Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
File: WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft (raw, json)
Hash identifier: EFoRl4i1i6PEM6XmEVuURhhBbQSXbzpVts90W/UL3AY=
Subject key identifier: 00:76:D0:E0:80:BF:07:0E:AE:2F:16:0B:74:CE:44:31:4F:97:B8:D2
Authority key identifier: 58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
Certificate issuer: /CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Certificate serial: 0194BB97101E285DE3FDB34B615FB3A7EE9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
Manifest number: 0190
Signing time: Fri 31 Jan 2025 09:00:26 +0000
Manifest this update: Fri 31 Jan 2025 09:00:26 +0000
Manifest next update: Sat 01 Feb 2025 09:00:26 +0000
Files and hashes: 1: WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl (hash: KNQ1MhNqyXS/gqBPU5y0sIyQMuUzZflioIdd1zb66vI=)
2: e0MNfuXlfvKgRvC9CopzDlR6QJs.roa (hash: EP4IKQWQkDtxiqLTMMk/RcDKJIiLy3Rh0R6YqC1qh6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:10:1e:28:5d:e3:fd:b3:4b:61:5f:b3:a7:ee:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Validity
Not Before: Jan 31 09:00:26 2025 GMT
Not After : Feb 1 09:00:26 2025 GMT
Subject: CN=0076d0e080bf070eae2f160b74ce44314f97b8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:67:be:03:29:25:b3:a1:50:5d:29:3a:4f:06:
41:1d:ac:ee:c5:ae:19:99:11:62:02:b4:47:87:ff:
78:6a:4d:20:4c:05:8d:d2:ff:b9:9f:f6:87:c2:6b:
26:a8:65:34:ce:1b:e2:3a:72:da:07:a1:f8:e2:e7:
97:e2:f2:b9:44:06:a3:eb:ed:42:69:89:85:b2:62:
43:4e:54:63:bc:4c:e7:c5:32:c3:5b:c2:7f:9b:36:
fa:10:3f:57:cc:f7:2b:e4:00:6a:ba:5e:e8:1e:49:
0a:19:ba:7c:a0:41:d6:d0:e1:8d:26:b1:f2:06:c7:
70:9d:56:82:a7:df:e9:57:bc:f2:56:e4:be:b8:a3:
ca:d9:ef:13:6b:88:5e:59:09:6f:29:2a:d4:85:77:
3d:c6:d6:f2:47:7c:6d:e9:f8:2a:06:a4:80:8b:65:
fd:82:65:21:a0:7d:c0:e2:2f:70:31:ef:26:76:24:
84:3d:98:5f:80:0d:2d:a7:da:c0:fd:d9:77:3a:9c:
2f:00:0c:d7:51:22:a0:9e:2f:97:cb:ba:90:fd:3d:
c5:b7:8c:a1:c9:92:8c:6c:91:29:30:63:93:b4:1f:
cd:a4:4d:63:6a:94:ed:35:09:5b:61:5d:d4:55:d4:
fd:0e:b7:36:df:4b:c6:a0:19:fe:7e:78:7d:ea:92:
20:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:76:D0:E0:80:BF:07:0E:AE:2F:16:0B:74:CE:44:31:4F:97:B8:D2
X509v3 Authority Key Identifier:
keyid:58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b9:e7:e7:ca:bc:06:42:ba:ed:e6:36:ed:c5:80:67:ae:20:
1e:be:96:93:c0:2e:56:a1:fd:0d:0a:c4:07:67:7b:50:bd:d8:
96:35:bd:2e:b0:87:ac:78:e5:7e:5b:ff:69:a3:35:5e:aa:99:
28:69:54:f5:26:a5:f4:b7:03:3c:5d:99:db:b2:dd:96:b0:27:
b1:a9:ff:54:25:d3:9e:e9:78:0f:29:1f:14:32:4c:3b:1a:0c:
b4:03:9e:93:e1:6e:a7:03:58:85:ca:cd:39:9d:3b:55:db:d6:
ae:0c:34:31:56:78:6c:d8:3d:8e:42:82:d5:7a:87:d6:b5:79:
e8:12:49:ec:d8:dd:2f:66:d8:9f:5e:6f:dd:af:dd:c5:8a:74:
ae:b4:2a:a3:3d:5d:15:ed:c4:7d:ab:55:ce:20:d7:50:98:69:
ae:46:84:d8:c4:96:a5:f3:82:d2:91:69:36:80:15:74:28:e1:
44:64:d0:46:a1:c3:62:8b:a2:7e:4c:76:b7:64:96:27:da:5a:
75:e5:27:dc:a4:cd:a8:eb:e5:8e:d2:f8:61:8e:a9:3a:6f:3c:
3b:33:6e:19:40:25:57:50:92:ae:50:7d:1e:28:03:15:c4:f9:
fc:9c:be:03:c4:84:4f:f7:89:4d:8c:01:d8:29:c8:6b:d1:cd:
70:23:9a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:28 2025 by rpki-client on console-fra.rpki-client.org