Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.mft
File: WIOU45ENlKe_Cnig8wLQKumQcnM.mft (raw, json)
Hash identifier: lVOFJcMgGUL8edw45OrtLaNZBQ7YrJfc823sTmYgtgo=
Subject key identifier: 56:1F:40:6C:30:AE:6E:22:FE:65:77:AB:8A:0B:E5:D7:B0:50:55:5E
Authority key identifier: 58:83:94:E3:91:0D:94:A7:BF:0A:78:A0:F3:02:D0:2A:E9:90:72:73
Certificate issuer: /CN=588394e3910d94a7bf0a78a0f302d02ae9907273
Certificate serial: 0194BA8492EA68926BC2710231B065461D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIOU45ENlKe_Cnig8wLQKumQcnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 04:00:38 +0000
Manifest this update: Fri 31 Jan 2025 04:00:38 +0000
Manifest next update: Sat 01 Feb 2025 04:00:38 +0000
Files and hashes: 1: WIOU45ENlKe_Cnig8wLQKumQcnM.crl (hash: NGxMd+AQhPP6Dm3fmC2HyJN0Ij0B+CXv1teYxDT06AU=)
2: pkgQahpzHWh56tzgd9d98n8d-uM.roa (hash: YQurlMI/tTqNmD2eoDZiGf6050yJ+e+y29w7dKL/U9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIOU45ENlKe_Cnig8wLQKumQcnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:92:ea:68:92:6b:c2:71:02:31:b0:65:46:1d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588394e3910d94a7bf0a78a0f302d02ae9907273
Validity
Not Before: Jan 31 04:00:38 2025 GMT
Not After : Feb 1 04:00:38 2025 GMT
Subject: CN=561f406c30ae6e22fe6577ab8a0be5d7b050555e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d8:81:6a:e2:47:2d:8e:9c:3c:23:34:f7:d3:
7c:17:53:ce:d4:05:9e:fd:e9:95:01:db:41:d2:c7:
cd:f6:66:c2:1c:0b:41:03:ac:c8:53:32:0e:0f:16:
c9:a6:ed:b5:61:ff:53:d2:5e:62:4b:9a:da:ae:0a:
fd:18:7a:21:ed:dd:72:b8:02:c7:24:e6:cd:c2:48:
0e:33:63:79:00:c7:ef:ec:e6:12:ca:a1:df:b5:0f:
ca:bb:0f:aa:a8:81:40:82:1f:b7:27:59:4d:ce:06:
48:30:f3:91:f8:20:90:85:30:88:a1:ef:a3:88:35:
21:ee:97:fd:c5:9d:bc:a3:10:c8:35:66:a8:21:e1:
4a:b7:60:38:f4:f8:0a:91:d9:43:c7:1b:33:24:6b:
3e:19:e4:5a:a5:8c:73:de:61:8d:32:f7:97:55:4b:
40:21:d3:8a:ef:06:5f:14:64:09:c8:c5:17:16:0d:
f4:58:ad:57:fc:62:7d:fd:fd:a3:4e:77:45:27:aa:
8a:cf:a1:27:89:51:11:7b:d6:b1:03:cc:f5:f0:8b:
41:f5:75:49:6e:f4:95:51:e8:d0:31:ba:81:b0:d8:
94:4b:dd:62:57:54:bf:59:58:26:f4:6e:4d:40:8d:
80:b7:96:91:67:21:68:e7:b6:da:5e:6b:da:9f:62:
67:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1F:40:6C:30:AE:6E:22:FE:65:77:AB:8A:0B:E5:D7:B0:50:55:5E
X509v3 Authority Key Identifier:
keyid:58:83:94:E3:91:0D:94:A7:BF:0A:78:A0:F3:02:D0:2A:E9:90:72:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIOU45ENlKe_Cnig8wLQKumQcnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a4:bb:5d:94:3d:12:67:99:cd:d8:b9:97:61:5d:bf:4e:a3:
5e:6a:7f:18:17:db:29:00:5e:54:01:25:00:a7:6e:a0:cc:e1:
c5:71:af:b7:13:ea:67:c2:7d:5a:78:82:4c:2e:99:48:b2:7c:
6b:9b:f1:a6:ed:30:91:22:e2:05:6a:40:70:fc:50:d9:8b:09:
1c:ad:44:d6:f6:78:b0:b7:42:97:43:23:12:d1:f1:d4:c6:c8:
2c:36:ae:1f:55:86:30:a3:d7:f7:18:bc:93:0f:ef:66:9d:cb:
98:b4:3a:4c:78:bb:9d:3b:01:bd:9d:6b:31:d6:07:99:37:66:
f7:60:b1:9d:cc:20:1c:89:d3:3b:2a:c6:74:f6:55:95:71:77:
fd:4b:b0:0c:e5:8b:84:20:48:08:3a:5b:8e:dd:43:86:b9:ee:
6d:73:bb:1e:8a:de:61:23:89:0b:85:4f:72:c8:9b:ca:a7:e6:
72:a7:78:96:87:c3:0b:d0:0d:5a:56:06:e2:bb:9d:c9:64:88:
b0:b9:62:82:2d:f6:ac:17:c4:a0:d4:69:c3:7f:d9:53:b5:fe:
e9:23:30:82:97:c6:e4:ca:04:eb:cd:c7:a7:41:e6:50:d2:6b:
27:4a:e3:4e:4b:e1:26:fc:26:3e:8b:6e:22:6f:21:de:6d:15:
a2:f0:bf:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:53 2025 by rpki-client on console-fra.rpki-client.org