Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
File: WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft (raw, json)
Hash identifier: VL+2pB7yp++1AQMI/9jrfzqNb/qpmRF1z5ijr5+tJ+g=
Subject key identifier: CA:F5:F9:7E:01:3C:4C:4E:FC:8F:54:6D:34:39:45:A3:6E:02:44:FC
Authority key identifier: 58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18
Certificate issuer: /CN=58cedba67a45b737d8ad0f7a784c350d86d67118
Certificate serial: 0194C4D1671EBE22882712D83F8DCC5828E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
Manifest number: 31
Signing time: Sun 02 Feb 2025 04:00:45 +0000
Manifest this update: Sun 02 Feb 2025 04:00:45 +0000
Manifest next update: Mon 03 Feb 2025 04:00:45 +0000
Files and hashes: 1: MzdQsDB1AACOG2EyiBlrqIPuVdY.roa (hash: nb+ptkiMxODpHnRgVbj2TaDnZ7JIdyQXT5CZFak+Qnc=)
2: WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl (hash: K28FQJcXJZ0pjclD4mJ9OQaemAmAUYOpSApkqg/aMEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:67:1e:be:22:88:27:12:d8:3f:8d:cc:58:28:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58cedba67a45b737d8ad0f7a784c350d86d67118
Validity
Not Before: Feb 2 04:00:45 2025 GMT
Not After : Feb 3 04:00:45 2025 GMT
Subject: CN=caf5f97e013c4c4efc8f546d343945a36e0244fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cc:c6:3f:15:c1:7c:ed:47:cb:0e:cc:50:54:
68:6b:45:d1:ba:48:5f:da:e2:a3:9e:09:4e:c2:37:
15:c1:da:ce:0d:e2:4b:a0:dd:12:ec:a6:85:53:fc:
c8:64:9c:a9:51:cc:ec:90:7a:f1:f6:55:70:96:63:
dc:c0:b0:d5:56:b1:1f:ad:3a:b6:d8:e0:73:ad:43:
47:00:be:f9:16:37:ef:fc:7a:9e:b7:3f:a2:b0:c1:
b1:59:b8:d4:a5:1a:9c:0a:3a:21:a6:fb:ed:d8:06:
6b:3f:7a:00:b1:ac:2f:c1:81:a9:ce:9e:90:ac:b7:
06:d5:92:7c:a6:cd:de:aa:16:e9:ae:f5:4e:b5:0e:
57:33:eb:08:10:45:cf:e3:93:aa:ac:e2:3e:0c:46:
89:ab:79:e8:6a:7f:5b:29:2b:fb:e9:bf:15:6a:da:
42:0b:3a:be:46:b7:6a:86:c4:b9:8b:84:3d:90:8f:
f8:2e:61:e7:eb:0b:40:f5:09:07:0c:67:50:2d:25:
78:9d:8a:aa:c6:7a:b0:34:2f:f7:99:31:24:18:fa:
38:68:f0:ef:e1:81:ea:22:b9:59:78:a1:d0:60:08:
98:82:f0:b2:9f:da:1c:f7:af:20:44:54:00:86:b8:
f2:d8:a4:7c:3b:fb:da:8a:0f:81:a1:6f:92:e3:a1:
d8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F5:F9:7E:01:3C:4C:4E:FC:8F:54:6D:34:39:45:A3:6E:02:44:FC
X509v3 Authority Key Identifier:
keyid:58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:64:3f:3d:ea:0d:ab:81:90:35:35:08:8b:85:5d:b6:2b:f4:
7e:72:3c:76:e7:58:19:b8:59:b6:33:55:4c:d2:e1:dd:48:b1:
0e:cc:cd:4a:67:d1:67:e2:6e:cf:e7:d2:da:91:ff:ea:1d:9b:
4b:af:b4:c3:b0:9d:e0:69:55:87:8b:54:ba:be:35:01:59:e8:
4e:45:23:23:28:03:ec:fd:7e:f4:8e:99:e3:60:31:26:c2:97:
47:96:d3:2e:58:2b:56:60:dd:ba:36:54:f1:6a:75:3f:f1:39:
2a:cb:fe:0f:94:35:c3:9d:21:27:a2:36:24:32:54:73:8d:fd:
5b:8d:89:b7:8c:46:06:c0:f5:47:65:b8:9f:22:39:92:b6:84:
ac:d3:c7:33:55:bc:b5:de:33:3f:69:ec:90:8f:91:52:5a:49:
ae:ef:48:73:cc:93:7e:cf:77:cf:2b:14:28:67:57:56:53:c0:
ba:1d:d2:b4:0c:20:9f:dc:e5:1a:98:c2:df:71:4f:ef:ea:fa:
5d:65:d4:39:51:36:7f:36:57:f4:bb:26:f6:f1:6f:42:95:6f:
f6:34:88:0d:01:24:b3:a4:4f:6d:e2:62:a5:5f:65:03:e2:93:
e5:fc:9b:82:f4:2b:5c:e1:e2:1c:97:ca:4f:3f:e8:d1:a9:ee:
e2:d3:2d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:38 2025 by rpki-client