Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft
File: wz-t0SfmXNkN4-lWjly8-0jJsko.mft (raw, json)
Hash identifier: TUo/EGvJbvmu3mWxyPie6UpCO69zjx8sp7Ul4GrsYyA=
Subject key identifier: 57:A8:77:B9:90:55:E4:DD:75:58:08:DE:75:57:59:0B:34:0E:7B:4B
Authority key identifier: C3:3F:AD:D1:27:E6:5C:D9:0D:E3:E9:56:8E:5C:BC:FB:48:C9:B2:4A
Certificate issuer: /CN=c33fadd127e65cd90de3e9568e5cbcfb48c9b24a
Certificate serial: 0194BABBCB6AC57F14D5B23E6D7A71E621A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wz-t0SfmXNkN4-lWjly8-0jJsko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft
Manifest number: 042A
Signing time: Fri 31 Jan 2025 05:00:56 +0000
Manifest this update: Fri 31 Jan 2025 05:00:56 +0000
Manifest next update: Sat 01 Feb 2025 05:00:56 +0000
Files and hashes: 1: mRIJhbiYi4_Fn9rbvJxpcE5BqwE.roa (hash: QFNaK1Gy0ycMOCo2B8J3U81MNF8ZnZJf7GULAc5HdJY=)
2: wz-t0SfmXNkN4-lWjly8-0jJsko.crl (hash: AWy/qHRFv8+L0l/cRqUe1GsCd1aWNguG2aPYfFuWyrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft
rsync://rpki.ripe.net/repository/DEFAULT/wz-t0SfmXNkN4-lWjly8-0jJsko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:cb:6a:c5:7f:14:d5:b2:3e:6d:7a:71:e6:21:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c33fadd127e65cd90de3e9568e5cbcfb48c9b24a
Validity
Not Before: Jan 31 05:00:56 2025 GMT
Not After : Feb 1 05:00:56 2025 GMT
Subject: CN=57a877b99055e4dd755808de7557590b340e7b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:73:68:62:3f:7f:b1:7a:ab:09:25:a5:10:8b:
89:69:f9:61:ac:dd:3a:67:99:c9:28:ab:b7:12:c6:
12:5f:a0:30:95:c9:04:91:f6:1d:d1:b4:b1:e3:0b:
3a:89:5e:a6:c9:bb:c4:c9:9e:97:ef:19:0f:a9:2e:
e2:5e:0a:5e:74:d5:ae:b0:65:84:a6:32:04:4e:21:
78:3f:3a:af:ce:4f:1b:73:c2:2f:e9:06:92:e4:c8:
5b:95:97:4d:d1:59:a9:ad:39:d8:0a:60:f3:20:4d:
81:eb:ef:df:4a:5e:4f:82:c3:95:fc:a6:06:9e:86:
11:9c:66:82:70:04:e7:31:26:19:e4:e1:a4:f7:8a:
73:71:90:67:da:95:45:63:91:43:0f:43:96:f7:4e:
85:3f:5b:41:2e:73:73:56:14:26:81:a1:b4:9c:ad:
01:23:5e:82:4b:26:90:1f:af:e6:27:2c:12:78:e3:
da:6b:dc:09:a2:12:11:a6:35:be:62:51:41:55:69:
46:00:bb:b9:fa:96:cc:28:23:13:e4:57:50:d8:95:
d3:23:16:a6:7a:4d:47:4d:6c:d1:04:99:33:06:6f:
4d:9c:ca:8c:ba:96:6e:42:ef:40:a5:88:a2:cd:c5:
bb:e6:12:e8:f9:e0:df:f0:4e:d8:6f:8d:c1:6b:cb:
0c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A8:77:B9:90:55:E4:DD:75:58:08:DE:75:57:59:0B:34:0E:7B:4B
X509v3 Authority Key Identifier:
keyid:C3:3F:AD:D1:27:E6:5C:D9:0D:E3:E9:56:8E:5C:BC:FB:48:C9:B2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wz-t0SfmXNkN4-lWjly8-0jJsko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ce:d1:dc:21:f4:d5:41:0d:3f:00:8f:4e:c8:7f:26:c7:16:
a2:3e:bf:0a:8a:ff:62:74:c9:97:1a:73:2e:b9:83:8d:fa:2f:
d4:5f:bc:ef:86:a2:5a:74:0e:d5:f9:53:96:d4:b5:6a:12:a5:
a8:fc:06:bd:4e:f3:87:32:93:99:54:f1:f0:56:08:e0:48:70:
3d:7c:84:8f:64:05:b0:7e:8f:77:25:bb:48:49:2d:bc:a7:58:
8d:37:cc:07:dc:bd:65:91:c5:27:9d:c2:6a:e3:d6:54:4b:bd:
db:55:fc:2a:2b:26:ae:26:33:b7:43:76:82:3b:e7:46:ad:0f:
e7:77:03:03:d8:d3:55:c6:f4:89:e6:71:04:ce:35:14:e2:66:
14:4f:c9:20:b9:a5:b1:0b:ee:fe:f5:be:fc:87:fd:01:b6:3f:
9e:54:3f:a3:70:44:e9:c4:a7:be:36:bf:7e:30:42:a9:69:79:
a8:f5:3e:0b:f0:c5:b5:4a:2d:2e:c3:4b:1e:12:c3:bd:7e:a5:
59:10:d0:e8:f0:d6:69:41:5f:fa:78:2b:3b:79:6a:76:08:9b:
6a:6c:01:69:1c:32:3b:7b:5a:1f:ad:05:0b:42:e7:a2:1e:8a:
01:ba:c1:79:36:e3:7f:37:8e:e5:bd:07:79:f3:05:d4:5a:57:
44:c7:5a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:34 2025 by rpki-client on console-fra.rpki-client.org