Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
File: WkxPlqpaAsrag9S4jUnmpzq9JfA.mft (raw, json)
Hash identifier: XBnp3tECnt882doI1ersLu5vvQs5DirZvcov43iiQSQ=
Subject key identifier: 77:5F:68:A3:DE:A2:76:A8:BE:3A:6A:3C:40:A8:76:18:BD:EC:6A:EF
Authority key identifier: 5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0
Certificate issuer: /CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0
Certificate serial: 0194BB6046E6809115B5A48081DD050AC1E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
Manifest number: 0BC9
Signing time: Fri 31 Jan 2025 08:00:36 +0000
Manifest this update: Fri 31 Jan 2025 08:00:36 +0000
Manifest next update: Sat 01 Feb 2025 08:00:36 +0000
Files and hashes: 1: Qlh9bFiBiZDJ7E4bJ6Qm7U8cfpk.roa (hash: 6OpDkd4to1irtWv8vpsm2jxisQw9dR70exo6gT09Ccs=)
2: WkxPlqpaAsrag9S4jUnmpzq9JfA.crl (hash: pvyHxwFiZBJDCAT2N3BWas0A91dW3mMEbiKhszLIDf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:46:e6:80:91:15:b5:a4:80:81:dd:05:0a:c1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0
Validity
Not Before: Jan 31 08:00:36 2025 GMT
Not After : Feb 1 08:00:36 2025 GMT
Subject: CN=775f68a3dea276a8be3a6a3c40a87618bdec6aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:18:30:29:c9:db:d2:3c:e9:cb:e2:fe:05:ab:
5a:4a:74:8e:83:19:f8:e4:1e:3a:ab:3f:f0:f5:41:
f8:24:a5:b2:5f:eb:c0:8f:4e:fe:84:f4:68:0c:41:
24:43:08:30:9c:67:10:dc:5a:73:86:48:cf:6f:80:
77:6b:a2:17:9b:31:4c:f7:75:68:fd:14:b9:41:15:
41:d9:c8:5f:07:84:36:79:2f:98:2a:ee:7c:d9:09:
a8:4d:d2:a9:8e:ce:17:69:e6:c3:b2:b8:ee:b2:05:
c9:a8:c2:40:1d:16:e7:e8:fb:fd:58:f1:d0:bd:52:
18:ce:b1:c4:46:5c:0b:7c:7b:56:df:b3:a2:e0:07:
b3:23:62:0f:70:49:b1:de:ff:58:c6:2a:11:ad:72:
09:29:fb:3a:9f:8f:03:5d:00:d7:4e:67:0c:86:02:
df:1a:c3:34:f0:a3:c8:53:47:b8:d6:a1:df:e7:61:
38:00:c2:fc:e3:9f:a8:d8:47:df:8c:e2:f3:3c:4b:
07:43:b3:73:ea:3a:1c:fd:9c:d1:f1:cf:47:69:9a:
b7:3e:e5:b3:ca:56:7e:b4:9d:d6:12:31:48:05:7c:
22:48:b3:ed:6e:2c:7a:39:aa:49:b1:90:6f:88:82:
3e:63:2a:ac:65:30:34:43:f4:3b:c5:72:37:59:64:
e7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5F:68:A3:DE:A2:76:A8:BE:3A:6A:3C:40:A8:76:18:BD:EC:6A:EF
X509v3 Authority Key Identifier:
keyid:5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:71:cc:0e:38:f9:98:d4:97:a0:b7:73:ac:b5:39:69:52:f2:
e9:b4:cb:cf:c7:73:d8:b1:18:2e:b6:8d:e0:36:53:3f:13:cc:
eb:84:f6:c5:26:69:c0:6d:d8:36:a9:97:8d:15:71:3d:23:ec:
5f:6c:45:93:04:95:d9:58:95:47:39:bf:ad:cc:c1:85:06:98:
21:4c:e1:a3:23:f9:48:aa:5c:34:af:4e:5b:db:aa:ee:0e:84:
47:bc:fd:1e:9e:1e:7e:e7:58:3d:c5:7d:72:fd:b1:9d:f1:36:
81:72:66:21:ab:81:8c:82:be:a2:84:f4:04:a2:95:37:c4:d5:
55:9c:d7:ff:48:97:73:a0:14:7b:97:04:24:48:b4:a0:47:f8:
fa:57:eb:fd:73:28:76:69:ff:60:dd:b8:f8:16:a1:40:9d:c9:
9b:d0:3e:e2:24:b6:31:b7:9c:5f:8d:5c:d7:dd:ff:8f:ef:75:
5d:b6:9a:67:7b:3d:af:9f:78:18:0c:87:b1:8b:3a:4a:ee:aa:
ad:b4:31:7c:0e:5c:71:54:59:98:da:f0:40:02:24:57:33:ee:
eb:77:72:6f:f4:a1:24:f8:bd:6a:1d:a1:98:aa:f5:86:6b:71:
5e:0b:93:fa:c2:40:05:ca:90:80:44:27:97:d4:df:4a:36:6c:
36:15:5f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:37 2025 by rpki-client on console-fra.rpki-client.org