Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
File: wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft (raw, json)
Hash identifier: cFuUASpaZ5/8AMoArXE+zPvAX17vFFIeMn3LaW4QFuo=
Subject key identifier: 95:93:11:7D:AF:24:CC:57:41:DA:B1:C5:08:DC:ED:71:EE:61:EB:30
Authority key identifier: C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B
Certificate issuer: /CN=c29c1007746981fcc408839965b1671c037d121b
Certificate serial: 0194C49A645C0FA5DBEEE21F3DD795B13EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
Manifest number: 0898
Signing time: Sun 02 Feb 2025 03:00:40 +0000
Manifest this update: Sun 02 Feb 2025 03:00:40 +0000
Manifest next update: Mon 03 Feb 2025 03:00:40 +0000
Files and hashes: 1: DzCWe6F-HAwaaoz6rcl7i40vQ2c.roa (hash: 2MCvtIgoaYdDkhO93R/CyI9SeRLv37WS2nmP8dc5bb8=)
2: wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl (hash: W7gTjs+9fPNtBmPtCFBi2ciyxzAB8Z9oAvyn3pxVJsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:64:5c:0f:a5:db:ee:e2:1f:3d:d7:95:b1:3e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c29c1007746981fcc408839965b1671c037d121b
Validity
Not Before: Feb 2 03:00:40 2025 GMT
Not After : Feb 3 03:00:40 2025 GMT
Subject: CN=9593117daf24cc5741dab1c508dced71ee61eb30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bb:71:2f:bc:ce:3c:92:fe:5f:9a:bf:a7:43:
9a:3d:24:e8:ae:53:32:d3:fb:2f:af:3c:bd:81:a7:
2b:c6:82:1a:bb:d1:33:3d:bb:71:ba:66:31:c4:27:
cf:a7:fd:99:5c:1f:2d:25:6e:b4:08:65:62:5a:bf:
6e:21:e3:ec:ad:24:42:90:c1:f5:da:59:76:05:73:
8f:4c:d3:3a:8b:a7:cb:4a:85:bd:56:f7:ba:45:e4:
ed:5f:9d:cb:26:00:dc:1b:c1:49:77:ce:f6:f9:d2:
b1:8c:cd:b7:88:aa:cf:56:8c:5b:7d:16:fc:ae:88:
ac:3e:62:99:e0:c9:dd:78:88:dc:82:7d:fd:37:c3:
72:d8:66:cd:21:26:7d:07:1e:a7:9b:5b:6d:aa:99:
51:43:bc:d5:d4:e2:6f:3d:c8:bb:51:ce:c9:65:50:
7a:fc:47:d8:b0:1a:87:e6:52:c3:a9:1e:4e:20:20:
d0:d2:86:ac:4a:6b:8f:e1:8a:ca:8b:16:c1:82:40:
b8:da:b2:d6:f2:47:0f:a5:7a:1b:66:cd:13:80:22:
a8:73:d3:91:71:04:e4:82:83:00:eb:d0:89:b2:cc:
f0:78:9c:3d:c1:7f:99:32:37:71:3c:60:eb:10:ae:
22:7a:d0:71:1e:b4:35:65:96:f0:b4:f7:7a:24:36:
f9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:93:11:7D:AF:24:CC:57:41:DA:B1:C5:08:DC:ED:71:EE:61:EB:30
X509v3 Authority Key Identifier:
keyid:C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4d:45:ee:47:21:8d:be:23:86:4b:c5:b8:86:49:ed:6e:f1:
6f:18:c3:7c:c5:7a:27:b5:26:8c:ff:b4:37:a8:91:83:45:a2:
00:35:54:53:4d:33:fc:fb:9f:fa:f4:5d:a6:f7:93:9b:bb:bd:
b6:ee:c6:73:1e:ab:d8:87:ea:8b:f2:eb:f0:1b:15:cc:03:34:
84:ed:59:24:7b:92:57:ac:5e:86:c4:3e:82:91:ca:89:93:31:
e0:53:ac:9d:18:78:3b:ba:00:4c:37:94:06:17:77:ab:00:17:
2a:50:79:f3:19:a1:a4:07:71:49:29:fb:c6:3b:17:6f:18:55:
25:da:4a:86:34:3c:b5:ef:45:ab:a0:c9:ed:d3:09:c3:1f:fa:
57:a9:31:7b:c4:c5:b7:80:bc:8e:dc:81:e1:4d:10:26:9b:09:
0f:28:05:a9:30:33:23:bc:3c:84:cd:4b:b4:55:89:ee:27:9d:
35:1e:ac:7b:43:73:e1:58:69:7d:3b:44:60:f3:aa:b9:f0:a0:
39:6f:3b:a9:9c:83:eb:00:aa:5b:88:a0:e6:9b:a2:27:0b:74:
6c:b0:dc:35:7f:95:03:73:2a:e5:91:36:b4:84:57:e5:32:0d:
ed:ec:7b:06:98:58:9a:02:6e:a4:72:cb:9d:f6:16:dc:28:ce:
67:59:41:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:53:34 2025 by rpki-client