Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
File: WQB0CLv4rZBE3mgEZYfHWJty6-8.mft (raw, json)
Hash identifier: SItoLFa0qYl1f+8M7X/YCYVGzaJmfmLng16kdn+VqfM=
Subject key identifier: 1B:1A:1D:F0:5D:76:19:D4:7E:35:74:6C:F0:75:EE:69:E7:CD:86:E1
Authority key identifier: 59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
Certificate issuer: /CN=59007408bbf8ad9044de68046587c7589b72ebef
Certificate serial: 01951134CF9E4156D99B0EBE4D8DE00B6F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
Manifest number: 0DD4
Signing time: Mon 17 Feb 2025 00:00:28 +0000
Manifest this update: Mon 17 Feb 2025 00:00:28 +0000
Manifest next update: Tue 18 Feb 2025 00:00:28 +0000
Files and hashes: 1: WQB0CLv4rZBE3mgEZYfHWJty6-8.crl (hash: IkqAzni4xAo/4n70tdL+IGvXwWxmiUof92Ly/cwB/rg=)
2: rwRRPql1rIQzsq_i06yzoO2wgHQ.roa (hash: 0FdnTsSRRUfY+3q4ZnKlxf+D+uYOXphiuhAQtxiPw20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:cf:9e:41:56:d9:9b:0e:be:4d:8d:e0:0b:6f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59007408bbf8ad9044de68046587c7589b72ebef
Validity
Not Before: Feb 17 00:00:28 2025 GMT
Not After : Feb 18 00:00:28 2025 GMT
Subject: CN=1b1a1df05d7619d47e35746cf075ee69e7cd86e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c6:ef:fe:ad:9d:26:ee:1e:16:17:9f:5f:73:
08:d7:f2:84:73:3f:a2:b4:6a:b9:5d:40:f6:3c:e4:
31:30:9b:21:8c:51:d1:b6:1f:10:ac:ea:0f:5b:10:
de:9d:0e:f9:45:48:c2:c3:fd:0b:7d:6e:d9:9b:60:
a3:7d:11:89:37:cc:20:20:55:61:fc:23:17:35:da:
04:91:d1:4f:06:0b:50:4c:d8:2f:7a:fb:63:25:79:
44:b2:32:23:a6:47:21:34:a6:8a:03:8a:cc:ed:de:
ae:87:02:1a:af:c6:3e:d5:37:c5:81:1d:ec:f7:4d:
41:f8:88:83:03:0d:e1:20:31:3a:e0:7b:4e:a4:c3:
fe:78:ca:9b:6c:39:03:a5:4f:42:1f:b3:57:90:3e:
49:a2:83:02:4c:e9:66:17:da:ef:67:87:d8:a1:f7:
35:43:e3:f9:65:84:f8:99:86:01:cb:27:f1:3b:f3:
f4:32:da:25:88:6d:5b:a5:83:c6:87:46:49:5b:12:
ad:89:53:5e:05:e8:7a:c0:aa:de:8a:19:e5:bf:e5:
1b:dc:47:a3:34:b2:2b:ee:0d:1e:ad:8b:e2:c7:73:
29:9e:61:3f:18:ee:7a:8e:97:00:31:37:6f:5b:07:
00:f3:9d:d8:72:cd:b8:60:11:8f:1c:87:71:53:fe:
cb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1A:1D:F0:5D:76:19:D4:7E:35:74:6C:F0:75:EE:69:E7:CD:86:E1
X509v3 Authority Key Identifier:
keyid:59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b5:b4:fa:c3:af:96:26:7a:62:4f:40:e7:ed:8e:6f:12:4a:
83:08:fb:7a:f0:0b:1c:9d:db:60:5e:a8:15:cd:8d:40:bb:5d:
e2:b0:81:c5:d3:b7:dd:6f:97:6e:2d:39:38:0d:94:40:31:b8:
82:af:4d:24:1c:8c:04:15:53:cf:01:85:e0:68:62:24:42:ee:
ba:b9:2e:69:01:60:60:00:80:59:80:b0:3d:d4:75:d1:f5:23:
ce:c5:30:53:f4:a0:03:b5:78:6e:d2:0a:05:52:91:e7:c4:63:
a9:0c:8e:8c:62:8d:5a:4b:61:99:24:4a:dc:46:dc:cc:e2:82:
63:d6:8f:4b:55:25:68:47:8b:98:df:0f:7a:18:f9:be:9f:64:
df:6a:e8:ca:35:ea:3f:9a:4b:90:de:e5:4b:f5:81:c2:17:52:
62:82:0c:76:33:fa:2b:db:18:b4:d1:58:f0:6d:fb:44:e1:13:
78:78:90:05:6d:ef:6f:d1:0d:bf:5c:e9:8f:ce:07:97:28:7b:
83:e9:c3:44:dd:d8:00:32:80:f0:dd:eb:a0:e5:23:2b:a3:8a:
50:ff:2d:1f:d0:aa:d2:78:dc:fc:88:d7:88:57:72:29:fd:86:
9e:d4:67:02:f4:f0:f4:18:3f:56:2d:7c:18:d7:11:39:d6:1e:
6e:3c:9a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:56 2025 by rpki-client