Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
File: WFPmWjCHtMqFyIArYP8PArQQbZc.mft (raw, json)
Hash identifier: 9mJtziWFq3KuNwLEp+Yxp7rxk1YG+WUTnRyaXeqlWg8=
Subject key identifier: 8F:BF:E6:6D:5B:41:EA:4A:D6:EE:63:70:34:DF:0B:65:7C:25:09:57
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Certificate issuer: /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial: 019511352B3A7E1F3C32DC7C9BD3FDBAA78A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 00:00:51 +0000
Manifest this update: Mon 17 Feb 2025 00:00:51 +0000
Manifest next update: Tue 18 Feb 2025 00:00:51 +0000
Files and hashes: 1: 02c0qJQBaigaXqN3maDpONIFFAc.roa (hash: vlyVQJ8T6zqr0LECSkvXw3QlmL9Yjq/p8Uw6tjeUbr0=)
2: MrwCb1VshNGuSjy8-ZcrQ_jjBz4.roa (hash: RL8Yc0SUjE/2UAMDk7eU+CcumrO0VbncY+6nMnTALA4=)
3: Pg2gOuPKcxedaD2sl59MmthUm3Y.roa (hash: WZc+oVHpNNLn5e9mOqx5XLubp1FGZ4dlKP4oaNZHVd8=)
4: WFPmWjCHtMqFyIArYP8PArQQbZc.crl (hash: vmkqGojyLyatfaZaKTRKTlG9kispVUQAVvc361t705Y=)
5: ahTFb9S5fLEMmoyGHiPW-vefiaQ.roa (hash: zqpUKAyeaL36v8tPjx+vALU808R28L9YVhwRYuClrAU=)
6: ioEYoSKyEtfdiu8IAgBkdSDUxq0.roa (hash: CEmR3YzuPC7K/CwWVdeEu1K1wp1B5QCNbwR4nRi5bvI=)
7: navET64WjDznMyZwQ_DOauhQ_9c.roa (hash: 0cyJx0VGxqHx5SG278Ye2Mukf1TTlmRpgV9pjTpL9aA=)
8: rrWx_KVK0nRTRlZQQB4TJRqTC28.roa (hash: BETaqE0/0r4sYx0mpie4wQWJFL1T5S0trn7rIn0+6Eg=)
9: txKA05gc1PNEhcuQ9gw4JRL4SOg.roa (hash: ZxoTI5LHLJfIjBc6aAlc7tJn+4E9R4JWht3d4AMJtIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:2b:3a:7e:1f:3c:32:dc:7c:9b:d3:fd:ba:a7:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Validity
Not Before: Feb 17 00:00:51 2025 GMT
Not After : Feb 18 00:00:51 2025 GMT
Subject: CN=8fbfe66d5b41ea4ad6ee637034df0b657c250957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a0:76:93:fa:b7:f0:89:f3:96:30:d9:c6:88:
d1:8b:c5:cb:44:11:8d:ee:80:3b:4a:b3:0c:be:be:
f2:bb:45:6f:e2:c3:25:b2:25:37:41:ee:db:12:8e:
93:f2:0e:05:99:3a:88:6a:c0:8b:a2:fb:63:fe:c7:
a7:69:3a:4c:6a:35:7a:e6:ad:48:2b:b7:5c:8e:bd:
51:1a:7c:21:09:46:8b:5a:5b:cb:95:f7:15:88:3c:
30:07:1e:f3:51:b1:ee:23:a6:76:30:60:74:56:2f:
af:ac:33:a2:c4:1f:1e:db:25:b0:c7:9a:ab:22:c2:
4c:dd:b9:8a:4c:90:e4:41:44:6c:29:f7:99:20:a0:
6e:b5:cf:27:9a:ab:58:82:13:06:79:df:6f:8b:6e:
96:4c:9e:1c:6f:a1:30:a5:69:cc:ea:66:b1:3e:43:
46:c1:a5:c7:32:3a:f2:50:1f:5f:c7:d4:40:a2:8a:
44:2f:7c:b7:58:0c:a3:be:01:d5:69:6d:ca:f9:bf:
54:12:d9:f6:f4:be:21:65:55:62:cb:b6:07:57:3d:
24:ae:50:c2:85:30:62:1e:77:3c:37:26:0b:f8:16:
83:ba:8d:18:36:38:22:f7:9e:a3:5e:eb:8a:11:60:
92:1d:38:97:d8:b9:58:9d:c6:58:32:31:06:24:ee:
dd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BF:E6:6D:5B:41:EA:4A:D6:EE:63:70:34:DF:0B:65:7C:25:09:57
X509v3 Authority Key Identifier:
keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:50:bc:c2:25:90:20:77:bb:39:b1:74:9d:b1:e8:be:05:94:
0b:42:70:97:97:23:25:0a:20:76:93:e7:08:f2:79:8d:ec:bf:
98:9f:49:7d:1f:15:e7:c0:33:9d:7e:de:77:72:70:67:22:9b:
00:1b:2b:3d:cf:aa:c4:98:eb:da:9a:9d:c7:93:5c:a9:01:5d:
14:47:29:b8:01:ff:ba:1e:ed:08:e5:e2:97:53:25:a1:a1:cd:
c3:30:eb:0c:bf:df:cb:21:a1:3d:d2:9a:09:cd:63:61:66:c3:
89:14:d9:77:15:76:6c:20:6e:f9:88:d9:57:6a:a0:72:4d:0d:
24:3f:ac:53:cb:33:a3:05:dd:e2:1b:05:c7:5a:e4:c4:ea:2a:
8c:17:71:41:7c:1c:3d:03:9c:f1:4f:54:f9:1e:e8:67:92:03:
0d:a4:5a:a8:41:c7:e7:78:b0:2f:db:27:cf:3e:ff:00:aa:53:
89:bc:8c:31:b3:2d:1a:05:c2:74:8b:b9:1f:73:96:3a:df:dc:
bd:10:10:0c:07:42:0f:85:f0:b5:2d:e3:14:83:88:18:82:34:
ac:f9:11:8a:8d:df:71:cf:95:11:8e:38:7f:d6:fe:0c:9c:a0:
11:43:32:e3:e1:84:b2:32:94:d6:35:1b:35:9e:f8:12:60:f2:
9b:1f:83:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:27 2025 by rpki-client