Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft
File: wRq5FoIcWjFIzhJSungByqKrSRQ.mft (raw, json)
Hash identifier: dZWoFnpK1JI0r6r48m5Y5DuIX9mr4N4cmUNEE06uXNk=
Subject key identifier: 4D:FB:2D:EA:88:57:E7:C8:41:20:6A:4F:7D:A4:FC:B1:C0:17:E5:F4
Authority key identifier: C1:1A:B9:16:82:1C:5A:31:48:CE:12:52:BA:78:01:CA:A2:AB:49:14
Certificate issuer: /CN=c11ab916821c5a3148ce1252ba7801caa2ab4914
Certificate serial: 0194BABB394DAE3CAEE9EAAFB55B9B61C33D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 05:00:19 +0000
Manifest this update: Fri 31 Jan 2025 05:00:19 +0000
Manifest next update: Sat 01 Feb 2025 05:00:19 +0000
Files and hashes: 1: jmxXPs-eFsLMyQfsEqQE-gTcJzg.roa (hash: JMdb9ncK/VZi/Drly8ri6tbObrJ2pnr+vB9E79datFA=)
2: wRq5FoIcWjFIzhJSungByqKrSRQ.crl (hash: GuZS8c92zOhmCJP+OIfADTq0WKjRrvBTN1BucQWA2T8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:39:4d:ae:3c:ae:e9:ea:af:b5:5b:9b:61:c3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11ab916821c5a3148ce1252ba7801caa2ab4914
Validity
Not Before: Jan 31 05:00:19 2025 GMT
Not After : Feb 1 05:00:19 2025 GMT
Subject: CN=4dfb2dea8857e7c841206a4f7da4fcb1c017e5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:fe:50:d8:d3:e1:bf:f1:5f:7a:9a:4f:85:
23:e1:27:6d:01:33:1c:b4:7b:92:7c:57:b6:73:4f:
6f:b4:f1:1a:57:d4:9f:3d:c4:de:2d:4a:56:a8:f0:
01:b1:aa:07:fc:bb:2a:fa:e2:7c:96:af:84:b0:02:
7e:3e:41:ef:d0:d4:34:bc:ff:83:a9:b3:6c:79:95:
51:27:fc:43:96:b5:3b:a9:4b:61:aa:d4:69:8a:f5:
cc:e7:4c:6e:10:52:95:db:5f:4c:59:35:70:cb:8f:
24:e6:28:77:34:80:b2:3f:ba:97:0f:a6:21:8a:75:
88:2e:ae:31:a1:7f:ed:76:d3:24:c7:b9:59:ea:85:
2a:e8:f7:c5:cd:3a:ab:fd:49:7c:b2:a2:ba:85:c7:
dd:d9:20:0f:05:d6:e9:a2:4e:97:d7:f9:f8:87:31:
1b:5e:a8:87:b0:e6:2a:60:69:ac:fc:19:23:f6:25:
96:be:da:f9:5b:0d:74:1f:f1:a0:cd:e2:6f:3a:ef:
a6:70:10:3c:5f:c2:e1:6e:01:df:d7:14:24:38:f9:
55:e1:4f:49:32:9a:d7:67:a2:a7:b4:d5:c9:f0:80:
71:ee:1c:a2:1a:57:8d:a2:63:3f:8e:67:63:6a:d8:
e2:00:9c:79:f1:f6:b9:82:74:1e:e5:ea:e2:17:b1:
7a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FB:2D:EA:88:57:E7:C8:41:20:6A:4F:7D:A4:FC:B1:C0:17:E5:F4
X509v3 Authority Key Identifier:
keyid:C1:1A:B9:16:82:1C:5A:31:48:CE:12:52:BA:78:01:CA:A2:AB:49:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b8:65:c1:e2:07:da:b2:aa:3c:c7:bb:b1:6a:2d:99:6b:c6:
cb:16:21:fe:8c:23:0b:99:c2:2d:8a:7f:74:55:58:af:40:ac:
55:e9:8c:48:c1:6b:0c:b0:ed:bd:0b:cf:8b:d1:2f:c0:5c:b3:
c9:02:aa:da:76:30:f2:ac:40:30:d4:07:41:65:6c:c9:b3:ff:
10:39:1b:c2:30:eb:9b:06:78:66:86:01:dd:9d:b5:fb:17:8d:
eb:8c:5d:08:9c:3f:27:d3:42:91:77:30:73:e6:6e:4f:56:b2:
c4:0d:98:d7:36:b6:9f:e2:ae:de:36:eb:a0:0d:a1:e3:49:4d:
5d:3d:3c:28:52:96:30:3c:8c:bd:62:d6:24:f0:93:6e:e4:50:
bc:f1:2c:b2:3d:16:90:f0:2a:b2:f0:cf:9a:bf:5c:bf:2f:c5:
89:9c:f8:0f:47:c5:74:52:22:4b:9f:49:9f:2d:91:e9:42:e4:
6f:af:3e:a5:e7:74:47:d7:cd:4f:71:53:ce:d9:08:a2:af:4d:
0b:93:db:0f:a7:ac:f5:30:24:05:e6:82:f1:7d:f3:da:1c:9a:
7c:b6:bc:8a:7c:66:65:28:cc:ed:4e:37:26:ea:d6:08:e8:ba:
6f:f6:8a:df:a5:13:f9:94:c4:18:78:63:f0:34:bb:bf:97:e1:
85:cc:8c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:03 2025 by rpki-client on console-fra.rpki-client.org