Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
File: wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft (raw, json)
Hash identifier: oDHQKGRyWkxoCuxPqmn8i5XTu/1CUyDjX/qQLcnpd4I=
Subject key identifier: F8:9D:59:E5:24:F3:96:38:56:08:B4:96:69:C5:9C:31:99:B1:C5:A1
Authority key identifier: C2:A2:9C:C5:18:01:0F:76:76:35:3F:F2:96:64:4D:9B:D4:A3:55:CB
Certificate issuer: /CN=c2a29cc518010f7676353ff296644d9bd4a355cb
Certificate serial: 0194C38860E72CC503211E2272533C410A24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
Manifest number: 041C
Signing time: Sat 01 Feb 2025 22:01:22 +0000
Manifest this update: Sat 01 Feb 2025 22:01:22 +0000
Manifest next update: Sun 02 Feb 2025 22:01:22 +0000
Files and hashes: 1: ZWfwRz9SdF5HlUEU_xQsfm2pEuc.roa (hash: FPKU4sBZtKV03dopSyyPb4q2mr5BiiBfqidcOPbFyqg=)
2: o4qbcCQCij_4lrM4fuG-GZzDpjs.roa (hash: OQOBy/7xXgD89cYeKeQCwe26Q3oYa0ii7bEbJEXvS2M=)
3: wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl (hash: 7ae61Zrp/DSwAUih1kvWpS7OaZ8IbIXS6u12F9NRxak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:60:e7:2c:c5:03:21:1e:22:72:53:3c:41:0a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a29cc518010f7676353ff296644d9bd4a355cb
Validity
Not Before: Feb 1 22:01:22 2025 GMT
Not After : Feb 2 22:01:22 2025 GMT
Subject: CN=f89d59e524f396385608b49669c59c3199b1c5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:33:47:82:67:f3:f1:05:5e:4a:e3:b6:96:ba:
71:88:82:74:1c:f7:d3:23:18:ff:bf:86:4e:f2:6a:
0d:81:1c:ad:8a:89:61:9d:af:99:a1:13:80:22:82:
9c:1a:fd:c1:25:c3:a4:1c:c7:78:66:77:66:f3:95:
e5:1c:39:4c:c3:6a:93:10:12:2c:b6:8f:29:43:b5:
d8:bc:78:1c:5c:21:a6:b8:7f:2d:f9:f4:50:72:eb:
bf:dc:89:60:27:29:52:16:76:9d:b3:1b:75:f6:e2:
e4:b5:5b:9a:0e:bc:60:be:09:5c:be:24:17:bb:d4:
45:7f:ff:55:7d:e2:9b:07:48:aa:3f:5b:8f:65:e5:
53:ac:e7:b4:ef:41:5c:38:10:65:38:24:0e:b6:7e:
b1:72:08:70:9c:d1:ef:ad:85:69:1b:4b:8a:79:ae:
89:eb:f8:e7:b7:6c:1a:b6:0c:71:e5:c7:df:c7:d7:
94:c8:25:da:31:9a:ad:30:ef:f5:7b:35:26:c2:08:
9a:8e:27:6a:91:8d:02:30:12:f2:53:46:5a:4d:d8:
a6:62:20:fb:43:47:dd:bf:89:5d:81:5a:da:e4:4a:
7c:b8:18:b1:90:fa:e7:de:26:b8:b8:72:b4:d6:8d:
36:48:30:c8:e9:d5:f2:4b:58:64:f0:7d:f5:ae:b7:
40:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9D:59:E5:24:F3:96:38:56:08:B4:96:69:C5:9C:31:99:B1:C5:A1
X509v3 Authority Key Identifier:
keyid:C2:A2:9C:C5:18:01:0F:76:76:35:3F:F2:96:64:4D:9B:D4:A3:55:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:95:c0:a2:a8:e8:fe:ad:18:5f:e1:a4:ce:46:84:44:cb:ae:
5c:63:b7:ef:8c:b3:44:4d:1d:a5:b4:d0:56:b1:88:0b:5b:e8:
a8:0e:2d:83:52:6f:9f:bb:be:1a:de:d8:c6:0a:57:cc:3d:02:
04:59:c1:33:8b:be:c6:75:99:69:65:b7:41:a9:d2:e2:3c:6b:
cc:fb:6f:24:e2:6b:40:d1:d1:33:2c:96:54:ba:0e:2f:91:f4:
50:ec:bf:2c:dd:dd:af:45:91:4b:10:93:70:72:17:0b:8b:70:
ed:0c:2c:5d:74:03:54:ff:f2:a5:ca:81:73:66:9a:5c:cc:ce:
66:eb:37:c8:5c:2d:95:d8:05:0d:db:72:80:33:f3:2b:d3:5d:
a2:2d:45:98:30:4d:b4:a1:d9:6d:e1:da:d9:d3:06:8e:a2:60:
bd:2c:2d:97:84:8b:6a:bb:e4:56:77:f0:0e:35:50:63:6b:4f:
c6:51:9c:98:26:58:e9:6f:f8:b5:e3:70:94:42:85:19:ff:89:
d4:14:69:cd:7d:c9:b1:5e:48:55:64:bc:73:53:a3:87:da:2a:
48:ca:ec:6d:d5:a7:f2:f0:0f:70:80:b6:89:89:c9:33:eb:14:
4a:df:16:f4:b3:14:93:ea:95:38:22:38:53:2d:30:b4:8b:52:
ec:e0:05:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:04:06 2025 by rpki-client