Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft
File: wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft (raw, json)
Hash identifier: jKPKmXF0G2BZVe5OFwwjHNbe4FUfQI9WAsk2CnoYdX8=
Subject key identifier: FD:D3:83:B6:8B:8D:BA:1D:5E:37:A9:DA:70:E8:62:91:31:D0:CE:95
Authority key identifier: C1:D7:10:D8:AC:31:B1:F6:DA:F7:04:6C:45:37:4A:E8:E4:05:F1:8E
Certificate issuer: /CN=c1d710d8ac31b1f6daf7046c45374ae8e405f18e
Certificate serial: 0194BB2991E1413C1EE8A17461206D1EC88D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft
Manifest number: 1236
Signing time: Fri 31 Jan 2025 07:00:51 +0000
Manifest this update: Fri 31 Jan 2025 07:00:51 +0000
Manifest next update: Sat 01 Feb 2025 07:00:51 +0000
Files and hashes: 1: 3vk_cNMUWC-JUrbyIXBN2gny1YM.roa (hash: 5UI1dk/WNT1Jzxh8ssSrm2cZ8VMJvaL80lHMAJV1sdM=)
2: hm311e8NJq4CeLUwG2WwDwuRkEo.roa (hash: q59x20MyNrLs1Zhrc2YWC53c5eh99JxfPMp5OIsclNU=)
3: wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.crl (hash: L+N0Rj4plK6jCwaTzh0qPLDrxGvhibmSJQgwWyEHhNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:91:e1:41:3c:1e:e8:a1:74:61:20:6d:1e:c8:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d710d8ac31b1f6daf7046c45374ae8e405f18e
Validity
Not Before: Jan 31 07:00:51 2025 GMT
Not After : Feb 1 07:00:51 2025 GMT
Subject: CN=fdd383b68b8dba1d5e37a9da70e8629131d0ce95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c0:0e:7a:81:ba:b7:85:5d:f8:92:08:54:cc:
ca:d0:47:fc:0e:a3:e5:c2:54:77:04:30:d5:df:b6:
d1:f5:39:51:07:1e:2c:f7:69:1c:0a:e5:e1:28:22:
7a:59:ce:d3:55:77:8f:96:0f:32:ce:c7:50:50:63:
e9:a1:ed:fd:57:cd:fd:4a:ca:e1:69:9f:3c:c7:d3:
41:21:02:6e:54:ab:1e:12:86:cc:97:24:1d:fd:01:
ad:e2:56:02:13:7e:6f:57:e4:60:d5:ec:ba:1d:5a:
2b:8a:85:d1:cb:dc:49:68:e4:2c:ab:65:43:04:b8:
fe:7b:1b:97:6a:a7:26:c7:25:63:b0:7a:38:8e:56:
9c:04:f4:a8:ae:7d:6c:45:a3:07:52:af:81:91:d0:
bb:66:fd:4c:d2:47:13:2d:67:94:3c:aa:97:d4:ea:
fd:79:bd:51:0c:e9:d6:31:f0:ef:08:7a:0a:79:37:
0b:d4:e8:3f:2d:76:c3:7e:a5:b2:22:68:40:2a:4f:
96:6c:89:2d:5d:32:c5:00:3c:b3:ee:2b:d9:3b:0e:
0b:67:2b:60:da:92:89:93:03:bd:36:2c:89:ea:50:
bf:35:ee:2b:d3:bd:0e:4b:59:14:9d:9c:84:bf:75:
0d:80:e6:45:18:7f:26:ab:be:69:cd:0d:e7:d0:a0:
2f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D3:83:B6:8B:8D:BA:1D:5E:37:A9:DA:70:E8:62:91:31:D0:CE:95
X509v3 Authority Key Identifier:
keyid:C1:D7:10:D8:AC:31:B1:F6:DA:F7:04:6C:45:37:4A:E8:E4:05:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:92:11:d1:4d:7a:f6:55:2c:6e:04:25:58:b4:65:44:20:eb:
a8:da:f0:fb:97:29:ca:79:0b:fa:98:7a:99:fc:34:dc:0d:19:
2f:aa:97:6c:93:b2:00:b8:d5:65:96:19:2c:a5:36:09:4b:d8:
7c:37:ec:de:f9:7e:f6:c2:a9:e9:c7:65:f9:95:fa:15:3b:1e:
a0:37:37:7f:be:8b:cc:0a:f7:c2:27:e2:a0:b9:f0:d7:f9:23:
8a:ec:8d:ab:e4:fa:b7:c4:7e:62:22:09:35:f3:39:e8:ba:db:
90:85:99:1c:16:bc:1f:c4:74:f9:2e:d6:c8:93:2f:75:e7:bd:
c8:36:1a:a6:0d:5e:28:d0:c4:e8:d3:22:24:40:56:ff:ec:74:
7c:9b:da:a5:fe:cd:41:1a:ab:1d:ad:e0:ce:66:11:9f:66:e5:
91:58:4f:6e:80:e1:ce:3d:56:b0:71:f9:59:5b:08:ef:c9:c9:
0f:ab:b3:6c:02:01:5d:45:b8:00:05:36:0b:11:16:92:f4:36:
19:42:b4:47:88:e3:2e:b2:ff:d3:c6:d6:ce:07:dc:b5:5a:4f:
86:81:64:50:0d:65:7b:d2:d0:e3:bf:7c:c2:da:a4:f1:8b:ca:
86:e8:e0:92:57:64:78:12:fe:de:ba:6e:8b:9f:95:9d:cd:77:
35:a0:57:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:34 2025 by rpki-client on console-fra.rpki-client.org