Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
File: WtoRVWOZ4o_FXas7oHho_0kcb7g.mft (raw, json)
Hash identifier: rn9ce3uB6s5MVrhvgWQdDfVkdIOoFtXgUUXQjuDM1Fs=
Subject key identifier: CC:BA:A4:03:EF:CA:E7:D7:7B:9D:8B:73:33:A0:45:1D:80:C7:03:EC
Authority key identifier: 5A:DA:11:55:63:99:E2:8F:C5:5D:AB:3B:A0:78:68:FF:49:1C:6F:B8
Certificate issuer: /CN=5ada11556399e28fc55dab3ba07868ff491c6fb8
Certificate serial: 0194C507F15BA92802B684AEB350E704C226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
Manifest number: 0D7B
Signing time: Sun 02 Feb 2025 05:00:19 +0000
Manifest this update: Sun 02 Feb 2025 05:00:19 +0000
Manifest next update: Mon 03 Feb 2025 05:00:19 +0000
Files and hashes: 1: WtoRVWOZ4o_FXas7oHho_0kcb7g.crl (hash: 5qc86xrR1q5xv57SlI3rEphC960LHa4siYCDRTHzzYY=)
2: taSqw31_rwZ-hq0xkmTZUp1cyvw.roa (hash: V6lzw9iNkrzm6qgoGO8eVYLPpqNejoCjLT7yaMGPS3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:f1:5b:a9:28:02:b6:84:ae:b3:50:e7:04:c2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ada11556399e28fc55dab3ba07868ff491c6fb8
Validity
Not Before: Feb 2 05:00:19 2025 GMT
Not After : Feb 3 05:00:19 2025 GMT
Subject: CN=ccbaa403efcae7d77b9d8b7333a0451d80c703ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:50:3c:e1:66:0d:69:8c:ee:af:0b:17:74:f8:
00:d7:7e:6a:00:e2:be:43:f2:b8:2b:04:ad:14:78:
ba:6c:df:04:51:64:21:75:23:ab:5e:fe:f8:bb:d6:
47:f0:a9:32:15:a7:6a:81:e4:f1:37:91:c1:ce:fa:
85:b2:55:a9:f1:18:6e:50:83:a8:23:bd:7d:8f:ca:
7e:7b:19:85:3e:c4:0d:eb:f8:54:58:11:47:67:69:
06:a3:90:ae:59:4e:f3:1d:d6:6a:ea:46:f4:69:b6:
82:02:89:fa:42:41:62:0b:ed:24:df:c0:5d:d8:9b:
8f:73:b7:a0:38:ec:9b:4e:e3:69:91:c7:c0:24:3e:
df:9c:da:17:c6:ce:29:82:cc:56:15:e1:88:77:6a:
ff:a7:04:23:d5:bb:e6:d8:96:1a:5d:20:3a:ee:24:
f1:6b:de:fa:20:16:d5:4d:e2:ca:6b:c8:90:b3:e2:
23:47:33:36:e8:5b:ee:b8:c8:9f:0a:ed:e0:88:c7:
1c:75:2a:8f:01:a6:8f:93:05:ec:42:af:1e:75:2f:
42:cc:81:34:80:5a:80:57:86:93:fc:06:9f:e7:45:
91:e9:b6:09:31:c2:0c:12:23:3b:61:17:93:e5:ab:
01:ec:78:dc:11:6d:4b:57:0f:5f:60:1b:8c:de:3d:
aa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BA:A4:03:EF:CA:E7:D7:7B:9D:8B:73:33:A0:45:1D:80:C7:03:EC
X509v3 Authority Key Identifier:
keyid:5A:DA:11:55:63:99:E2:8F:C5:5D:AB:3B:A0:78:68:FF:49:1C:6F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ab:41:38:1f:0a:47:b4:d3:d4:c8:b9:b1:83:88:de:a2:b3:
22:25:8f:d6:d5:ae:b8:28:11:b4:13:88:6d:94:40:4f:3d:c9:
d6:fe:06:53:ae:6c:05:3e:8c:b6:40:98:87:f2:63:52:d5:ab:
5a:a4:68:00:82:41:99:80:dd:95:9c:fc:cc:f2:b9:89:13:a0:
04:4c:db:07:91:aa:3a:a7:4b:1d:eb:2d:cf:dd:94:18:76:fe:
eb:cf:de:4d:23:03:53:e2:f6:ea:b8:2b:b2:c2:b5:64:eb:42:
6c:b4:9f:b7:96:e9:cc:b8:74:2a:74:2d:d0:93:f3:55:5a:13:
e0:14:4d:d0:64:de:02:d8:f8:2d:46:6a:c8:6e:91:91:86:97:
83:3a:b1:4b:f0:4a:23:04:b6:9b:d1:ad:ba:0f:87:87:ec:ad:
70:70:f0:0d:62:26:7c:79:47:6d:7e:9b:ba:39:68:83:48:38:
12:16:c8:92:37:52:60:dc:7b:30:55:7c:d8:19:bc:f3:e5:c6:
3a:71:32:63:5b:8f:d7:6e:1c:15:b4:70:d5:02:7c:a6:e5:37:
b1:ea:ec:36:34:d6:4f:5c:fd:64:05:6f:d3:c2:c2:72:19:23:
ca:85:ee:8f:42:0b:21:64:81:01:b6:2b:d6:e3:86:a4:6c:99:
76:80:34:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:55:46 2025 by rpki-client