Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
File: wtKiNOIkv4eZby8N9Vnq2IL55lE.mft (raw, json)
Hash identifier: a1B7H2dg11i9qB+WtvG/x2AaDrnOsZgw52kYJRtAPfY=
Subject key identifier: 28:D8:AA:92:A3:88:23:E8:E6:9D:B8:D4:D0:C0:45:BE:81:41:D5:5D
Authority key identifier: C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
Certificate issuer: /CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Certificate serial: 01950EA1C7046EC64B7DE26AF886E477D8E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
Manifest number: 1464
Signing time: Sun 16 Feb 2025 12:00:37 +0000
Manifest this update: Sun 16 Feb 2025 12:00:37 +0000
Manifest next update: Mon 17 Feb 2025 12:00:37 +0000
Files and hashes: 1: 2oAVyU2seJGTQFfvnoLEW0LxBMw.roa (hash: ZURqts9j5VKp8XJN1Pz3dvi3R29PhjPq43deEFPHUGM=)
2: AT0dJX8We-n1OQnzvfJggA9FrB4.roa (hash: 9UAeHkptLtx/0ySMZUXtLEVDmGoLUOk5U9+no/9RFDk=)
3: wtKiNOIkv4eZby8N9Vnq2IL55lE.crl (hash: dXeUWW3EbEqBO0hjy0siPfenjAJu2WwNfeDGWelLRoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0e:a1:c7:04:6e:c6:4b:7d:e2:6a:f8:86:e4:77:d8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Validity
Not Before: Feb 16 12:00:37 2025 GMT
Not After : Feb 17 12:00:37 2025 GMT
Subject: CN=28d8aa92a38823e8e69db8d4d0c045be8141d55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0e:02:f3:6f:bb:12:54:5c:1d:21:e9:d5:ec:
dc:9c:c8:67:b7:a6:41:1b:50:58:85:b4:32:0c:c8:
02:80:ce:ab:3f:a5:e6:56:2d:eb:1e:43:28:87:78:
d2:7a:31:0c:1f:37:16:05:85:01:e7:39:22:99:98:
10:0b:70:3a:6c:71:90:86:b1:40:42:e8:ec:84:11:
84:85:8b:75:dc:7a:d7:6c:ed:9b:e3:d1:53:b5:b2:
f5:b9:70:73:11:2f:e3:41:c9:25:ce:a3:03:b6:ea:
29:ac:ad:8f:de:28:da:55:57:ac:a6:a0:7b:20:6e:
4c:15:33:22:dd:b5:29:5d:b7:da:8a:8b:16:b2:0d:
7f:07:a3:f4:7f:f2:f3:44:f7:73:4a:56:90:dd:8a:
9c:a6:c5:b8:50:3d:41:b6:ab:90:fc:6b:c0:e0:e4:
69:be:2d:11:ab:7b:6d:60:86:76:c9:5e:6d:ea:e7:
a1:a1:20:ce:22:04:34:8f:a2:e2:5f:e3:2b:85:92:
df:88:bc:79:8a:cc:72:03:b7:22:ac:56:37:34:31:
0c:ff:4c:29:dd:bd:46:c7:19:f8:80:ca:6b:4d:62:
23:85:8d:42:c5:f0:b7:f2:61:9b:8a:13:66:e9:7c:
19:72:2f:4a:06:90:30:dc:90:34:00:8c:b0:7f:2b:
63:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D8:AA:92:A3:88:23:E8:E6:9D:B8:D4:D0:C0:45:BE:81:41:D5:5D
X509v3 Authority Key Identifier:
keyid:C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e9:9d:1e:45:22:27:cf:b8:0a:62:20:17:e9:f3:c2:33:8f:
09:50:6f:1e:fc:c6:f6:87:a9:de:70:d3:18:6d:27:c7:09:86:
ef:93:61:ae:b1:30:93:6c:e7:31:00:95:65:45:58:11:0f:c4:
1a:64:72:6f:41:ee:32:12:1a:e2:55:88:1a:74:95:4e:fe:fe:
fe:fd:9c:58:ea:97:0e:ab:fa:6e:4f:88:60:be:d8:5e:6b:72:
5c:ea:cd:1b:1c:96:2d:4a:bc:ac:78:19:60:18:8b:98:d7:82:
d1:17:45:77:6e:ee:32:e2:28:d4:0b:5e:13:86:89:da:a8:c5:
e8:25:f6:62:4c:3c:11:8c:cd:35:0a:9f:de:be:33:eb:93:4e:
7c:67:4b:b0:62:0a:b6:24:f7:7b:df:f6:15:04:5c:bf:af:34:
4b:14:50:6e:8d:5c:db:13:ed:2f:6a:57:91:6a:2a:99:f4:c5:
13:b4:a5:38:25:44:6a:fc:02:08:00:d1:b8:c9:56:bb:4a:0a:
6c:33:81:54:5b:b0:86:73:f9:f5:fc:26:e2:8d:80:79:b8:0b:
97:74:6a:e3:c8:35:dd:ca:c3:89:df:10:e4:b4:bf:a6:51:d9:
46:30:80:5b:25:64:9c:fa:27:04:20:8c:7c:61:f6:4a:00:64:
6e:c5:03:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:50 2025 by rpki-client