Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
File: WB7MGnTPkqthnF9xASOTfOUNnEM.mft (raw, json)
Hash identifier: MEKYRdMdbBVVLnxwYrpZ681E4QKxslUgsN8V+X5H1vY=
Subject key identifier: 40:5C:19:C3:29:52:42:D3:65:FA:64:40:35:8B:7F:92:DD:EB:1A:B8
Authority key identifier: 58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
Certificate issuer: /CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Certificate serial: 01951134A1DEF2F207E182F6513504B12BCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
Manifest number: 1460
Signing time: Mon 17 Feb 2025 00:00:16 +0000
Manifest this update: Mon 17 Feb 2025 00:00:16 +0000
Manifest next update: Tue 18 Feb 2025 00:00:16 +0000
Files and hashes: 1: FRO4uwByqKxauyS9gXAIPw-fjUY.roa (hash: S7+hb35+hDpVRPSEr/9Dyjjwa4OmuFnKDBhwrckl+dA=)
2: WB7MGnTPkqthnF9xASOTfOUNnEM.crl (hash: jR7tk1CeJmO+Rfk7HU8bPS2PSA3wcoFxKXMz0qbvceU=)
3: kRJQb1l8os5CIqMOU8LBEruOTx4.roa (hash: TdXs2Jpp+ognrukNFJlpBqk3DPNKW0kibHKNgBtL5tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:a1:de:f2:f2:07:e1:82:f6:51:35:04:b1:2b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Validity
Not Before: Feb 17 00:00:16 2025 GMT
Not After : Feb 18 00:00:16 2025 GMT
Subject: CN=405c19c3295242d365fa6440358b7f92ddeb1ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d3:7b:8f:4e:37:03:7e:27:9d:71:cb:0f:3d:
4c:20:08:a3:23:ee:4a:0b:bb:4b:fb:c8:72:98:8b:
51:76:ca:7e:f1:4c:b4:03:20:ef:fc:80:e5:1d:7f:
f5:33:b8:30:f9:df:30:c6:56:e5:3c:04:24:f2:ee:
0f:25:7e:ca:ed:1c:51:11:20:f8:54:a4:ad:b1:93:
da:61:ce:60:ab:52:79:98:50:af:97:36:8b:fd:3a:
56:35:bc:1e:eb:2c:31:c5:26:40:69:f2:5b:49:27:
56:35:e8:f8:de:f2:94:a2:2c:24:9d:8f:ce:29:6b:
99:08:0a:9b:fc:d0:c5:eb:bb:5e:47:be:08:83:df:
73:5b:36:e8:ba:61:8f:5e:81:81:b2:f6:d7:63:36:
66:c1:32:92:85:7b:0c:c6:a8:58:a1:a8:b9:49:db:
26:9f:9b:19:48:60:5f:e5:4c:7e:29:86:6a:a6:b5:
43:df:49:d9:50:a8:90:b2:f6:00:b0:fd:e0:9b:ad:
8b:1b:57:6d:4e:14:cd:c4:9e:80:3b:68:21:b9:e8:
13:0d:19:3c:a3:60:bd:77:cf:d2:bb:d5:c1:2c:e2:
ae:26:2f:a3:8a:78:71:2f:70:cc:f3:5a:fc:54:b4:
7d:06:41:36:f4:c3:61:e7:16:b2:0c:8c:25:bf:80:
cd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5C:19:C3:29:52:42:D3:65:FA:64:40:35:8B:7F:92:DD:EB:1A:B8
X509v3 Authority Key Identifier:
keyid:58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9d:40:ad:2b:89:5f:3e:a7:eb:89:20:74:d2:1c:32:da:f0:
2f:ac:1d:51:02:98:c8:75:2c:ea:d8:10:76:26:6f:7b:4f:14:
b6:8e:ec:4c:db:ea:3b:36:41:74:af:b3:90:98:5e:97:81:4b:
57:48:8a:75:cd:aa:fb:90:2b:bb:ab:0d:ed:23:e1:c9:e0:42:
94:3f:25:2f:28:3c:c1:6a:08:6f:e0:2b:3d:17:78:f0:32:0f:
8d:71:d6:a8:fc:06:7f:76:83:a5:c9:d5:11:75:b2:34:9b:83:
da:62:d2:81:3a:19:48:75:43:47:70:5f:69:ab:81:57:1d:21:
96:b8:5c:7c:22:9c:47:cd:fd:4f:a6:89:ca:61:77:c5:bb:3c:
bc:33:a8:0c:74:90:f5:d8:30:8b:ab:34:30:22:eb:e5:12:3d:
99:73:ef:63:fc:8e:11:5c:55:84:6c:33:e5:94:b4:dc:1b:41:
34:25:15:32:dd:fb:65:17:8a:1f:fb:dc:7e:4a:db:bd:b8:23:
a2:1e:c1:27:ab:3c:f1:82:c0:c0:61:5e:01:8e:62:fb:aa:09:
26:ec:24:00:e7:33:7a:c2:9e:1c:0d:1d:f5:c6:33:76:2d:6a:
e5:62:5a:31:56:3e:dc:e7:ad:93:71:af:7a:ec:b2:bc:c6:13:
d2:9e:58:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:38 2025 by rpki-client