Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.mft
File: wuHdod9z8_9q5PXnx7JMqzXmhJ0.mft (raw, json)
Hash identifier: 5SvIUa+Acr11m0nvSC1wSHpTj6EXYOGNJZyhEfygaRM=
Subject key identifier: D9:12:46:E8:54:D1:D2:54:D1:0E:AF:E6:21:BF:D1:13:7E:BE:52:7E
Authority key identifier: C2:E1:DD:A1:DF:73:F3:FF:6A:E4:F5:E7:C7:B2:4C:AB:35:E6:84:9D
Certificate issuer: /CN=c2e1dda1df73f3ff6ae4f5e7c7b24cab35e6849d
Certificate serial: 019510C6DD44D631CADD3DF72A94EC3AEB10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuHdod9z8_9q5PXnx7JMqzXmhJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.mft
Manifest number: 1454
Signing time: Sun 16 Feb 2025 22:00:22 +0000
Manifest this update: Sun 16 Feb 2025 22:00:22 +0000
Manifest next update: Mon 17 Feb 2025 22:00:22 +0000
Files and hashes: 1: C5Ye6AW-98gvfnKh3BLJSV5ipoY.roa (hash: 0TAu53NWs0YR6cx7TDfJzDZx9gyaFfPOZu8ZpGicQ9k=)
2: wuHdod9z8_9q5PXnx7JMqzXmhJ0.crl (hash: JSgOeoPw2DmyI8LpnRLU7fgMPRUxzfp/j/CO6BW1RnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wuHdod9z8_9q5PXnx7JMqzXmhJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:dd:44:d6:31:ca:dd:3d:f7:2a:94:ec:3a:eb:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2e1dda1df73f3ff6ae4f5e7c7b24cab35e6849d
Validity
Not Before: Feb 16 22:00:22 2025 GMT
Not After : Feb 17 22:00:22 2025 GMT
Subject: CN=d91246e854d1d254d10eafe621bfd1137ebe527e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ac:77:d8:30:19:e2:91:66:e1:4a:73:08:bb:
4d:3a:0d:06:cb:3e:03:cb:51:89:c9:3d:55:fd:b4:
94:55:8e:c8:a8:d8:19:9c:72:3b:d1:0e:d7:83:fe:
99:34:9b:55:83:3e:d3:86:ca:6b:c4:38:3f:a7:00:
05:49:50:84:cb:73:4a:81:74:93:67:4a:55:2a:ac:
72:90:5c:9e:c7:f9:37:98:9b:fe:26:37:98:51:c2:
2d:f1:68:e5:b3:76:96:70:9a:a1:8d:b2:93:65:93:
a8:ec:87:01:39:eb:47:ad:b8:39:8c:20:01:d5:21:
74:ea:5d:ee:91:57:be:be:c0:74:22:48:e9:2d:76:
06:ae:36:5f:8e:aa:b9:3d:e2:10:89:a0:26:15:7a:
a2:18:b7:1e:37:f5:be:c6:2c:66:12:5c:3f:50:9e:
ba:1a:2d:24:6a:d0:a6:c9:71:07:c4:48:40:08:58:
39:0c:60:c3:13:78:b8:69:8c:bb:d4:da:c9:12:14:
dc:de:0b:27:9a:dd:5d:24:3d:ec:74:84:ce:c9:81:
12:6b:7d:8a:15:d1:cd:db:88:86:bc:3f:b0:a8:f0:
93:c7:a8:e9:1b:e5:76:af:af:c1:6e:85:2e:a8:14:
0c:20:43:30:35:77:50:24:98:0b:ba:16:ca:c3:86:
7a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:12:46:E8:54:D1:D2:54:D1:0E:AF:E6:21:BF:D1:13:7E:BE:52:7E
X509v3 Authority Key Identifier:
keyid:C2:E1:DD:A1:DF:73:F3:FF:6A:E4:F5:E7:C7:B2:4C:AB:35:E6:84:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuHdod9z8_9q5PXnx7JMqzXmhJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:41:1a:2a:97:e2:49:b5:a4:8d:60:68:9a:de:df:5e:af:95:
c9:23:7b:da:26:e5:68:65:96:7f:f4:0d:0c:d6:8a:30:2b:0f:
18:c8:e6:f8:a6:b3:be:d2:b3:d6:c3:57:39:67:05:f0:83:1c:
bf:64:c2:d7:b2:64:05:4d:65:ec:1b:4b:f7:ca:a6:8d:45:b9:
17:70:96:91:6f:14:28:db:16:34:b8:0c:4d:a1:0e:66:0e:b0:
6d:fe:8d:c8:a9:ed:01:17:9f:b7:cc:e0:37:95:97:86:c6:3e:
28:83:98:ef:a1:a7:31:73:e0:c5:43:b3:29:65:8f:f8:81:4f:
9d:f5:f7:87:1d:22:46:44:db:95:46:ef:99:a0:07:c2:bb:45:
5a:e8:93:ca:e8:ed:10:5e:59:25:52:27:4a:ce:8e:d2:b7:58:
c1:c3:fe:82:b8:66:7e:78:bc:05:b0:b4:ea:b9:7c:8e:0f:53:
78:8a:f0:1c:0f:d7:4f:de:83:ae:ae:78:9c:77:31:d8:4d:10:
7c:7d:da:df:be:5c:5d:c9:da:d4:79:ae:d5:91:b7:c1:d8:44:
04:24:2e:1d:af:95:f9:8e:39:0f:ac:d5:9d:37:57:22:0a:0b:
8d:cd:99:ba:7f:fb:5f:92:df:d4:24:8c:f4:c0:c7:23:0c:c0:
15:99:c3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:29 2025 by rpki-client