Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft
File: WPJnqqyZvwydHo5CneAczTzJDsA.mft (raw, json)
Hash identifier: JqF4wiYZNYmSIrm+RfnCCS94xDnIcbwk2amraxwL5No=
Subject key identifier: B0:45:26:7F:C2:8B:F3:9C:FD:77:5D:C5:3D:E9:5D:BD:72:1C:BA:5B
Authority key identifier: 58:F2:67:AA:AC:99:BF:0C:9D:1E:8E:42:9D:E0:1C:CD:3C:C9:0E:C0
Certificate issuer: /CN=58f267aaac99bf0c9d1e8e429de01ccd3cc90ec0
Certificate serial: 0194BB2936AD7957417EB8A78F4E4960FEBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 07:00:27 +0000
Manifest this update: Fri 31 Jan 2025 07:00:27 +0000
Manifest next update: Sat 01 Feb 2025 07:00:27 +0000
Files and hashes: 1: VxmO12w306gaXQmH0gdTcOIKrpc.roa (hash: yL/doTnHVquXpnwAcQ1RYhbKS8XdZRYVklJVmjcOaeU=)
2: WPJnqqyZvwydHo5CneAczTzJDsA.crl (hash: TjgkWKLEHD5I8fXpqs+u3CIIyU5H4tp5tLVdtAFt3JI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:36:ad:79:57:41:7e:b8:a7:8f:4e:49:60:fe:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f267aaac99bf0c9d1e8e429de01ccd3cc90ec0
Validity
Not Before: Jan 31 07:00:27 2025 GMT
Not After : Feb 1 07:00:27 2025 GMT
Subject: CN=b045267fc28bf39cfd775dc53de95dbd721cba5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:71:b7:c0:6e:b3:58:68:85:ff:69:f8:ed:5b:
8d:99:a2:6c:45:8e:64:e8:35:8c:64:a6:87:0a:d6:
d0:2c:99:ed:33:1e:63:5f:a7:11:f6:97:0c:89:48:
6f:b4:16:6c:82:19:9e:12:f4:df:c3:00:fe:82:54:
71:82:d9:18:99:62:15:36:f4:d0:51:0e:6b:40:3b:
1f:70:35:75:83:2d:9d:7b:b4:4c:d5:9e:e9:9d:25:
5a:ba:a9:3f:7b:51:91:3a:6f:50:7a:1e:67:1d:b4:
ca:02:f7:c0:49:83:8a:34:79:11:30:cf:cc:19:76:
c8:9f:4a:7a:bb:10:80:c1:74:ca:52:5f:a0:b5:4e:
8a:db:da:8f:93:d3:6b:2a:36:e5:cd:f4:cb:42:3c:
8e:b5:e8:e1:6a:40:08:a6:e4:86:8d:26:09:0b:d5:
39:c1:1a:2b:51:64:03:e1:11:ad:41:15:d4:e3:6f:
cd:86:fa:84:0e:78:33:55:08:e3:8c:9a:63:38:fe:
dc:e5:0d:e0:4f:84:54:1a:fe:1b:5b:98:09:f7:da:
39:c5:f4:da:74:ee:cb:85:e3:2c:d8:e0:4e:84:71:
f2:42:29:95:1b:0a:78:3c:52:80:99:c7:34:de:b7:
64:a2:e6:13:70:1d:c2:0d:c3:5c:b1:a1:3a:07:82:
85:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:45:26:7F:C2:8B:F3:9C:FD:77:5D:C5:3D:E9:5D:BD:72:1C:BA:5B
X509v3 Authority Key Identifier:
keyid:58:F2:67:AA:AC:99:BF:0C:9D:1E:8E:42:9D:E0:1C:CD:3C:C9:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:51:fd:27:96:b3:57:20:8e:7e:2e:48:1c:5c:f1:4e:63:57:
d6:f1:e8:fb:07:d8:9e:45:5d:0c:4e:cc:b6:07:57:4e:5a:25:
56:9c:9c:a5:45:a5:a5:2f:72:82:63:a8:6d:76:ca:84:19:ce:
0f:b9:ae:54:10:96:9f:77:4b:4b:b8:df:f5:26:b4:6a:f5:95:
76:ad:7d:6f:c2:62:02:9d:2f:5c:f0:9e:56:5c:ff:e6:18:6f:
a4:7f:7c:ae:37:fe:40:f3:0b:36:bf:ab:1d:bf:7f:ed:34:8e:
48:8b:fe:97:7c:29:1f:c5:15:f9:62:01:be:1d:1c:73:f7:42:
4c:ae:c0:ee:85:17:86:cb:c9:30:67:50:5e:f2:da:7d:fe:fa:
a3:14:0f:3b:e1:24:2b:4a:45:48:79:21:4e:fd:54:95:62:2c:
7e:30:96:4f:0b:61:af:79:41:68:7b:35:10:30:e4:57:4e:94:
25:45:cb:9c:a5:91:cc:94:54:08:76:d8:a5:47:6a:34:f1:05:
3d:33:f5:d1:79:72:32:6b:23:f1:02:f1:91:b8:6b:64:8f:eb:
10:83:47:aa:62:69:25:0a:90:d7:9e:3e:bf:c8:a0:2f:5c:f5:
6a:83:35:c6:ca:b4:01:6b:28:11:fe:b9:76:0b:a4:ac:1e:bb:
9c:08:74:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:43 2025 by rpki-client on console-fra.rpki-client.org