Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
File: WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft (raw, json)
Hash identifier: 3E/P9HxKqvrdS8jaAzkaZ702vkQpZUmb/Jzub/JXHKQ=
Subject key identifier: A7:7C:9D:E3:99:EA:13:89:BB:A7:38:90:D6:63:3F:B1:8E:1C:D8:C7
Authority key identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
Certificate issuer: /CN=58a127453dfba17e10c347fa34bbebab14905a57
Certificate serial: 018F87493D130CDD3AD4A73A17B88E54422A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
Manifest number: 0285
Signing time: Fri 17 May 2024 16:01:14 +0000
Manifest this update: Fri 17 May 2024 16:01:14 +0000
Manifest next update: Sat 18 May 2024 16:01:14 +0000
Files and hashes: 1: TggVPDaH2G3YILeQIuc9Qwvnl9w.roa (hash: Eoc17hEATULq2ABu44rlTaUJyZNXhapaEk8rMSw7Hoc=)
2: WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl (hash: 5a251rlNshu/38vxG5/EAlAtU7O21NALjXsxqMtqEmA=)
3: xZWQ3LurCLoNj9UeUy81wNs27v0.roa (hash: 0FeLjTVSGEwX1WhEacFPIEgbPevyUIdtD+pbT1ffaT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:49:3d:13:0c:dd:3a:d4:a7:3a:17:b8:8e:54:42:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a127453dfba17e10c347fa34bbebab14905a57
Validity
Not Before: May 17 16:01:14 2024 GMT
Not After : May 18 16:01:14 2024 GMT
Subject: CN=a77c9de399ea1389bba73890d6633fb18e1cd8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1f:77:0c:08:bf:ed:2c:9d:ef:7c:28:5a:ea:
a2:e9:c2:7a:73:08:07:7c:91:d8:3b:e8:50:cb:b1:
f9:eb:73:32:d7:ee:bd:b7:16:07:12:9e:7a:ae:e1:
2d:7a:b2:03:f2:5a:92:a0:b8:4f:32:a5:ed:88:96:
63:79:7e:98:8e:10:30:e3:f9:a5:ec:5f:10:d0:ea:
dd:4c:af:f6:73:a1:36:18:a5:e1:0e:a8:96:11:c4:
f1:f2:20:fd:e7:5a:e2:81:60:28:4f:66:5b:e8:b9:
aa:e5:bf:ab:58:94:c0:ce:d5:fe:fd:ff:ca:76:ae:
ae:0c:4e:2a:be:94:eb:00:f9:11:91:de:34:08:e2:
96:5e:78:8c:07:a0:eb:e8:ac:10:bc:c4:68:92:af:
b5:60:ee:51:9f:cb:19:f7:c1:42:6c:ba:8f:7b:7d:
29:37:8a:66:7a:21:63:f7:06:ca:81:fb:dc:d1:e6:
50:e0:26:7f:96:30:2b:3a:d8:29:e7:d9:9d:86:ef:
60:82:a1:dd:23:33:8c:a0:0d:d8:c8:da:d0:3d:be:
f0:08:20:0b:63:b4:dd:85:6d:5b:e9:49:25:30:cb:
c5:c1:95:eb:ae:8a:23:64:fa:b6:c4:98:2e:17:68:
22:76:fd:2d:7a:aa:af:d3:9c:b7:b6:7d:50:37:a3:
fa:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7C:9D:E3:99:EA:13:89:BB:A7:38:90:D6:63:3F:B1:8E:1C:D8:C7
X509v3 Authority Key Identifier:
keyid:58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:3d:85:6c:86:8b:62:22:99:d6:8e:51:99:fe:51:c0:b5:1d:
32:a1:e6:d6:7e:0c:0c:b7:0a:dd:0b:82:87:51:e4:ce:84:76:
c2:35:b2:26:05:5d:42:d3:d3:6e:7d:b1:f6:9a:59:25:15:e6:
b1:55:22:96:a5:5e:db:20:f2:53:a2:32:f5:87:88:65:94:05:
1e:6e:81:0d:0a:53:77:62:a8:52:63:bd:2d:7e:57:5b:61:58:
ab:2f:4e:dd:1e:f0:03:7b:42:87:8d:e9:b9:64:25:70:b6:92:
16:5d:d6:fa:fd:30:df:3e:20:c6:7c:3a:0c:f9:23:f9:68:31:
c6:6c:93:28:6a:c5:a0:88:bd:47:62:28:40:e5:37:8a:7b:93:
d9:e9:55:68:b2:ed:52:3a:6e:a1:18:8e:85:9b:ac:31:20:be:
9d:75:41:c7:70:75:d1:93:9b:aa:cc:d8:88:28:02:6c:29:11:
a0:c7:ad:ae:3f:64:9a:51:4a:01:f3:81:5d:d8:ec:00:30:cf:
64:a3:d6:a8:4a:b9:38:53:43:e0:f1:67:a6:b2:29:2c:04:10:
fe:ef:fc:42:df:15:e4:ac:11:5c:47:d6:ef:df:7b:d4:c7:41:
3d:17:49:6a:91:70:0c:67:6e:df:54:db:bf:0f:09:52:27:42:
d8:99:84:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:05:23 2024 by rpki-client on console-ams.rpki-client.org