Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
File: wsej20o9La--GGqmhfRzbqfQjDg.mft (raw, json)
Hash identifier: 1baloXX8fnIXqHwNylBUaYtXWqXsdjiQkY2/6RBaPl0=
Subject key identifier: F2:E3:44:0D:7A:F8:A0:41:BF:D3:82:DC:9B:B3:C3:4D:CF:08:65:8E
Authority key identifier: C2:C7:A3:DB:4A:3D:2D:AF:BE:18:6A:A6:85:F4:73:6E:A7:D0:8C:38
Certificate issuer: /CN=c2c7a3db4a3d2dafbe186aa685f4736ea7d08c38
Certificate serial: 0194C42CA2FB8FCEA4D40D15092103385320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
Manifest number: 0D85
Signing time: Sun 02 Feb 2025 01:00:47 +0000
Manifest this update: Sun 02 Feb 2025 01:00:47 +0000
Manifest next update: Mon 03 Feb 2025 01:00:47 +0000
Files and hashes: 1: wsej20o9La--GGqmhfRzbqfQjDg.crl (hash: pfVcGTlaLb3bklj1wD4qc5FHd4Y1BhLGU8cRczioa3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:a2:fb:8f:ce:a4:d4:0d:15:09:21:03:38:53:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c7a3db4a3d2dafbe186aa685f4736ea7d08c38
Validity
Not Before: Feb 2 01:00:47 2025 GMT
Not After : Feb 3 01:00:47 2025 GMT
Subject: CN=f2e3440d7af8a041bfd382dc9bb3c34dcf08658e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:41:20:67:5c:22:d3:ae:98:db:73:c6:30:0e:
f2:47:75:91:f5:f1:5c:8a:e7:9f:4e:83:f6:c7:27:
2b:a7:37:b2:0b:99:ae:e1:c5:2c:2a:68:c5:c8:a6:
b3:77:45:8b:5b:98:79:7d:9a:3c:8a:7e:dc:72:ad:
59:62:8e:3d:26:ec:77:20:48:92:0e:08:ec:a8:b4:
39:1b:84:10:9e:de:63:9b:d3:08:ed:9b:59:cc:19:
c8:4e:cf:5b:6c:a4:ff:04:a5:b2:fd:95:f1:28:38:
14:ee:35:f2:ae:2b:b4:eb:95:89:7c:99:81:ac:72:
9f:aa:eb:c2:2a:4a:13:df:83:99:99:7b:ec:b4:84:
dd:df:02:e4:0f:46:cd:8a:bc:6e:c6:7b:51:5f:31:
f1:6c:cb:2e:33:50:de:10:98:da:eb:15:c7:d2:8f:
d1:e3:81:0a:11:77:39:9c:fd:59:48:32:a4:ac:2c:
59:ed:7d:92:d9:2b:00:13:7c:6e:25:ee:59:a2:a6:
59:b1:e6:d9:ab:76:af:79:5a:a1:80:d3:64:ef:96:
8e:3d:88:1c:95:15:19:89:dd:5a:e7:32:6d:aa:b1:
dc:b6:ee:b5:85:ba:cb:4d:e5:d3:9c:5b:c9:4a:df:
cb:0d:3b:eb:ea:f9:8a:40:07:69:6c:c4:c2:56:1b:
33:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E3:44:0D:7A:F8:A0:41:BF:D3:82:DC:9B:B3:C3:4D:CF:08:65:8E
X509v3 Authority Key Identifier:
keyid:C2:C7:A3:DB:4A:3D:2D:AF:BE:18:6A:A6:85:F4:73:6E:A7:D0:8C:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:51:49:15:ae:ee:b0:d8:2d:b1:f5:a0:8a:fe:cb:26:35:7d:
19:7e:03:a7:23:98:b2:8e:4c:52:22:8c:3a:fc:fa:c9:40:5a:
35:56:a6:e3:25:58:e6:1c:a0:2d:51:a5:ce:56:4e:15:d2:a6:
2d:16:79:80:59:4c:49:9a:b4:04:25:08:da:a3:a0:a6:ff:89:
78:17:09:cd:54:0c:94:bd:af:dc:8d:16:7b:a1:71:d2:7a:41:
25:22:c9:01:d0:95:c3:c6:e1:15:59:b0:2e:6a:43:7a:5b:d0:
30:da:3b:43:67:af:9b:5b:93:09:24:3d:80:26:17:5c:0a:91:
bf:67:fa:f5:81:23:31:26:a6:f5:b3:b8:46:27:79:42:fc:46:
45:bf:84:b9:6a:51:06:13:1e:c9:d1:aa:57:42:21:20:98:e1:
83:2b:0d:fb:60:10:3c:d4:b5:06:5d:00:08:2c:62:a4:ce:c1:
80:53:0e:57:c2:8a:83:3b:3b:c7:11:9f:db:cf:29:4a:a7:24:
0b:0c:1c:23:a3:a4:78:98:2f:a2:09:b9:28:c9:35:33:51:8b:
b1:bf:68:eb:88:7a:b5:fa:32:33:00:13:ee:ab:cd:87:21:04:
7d:de:61:6a:b8:27:e0:9a:24:83:57:25:05:eb:83:d3:f4:58:
1f:0e:3e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:04:49 2025 by rpki-client