Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
File: wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft (raw, json)
Hash identifier: iCx/9MkOrIY80QT2FnDo7lH84Q9zepXaTfrth9rtDsA=
Subject key identifier: D8:CF:BB:B3:4E:21:BA:3B:7E:A8:6A:11:E4:44:31:6C:80:70:61:59
Authority key identifier: C1:37:F6:38:C0:BE:46:00:B4:66:DE:8E:33:0D:4C:F6:A7:FF:3B:3E
Certificate issuer: /CN=c137f638c0be4600b466de8e330d4cf6a7ff3b3e
Certificate serial: 0194C387A942016AF589DCC670D43D404DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
Manifest number: 121E
Signing time: Sat 01 Feb 2025 22:00:35 +0000
Manifest this update: Sat 01 Feb 2025 22:00:35 +0000
Manifest next update: Sun 02 Feb 2025 22:00:35 +0000
Files and hashes: 1: wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl (hash: cSaMXPieuIEkeenl57Enn7LrJUcZLZYPnfThnLo1ZrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:a9:42:01:6a:f5:89:dc:c6:70:d4:3d:40:4d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c137f638c0be4600b466de8e330d4cf6a7ff3b3e
Validity
Not Before: Feb 1 22:00:35 2025 GMT
Not After : Feb 2 22:00:35 2025 GMT
Subject: CN=d8cfbbb34e21ba3b7ea86a11e444316c80706159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e4:1f:9e:3c:75:e3:c1:3c:ec:7e:75:db:5c:
da:64:27:b7:32:b1:a8:73:e4:75:87:65:01:94:9d:
d1:4e:df:75:b5:99:e4:88:8b:4f:8f:ea:8c:76:02:
67:b5:1a:d2:7d:c2:79:79:4f:27:56:bb:97:14:4f:
2b:a3:c3:df:a7:b0:0f:a3:a5:92:a1:eb:da:73:49:
aa:89:b7:37:7e:e1:11:27:2b:3a:86:b1:2a:ca:92:
80:bd:34:55:ba:62:5b:e2:a5:9b:0c:4f:bb:a8:ca:
d9:41:51:85:ba:f1:d7:5b:5f:10:fe:0c:57:c8:0e:
df:6f:d9:d0:b9:37:c3:c0:17:35:63:dd:b0:6c:14:
cf:d3:9b:02:53:19:b6:5e:3b:0b:91:65:7f:f1:c6:
b0:d0:e2:73:2c:b0:aa:8e:04:c5:9f:ca:dd:65:b2:
d5:b4:fc:1f:4d:f8:3a:42:f8:85:41:df:ea:8d:c2:
86:45:8c:8d:48:61:e4:c7:41:cb:a1:b0:bb:e5:7a:
e1:ad:ce:f3:2e:86:e1:67:05:73:cb:a5:60:e5:29:
71:f4:b8:ae:d8:7b:0e:75:97:dc:fc:81:12:38:54:
08:76:05:a5:97:b0:57:89:68:45:94:a4:34:22:cb:
d8:8b:d2:98:17:94:76:c8:e1:29:ee:3c:8c:fe:4e:
11:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CF:BB:B3:4E:21:BA:3B:7E:A8:6A:11:E4:44:31:6C:80:70:61:59
X509v3 Authority Key Identifier:
keyid:C1:37:F6:38:C0:BE:46:00:B4:66:DE:8E:33:0D:4C:F6:A7:FF:3B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:93:8f:73:1c:91:47:04:d1:3e:43:4a:dd:c9:5d:c2:a8:ab:
fe:18:17:38:34:72:b4:76:70:b5:d8:aa:7f:cc:0a:b1:c3:b0:
8e:ae:4b:90:58:64:69:b3:9a:82:ea:00:19:d0:9c:fe:41:f0:
66:86:9d:b1:f6:89:ac:8a:f2:06:8f:1a:86:ef:e4:30:f4:6a:
f7:31:6b:b7:fc:48:e7:85:19:40:61:19:86:77:c1:d3:c3:c1:
95:5d:3c:19:d1:85:a8:3e:ab:e4:8d:fc:ff:eb:b8:e2:f0:ec:
4c:74:03:7c:ad:83:d9:f2:97:0c:23:ac:46:d6:f6:ad:16:82:
1e:70:e5:84:8d:a1:2c:85:2e:6f:c5:02:95:22:5a:3c:e2:57:
5e:b5:69:de:5a:b4:e6:d8:ff:58:a5:9a:42:29:4a:eb:9f:52:
7a:2f:88:0b:87:bd:67:d8:95:6a:e8:4c:50:29:2f:4f:36:e5:
fe:38:b9:23:95:0f:51:47:af:a0:88:bc:21:8f:28:50:83:a6:
1a:e6:94:51:55:bd:ec:0c:df:6c:5e:5f:40:2a:dd:5d:a3:68:
b1:87:6e:e5:9e:cd:3e:70:43:a9:be:27:25:f6:30:77:cd:a0:
79:7c:4c:fc:c7:d4:c0:b9:6e:aa:59:b7:d7:b3:08:a0:78:f6:
e0:50:59:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:53:08 2025 by rpki-client