Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
File: WrK6mr-B1s-AM83N68jfj34iwow.mft (raw, json)
Hash identifier: ik4LeDJEAoXgiEsPEbJhzJZrKHouyG+UXEaT5jWrahI=
Subject key identifier: DF:43:4C:55:7A:76:40:F3:88:82:B8:06:35:1A:6E:DF:0B:32:03:F2
Authority key identifier: 5A:B2:BA:9A:BF:81:D6:CF:80:33:CD:CD:EB:C8:DF:8F:7E:22:C2:8C
Certificate issuer: /CN=5ab2ba9abf81d6cf8033cdcdebc8df8f7e22c28c
Certificate serial: 019368FCC877DDD37CB9AAF893F9F0368DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
Manifest number: 27
Signing time: Tue 26 Nov 2024 15:00:17 +0000
Manifest this update: Tue 26 Nov 2024 15:00:17 +0000
Manifest next update: Wed 27 Nov 2024 15:00:17 +0000
Files and hashes: 1: WrK6mr-B1s-AM83N68jfj34iwow.crl (hash: bggnY4CI+AVe4tYf7ZNlQmHkNHb3CyV6I8Fcbfcz38A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:fc:c8:77:dd:d3:7c:b9:aa:f8:93:f9:f0:36:8d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ab2ba9abf81d6cf8033cdcdebc8df8f7e22c28c
Validity
Not Before: Nov 26 15:00:17 2024 GMT
Not After : Nov 27 15:00:17 2024 GMT
Subject: CN=df434c557a7640f38882b806351a6edf0b3203f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3a:b7:d8:5c:18:54:24:a2:48:f4:c3:bd:5d:
58:47:26:41:7c:be:2d:c3:d8:02:9e:e9:2f:a1:b9:
f2:98:9a:21:e7:f9:42:cd:20:81:bc:b8:fa:d8:a0:
ce:13:44:02:38:80:e7:45:d6:ac:ed:1e:25:a0:93:
2d:a0:6f:90:8a:36:d4:d3:06:43:f6:b2:04:b8:e7:
ff:88:ac:f6:5d:65:6e:af:cf:4f:ab:b1:e4:aa:7f:
13:56:db:cf:6a:ad:60:5e:e8:75:39:f4:4c:0c:ea:
93:fc:5f:15:ef:ff:1f:60:66:b5:99:2c:41:aa:77:
15:5b:f1:ee:12:10:8e:2b:ac:7f:e4:c7:b6:12:c8:
2c:b9:50:1d:83:62:9e:43:95:cc:3b:82:23:fe:00:
e6:f4:53:78:14:a9:a5:2b:48:a0:3a:b6:6e:02:84:
a7:8c:d9:e1:66:be:1e:7c:da:7a:e1:0c:80:85:af:
ba:94:5f:aa:47:83:1b:2f:2b:1d:cb:14:96:6c:6c:
94:cb:b0:82:84:6a:46:57:4a:01:cf:c8:17:76:35:
5a:80:fc:c5:f9:33:b8:44:87:2a:d0:67:ae:14:f9:
65:6e:5f:5d:b9:cf:bc:77:03:83:b5:c8:11:53:52:
38:1d:92:f2:22:4e:7f:b2:79:e3:96:2d:ff:7e:e1:
66:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:43:4C:55:7A:76:40:F3:88:82:B8:06:35:1A:6E:DF:0B:32:03:F2
X509v3 Authority Key Identifier:
keyid:5A:B2:BA:9A:BF:81:D6:CF:80:33:CD:CD:EB:C8:DF:8F:7E:22:C2:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:98:a2:54:71:b4:37:ce:27:23:7c:27:7f:26:ab:21:16:05:
23:72:aa:14:09:72:43:a9:10:b8:04:18:90:96:f4:20:af:59:
a1:da:4f:19:6d:fc:44:5c:5a:a9:dc:dc:11:bf:4c:cc:3a:5a:
1e:95:dd:04:f8:f3:f8:0f:dd:a7:b8:ed:5f:0e:de:c0:9e:32:
4c:6e:16:ae:05:c1:97:40:ba:34:e8:7f:81:a2:26:25:5f:c8:
54:4f:b9:03:7f:0a:9d:23:3a:93:ec:fc:fa:9f:f7:49:da:c0:
16:27:2d:25:c2:6e:b2:1e:1e:4f:a4:3e:20:35:61:3d:5d:78:
bf:11:86:52:3f:88:b4:05:f2:38:f6:86:2f:d0:13:e5:dd:fc:
15:64:9d:97:9d:fa:6e:9b:55:32:6d:0d:cd:35:83:9e:32:08:
73:a5:58:f7:ff:3a:21:c6:99:e8:3e:b5:ba:c1:40:9b:6d:a3:
6a:9f:54:02:1a:59:b9:5c:de:20:eb:6f:07:5d:0c:ca:bf:73:
8f:4a:7f:95:51:8c:96:0b:4e:7d:d9:e1:ac:46:c0:d3:42:b3:
fd:73:23:67:08:29:4e:d5:4d:dd:0d:fa:54:01:5e:79:bd:5d:
dc:8d:13:68:57:cc:15:17:c8:93:1c:e6:7b:75:70:98:e6:e3:
96:5e:ca:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 19:21:56 2024 by rpki-client on console-fra.rpki-client.org