Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
File: WwyVAj-g0zsibu8vIsjso5BSa_A.mft (raw, json)
Hash identifier: rPhJGDu8y5VjdPjgofyBPkFxdQhZ0lmzIkUZKrkVRX0=
Subject key identifier: 0A:5C:E9:BF:31:31:A2:16:93:08:03:29:F7:B7:44:6C:07:E9:55:22
Authority key identifier: 5B:0C:95:02:3F:A0:D3:3B:22:6E:EF:2F:22:C8:EC:A3:90:52:6B:F0
Certificate issuer: /CN=5b0c95023fa0d33b226eef2f22c8eca390526bf0
Certificate serial: 019369DA02CECD0282B8CBD497874DB53AB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
Manifest number: 0AAF
Signing time: Tue 26 Nov 2024 19:01:55 +0000
Manifest this update: Tue 26 Nov 2024 19:01:55 +0000
Manifest next update: Wed 27 Nov 2024 19:01:55 +0000
Files and hashes: 1: KNXHUtfBr2WNUIlcSIE1exE6bXs.roa (hash: ezIFPjZdzJQvNC7iqy3NBZLChvVi5hCDNBwqlePub0w=)
2: WwyVAj-g0zsibu8vIsjso5BSa_A.crl (hash: hkpl4gGWOm2jUQN2vPi4Juo74/M/lPFp8WQGylR/L4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:da:02:ce:cd:02:82:b8:cb:d4:97:87:4d:b5:3a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b0c95023fa0d33b226eef2f22c8eca390526bf0
Validity
Not Before: Nov 26 19:01:55 2024 GMT
Not After : Nov 27 19:01:55 2024 GMT
Subject: CN=0a5ce9bf3131a21693080329f7b7446c07e95522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6c:37:48:60:ff:f6:81:07:d9:d8:05:26:26:
bf:c9:57:dc:2c:10:27:c5:86:e8:ab:be:37:f3:35:
0c:6f:e5:9c:08:a5:ac:e1:98:6a:ea:99:99:c2:b3:
31:4c:77:cc:ca:9d:29:64:53:71:18:fd:15:09:96:
a2:5d:7d:a6:2a:37:e6:3b:7a:6d:83:00:59:be:92:
1f:bf:17:0e:27:6e:63:d2:9b:52:91:c9:50:e7:65:
81:7a:73:8d:7f:e1:6a:2c:d3:fe:39:05:31:2e:e1:
40:ba:ca:a7:2f:24:ef:c5:b4:da:5b:9c:60:c5:0c:
b1:75:bc:37:5c:a4:49:77:60:13:94:64:e9:89:da:
5b:94:cc:95:18:6a:7e:ff:63:ee:ce:44:bb:5d:e4:
6c:9f:20:ab:ff:33:a2:42:1e:56:ed:08:a5:e7:11:
38:37:f8:47:5a:5a:17:88:73:d9:13:28:4e:e9:8a:
d3:c7:2a:d9:b0:27:0f:73:f1:be:1e:67:97:68:b9:
94:34:e4:e0:ec:94:08:14:ce:b8:9a:11:26:7b:15:
47:1d:c3:c9:7f:15:a1:a5:74:53:9d:5b:62:53:58:
99:40:68:48:c8:e1:d4:66:4f:80:34:ac:39:96:c0:
2f:84:f1:14:54:20:57:90:98:12:c1:bd:04:51:8e:
59:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5C:E9:BF:31:31:A2:16:93:08:03:29:F7:B7:44:6C:07:E9:55:22
X509v3 Authority Key Identifier:
keyid:5B:0C:95:02:3F:A0:D3:3B:22:6E:EF:2F:22:C8:EC:A3:90:52:6B:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:3e:1d:ef:cb:a1:da:78:03:6d:16:59:38:00:e2:38:cd:f4:
91:dc:31:e6:4d:81:a4:76:f8:7b:c3:db:9f:63:30:05:16:d6:
56:2b:cf:9b:ac:55:85:af:98:86:7b:9c:c5:04:1f:43:fa:12:
6b:85:9f:f5:4a:ae:21:a0:33:06:62:34:97:74:c5:96:80:c9:
59:da:92:c4:6d:41:54:6b:a1:0f:00:a1:b2:29:40:74:d4:11:
7a:d0:9c:de:17:58:00:5b:e6:97:11:bd:93:c2:a4:01:9a:74:
55:84:67:27:c2:e5:43:59:35:df:c5:61:8c:d8:39:df:0d:17:
00:42:09:59:6d:10:dc:92:bb:a8:da:ae:dc:46:c7:cf:16:73:
5c:51:9e:35:1d:d0:1d:2b:df:a7:cd:4a:29:4f:b0:37:c6:e2:
68:e7:84:e6:78:c6:88:40:e4:4a:f1:3a:73:f6:f1:e1:9c:27:
d0:73:30:2c:57:49:8b:ae:2e:c6:bb:78:6e:da:47:6b:c7:a4:
5c:39:38:71:b3:35:92:45:d2:c2:c0:10:0c:f3:c7:d6:6e:bd:
4c:f0:a2:36:08:74:8c:6a:d0:ae:35:a5:51:ce:00:7a:5e:cf:
2a:21:d0:09:6f:b1:ec:02:20:d4:75:b0:37:9d:5c:8e:25:91:
6d:3b:f0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:17:44 2024 by rpki-client on console-ams.rpki-client.org