Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
File: wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft (raw, json)
Hash identifier: ZPfoaa89xl7iVIH7ODYSkaoUFNaATm2nB7CNFOHYZoc=
Subject key identifier: D5:E9:E0:69:D3:47:35:A2:11:80:60:9A:A5:E1:71:AA:A9:69:CE:7C
Authority key identifier: C2:08:97:C1:DB:D6:06:92:91:37:E6:72:BA:D0:C1:F6:7E:63:7D:16
Certificate issuer: /CN=c20897c1dbd606929137e672bad0c1f67e637d16
Certificate serial: 0194BABB0A7313BC65F95503DD4D2AD0F358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
Manifest number: 104C
Signing time: Fri 31 Jan 2025 05:00:07 +0000
Manifest this update: Fri 31 Jan 2025 05:00:07 +0000
Manifest next update: Sat 01 Feb 2025 05:00:07 +0000
Files and hashes: 1: Fbynj4C6zdRgu6gIq2-WxH6T_LA.roa (hash: 1G7T6CHRBzMTi8lz6sG9TXAsvyynmWFubPkkTd5+Xfk=)
2: wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl (hash: 88Xmr+CpKN+O4fY8ICpnq19xcrokXAHNEjcwyrNQnhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:0a:73:13:bc:65:f9:55:03:dd:4d:2a:d0:f3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20897c1dbd606929137e672bad0c1f67e637d16
Validity
Not Before: Jan 31 05:00:07 2025 GMT
Not After : Feb 1 05:00:07 2025 GMT
Subject: CN=d5e9e069d34735a21180609aa5e171aaa969ce7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:65:47:65:a4:16:77:16:75:9c:71:93:86:d3:
ef:f3:25:88:00:d9:98:b3:51:e6:75:40:e8:b8:d1:
98:d5:1a:f4:6c:10:5b:a9:c2:f2:d3:2e:4f:e5:f7:
ad:ba:df:54:eb:60:a5:73:e2:18:5e:aa:d7:45:2e:
a0:e0:89:d7:3f:8b:07:61:16:e5:ca:22:31:28:92:
39:56:47:28:85:7b:04:9b:a1:69:6d:32:eb:d4:ec:
fd:10:90:5b:29:5c:16:37:45:23:a0:6f:99:59:63:
fb:32:aa:5e:50:76:b9:3e:34:8b:a7:e0:df:e3:2a:
a1:6d:19:ac:9c:8d:75:58:d4:cf:1b:2b:65:b9:5f:
df:e9:03:f0:10:13:ba:4f:95:5e:94:2c:ab:4c:ec:
da:c9:42:8f:e8:cb:4a:f4:6d:87:1f:a5:ad:dc:de:
32:b2:d7:77:37:a1:36:2d:b8:57:0b:c6:7d:b1:e4:
d5:f6:9c:7c:88:6b:0c:a2:c5:4d:48:d8:02:6c:a7:
83:31:90:c0:bb:69:ca:c2:0e:e9:d5:83:20:0b:6a:
53:3e:60:15:5e:9c:33:e2:5c:3d:4a:c1:01:a9:ec:
f6:95:9a:52:fe:43:8e:a4:c9:db:27:c1:61:e7:93:
ee:15:2d:52:be:9a:ee:67:08:4f:66:5c:5c:2f:17:
38:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E9:E0:69:D3:47:35:A2:11:80:60:9A:A5:E1:71:AA:A9:69:CE:7C
X509v3 Authority Key Identifier:
keyid:C2:08:97:C1:DB:D6:06:92:91:37:E6:72:BA:D0:C1:F6:7E:63:7D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:cd:17:76:ef:a8:3a:0a:46:cc:5d:44:b8:9a:57:0d:92:96:
fa:87:e5:39:a3:8e:c9:57:77:5f:3d:4b:0c:2d:d9:1f:d2:4a:
ef:02:06:e4:8b:84:16:ec:0c:33:1f:38:59:0f:ad:96:ee:6b:
5b:ef:a8:ff:10:a8:79:0d:0d:d4:23:cd:22:c3:0c:23:a2:41:
61:71:db:44:57:7d:30:4c:4d:e1:4c:45:d7:49:50:c7:f8:ee:
94:65:d1:1e:5e:91:17:b5:8b:4e:48:f9:a3:77:f2:5c:0a:d8:
ad:5a:d8:5c:76:7d:b2:62:b0:6c:72:0e:ee:55:79:15:6f:0e:
0d:72:b6:a2:2b:f5:e5:54:11:e8:c5:31:08:3f:b1:b5:d1:81:
84:18:d9:85:31:ce:78:56:fb:2d:9a:e6:de:84:7f:fb:58:44:
7f:6f:e0:1f:7a:3e:24:98:21:15:01:3f:63:a2:f5:61:eb:97:
24:f9:aa:9b:b8:76:e1:69:4f:6b:34:43:bc:d3:53:78:78:16:
cd:b8:fa:b2:79:05:cc:f3:7c:65:48:c6:9c:e3:f9:f7:36:7c:
df:e5:db:6e:3b:a7:a3:83:89:fe:73:86:01:9b:1d:b6:99:ca:
3c:da:e3:30:71:44:ab:20:49:c2:a7:b5:db:29:bf:3b:ed:10:
e3:3b:06:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:57 2025 by rpki-client on console-fra.rpki-client.org