb:78:dd:05:
aa:cf:5b:e5:20:ef:d7:35:a1:87:0d:ce:a2:62:75:c7:d2:cf:
bb:f8:1c:2d:6e:da:3e:a4:d7:b3:6c:ca:22:cc:4d:3b:29:c1:
4e:91:90:84:df:a4:e2:f4:8d:34:4b:e9:28:7c:42:b5:8a:f7:
fa:82:68:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:06:17 2025 by rpki-client