Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
File: wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft (raw, json)
Hash identifier: UptoXO+B4WtNZ/aFSee9wxZ6axIqwvImcvixCZVwDAE=
Subject key identifier: CF:33:62:C4:5A:CE:66:2E:E5:D5:10:E1:AE:A0:C1:38:8D:29:32:A0
Authority key identifier: C2:BF:81:AB:95:0A:18:03:46:30:C2:58:30:74:9E:65:0E:B4:E6:34
Certificate issuer: /CN=c2bf81ab950a18034630c25830749e650eb4e634
Certificate serial: 0194C42C4D6C15585B568127F60E70D5BDC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
Manifest number: 039A
Signing time: Sun 02 Feb 2025 01:00:25 +0000
Manifest this update: Sun 02 Feb 2025 01:00:25 +0000
Manifest next update: Mon 03 Feb 2025 01:00:25 +0000
Files and hashes: 1: O4itYS8sI_ap1aiE_UeLniEPcvk.roa (hash: yXxFYAIoEwoD51Grvt0xf+Jd5ULkmINTn0EV/SJ5fbw=)
2: wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl (hash: opZ6YWwera7QZkLhNnk9bK1yRg2lYI0wjNszkBjpVLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:4d:6c:15:58:5b:56:81:27:f6:0e:70:d5:bd:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2bf81ab950a18034630c25830749e650eb4e634
Validity
Not Before: Feb 2 01:00:25 2025 GMT
Not After : Feb 3 01:00:25 2025 GMT
Subject: CN=cf3362c45ace662ee5d510e1aea0c1388d2932a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2e:48:e4:99:91:31:72:e6:09:3f:16:2e:31:
bf:aa:72:30:07:32:61:1b:67:7b:3e:6c:28:01:79:
21:dc:e8:0a:9d:8e:36:16:67:3c:02:44:52:ae:23:
dd:89:9b:6c:02:ed:9e:fb:b4:b4:a5:09:83:6a:7f:
6e:8f:21:7c:f5:c6:e8:47:37:f0:0b:69:f3:7a:37:
b5:fc:ca:c5:ab:d9:e6:a1:40:f8:27:39:08:85:08:
d0:43:b4:db:e9:5c:8e:69:6d:d7:2f:a0:2a:d4:42:
98:93:4e:02:ef:da:32:a9:44:cc:94:4a:f4:bd:9b:
e1:b5:a3:8d:6a:e8:f3:01:fb:3c:c5:6b:b0:f5:76:
85:9f:c7:42:19:f4:a7:89:f5:89:77:c2:44:93:58:
f7:d8:e0:e2:cc:e1:60:3e:42:40:21:9f:41:90:7c:
6a:b6:42:bf:9c:08:c4:c9:d5:06:d0:8a:36:19:38:
eb:56:21:59:e9:84:a9:a0:02:bc:d8:91:cb:8f:1a:
1d:6f:6d:44:85:4c:c0:16:8f:56:eb:6c:ac:5b:10:
89:e0:11:3d:25:dc:94:62:03:6f:b1:f1:0e:43:3c:
bc:6b:3d:ad:18:5c:67:a9:95:24:18:91:30:c8:7b:
4c:43:68:ae:13:d8:9f:9f:1c:73:7b:7f:21:a9:35:
91:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:33:62:C4:5A:CE:66:2E:E5:D5:10:E1:AE:A0:C1:38:8D:29:32:A0
X509v3 Authority Key Identifier:
keyid:C2:BF:81:AB:95:0A:18:03:46:30:C2:58:30:74:9E:65:0E:B4:E6:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:32:6f:e8:b7:44:2c:a0:98:ba:4a:14:37:9b:bb:83:99:93:
cc:3f:af:9d:01:a6:81:ff:9b:94:68:a0:d2:d2:54:e7:28:91:
da:bb:7c:3e:ef:61:84:5b:af:f1:5a:84:c2:53:1c:bb:d9:d8:
dd:9c:6f:9c:8c:eb:24:14:82:7d:78:2c:05:06:69:be:96:67:
1a:5f:1a:aa:62:04:34:ae:c6:c3:c5:5b:f2:08:92:53:ef:85:
c5:32:9c:57:1c:38:55:56:e6:3b:f6:c3:37:6e:ec:22:9a:0c:
d8:87:db:a9:15:ed:95:8f:12:cd:20:d0:3c:fe:30:b1:6e:75:
b2:eb:db:54:0b:0b:3f:aa:5a:32:86:95:d3:33:04:ce:06:3d:
f9:6e:b1:22:66:a3:46:b7:b4:eb:2c:46:1e:af:d9:c6:1b:e1:
2c:31:cb:67:2a:e3:0c:3d:03:8b:f8:69:28:99:c7:09:3a:3e:
f3:43:8c:23:25:25:94:94:77:9d:13:8b:b9:da:eb:8f:ce:f6:
24:45:62:ed:32:f1:13:ea:df:62:43:9b:c8:f2:c2:1d:e9:db:
94:b5:35:7a:80:3a:fc:71:f4:f3:a9:35:ec:ea:c2:95:16:0f:
ac:85:1d:73:8a:a5:b1:55:62:0d:a1:02:fd:60:65:93:f7:dd:
75:f1:de:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:49:47 2025 by rpki-client