Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
File: Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft (raw, json)
Hash identifier: WsvXhfwH9wfMrCfufjOMK31molvdV0gfOR37bY4/3ns=
Subject key identifier: DF:46:E3:29:29:7A:75:AF:8A:13:28:20:E5:41:1C:D8:35:9A:FD:E0
Authority key identifier: 5B:1F:A5:2F:1E:9F:35:10:C2:CD:2A:E2:46:15:52:A1:AD:2E:3D:3A
Certificate issuer: /CN=5b1fa52f1e9f3510c2cd2ae2461552a1ad2e3d3a
Certificate serial: 0194C388655DC6BCF064B7F0FF9F15768900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx-lLx6fNRDCzSriRhVSoa0uPTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
Manifest number: 0EB3
Signing time: Sat 01 Feb 2025 22:01:23 +0000
Manifest this update: Sat 01 Feb 2025 22:01:23 +0000
Manifest next update: Sun 02 Feb 2025 22:01:23 +0000
Files and hashes: 1: Wx-lLx6fNRDCzSriRhVSoa0uPTo.crl (hash: xR3HrtZyHr+TEcVKwdGaTnlcAFESXNYP51B5vTXLr8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wx-lLx6fNRDCzSriRhVSoa0uPTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:65:5d:c6:bc:f0:64:b7:f0:ff:9f:15:76:89:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1fa52f1e9f3510c2cd2ae2461552a1ad2e3d3a
Validity
Not Before: Feb 1 22:01:23 2025 GMT
Not After : Feb 2 22:01:23 2025 GMT
Subject: CN=df46e329297a75af8a132820e5411cd8359afde0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d6:6c:2d:b1:d0:2d:ca:f0:99:6e:d3:ba:15:
f6:d6:55:7d:60:37:4e:7e:9e:c5:b2:28:1a:2a:5b:
b3:56:d8:0b:69:45:4d:11:1b:88:20:d3:fc:b7:1a:
f0:d9:08:25:29:66:00:24:0e:07:ff:6a:62:17:8e:
35:97:13:0c:f6:c3:32:b9:0c:22:54:c6:f7:59:05:
1c:52:b7:d8:71:0c:0a:b6:9c:8f:ec:8e:94:99:0d:
79:c6:85:a1:5a:e5:e7:1e:62:3c:da:7f:f1:73:62:
0a:a1:33:77:f2:d1:42:87:ed:bc:72:63:fb:c4:80:
e9:ce:d4:37:df:7e:fe:c4:47:f9:12:27:09:42:cc:
6e:fc:a2:21:d1:b7:ad:69:83:32:64:31:9c:1e:c6:
00:e0:fb:44:86:d5:57:a0:31:20:af:d5:4e:3f:2d:
5a:90:c0:8b:92:6e:28:85:1c:dd:b9:5d:e8:c9:34:
b6:16:c5:f0:1d:7e:de:86:5b:e5:b0:39:5c:8c:c0:
ff:a0:89:88:1d:c4:20:45:fd:19:16:45:de:e7:ab:
fb:78:4a:45:3b:bc:d2:71:89:ed:de:bb:97:c8:3d:
44:57:98:da:30:d3:37:d0:45:42:fa:52:c6:6a:04:
ec:65:1d:6e:f8:fc:f4:38:87:82:c2:82:eb:a2:1b:
fe:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:46:E3:29:29:7A:75:AF:8A:13:28:20:E5:41:1C:D8:35:9A:FD:E0
X509v3 Authority Key Identifier:
keyid:5B:1F:A5:2F:1E:9F:35:10:C2:CD:2A:E2:46:15:52:A1:AD:2E:3D:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx-lLx6fNRDCzSriRhVSoa0uPTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:22:7e:5e:69:95:0d:87:d6:15:c5:4e:97:0b:57:64:fa:36:
cd:d4:38:d9:5a:47:14:d8:4f:ec:44:b4:37:bc:68:b9:4a:d0:
e7:13:4a:be:49:19:2b:4a:85:40:6a:4e:6e:79:38:71:39:44:
4c:da:c7:65:9f:09:e5:21:5c:89:95:25:36:12:f4:e6:cf:38:
d4:6e:bd:ff:74:d6:7c:60:ad:30:75:75:eb:3e:4a:d8:19:2e:
cb:e7:a1:de:9f:13:dd:1b:b1:ec:71:5f:e4:41:db:0d:cd:75:
4e:71:27:05:c8:c7:de:21:4d:6c:fd:88:eb:9a:f6:d8:89:6b:
b1:20:3e:00:e1:b8:a6:42:f2:d7:f7:d7:0f:f1:e7:26:e9:cd:
9e:51:0e:71:9c:39:4f:c2:86:fe:67:7b:16:5d:23:84:32:9e:
a7:eb:ab:be:78:00:d2:98:9b:af:5f:65:af:ee:5b:f8:4c:8b:
de:eb:bc:ea:b8:dc:38:e8:61:08:8a:5f:25:a5:75:42:5b:65:
7e:0c:93:b8:ed:88:dc:df:8c:5a:02:64:aa:3f:70:68:d0:c7:
18:86:ae:b3:55:be:91:3d:dd:80:a5:2b:45:38:c0:2c:56:bd:
44:dc:22:74:70:96:a3:6a:36:1d:d7:27:c4:d7:fc:14:af:8c:
13:3b:1c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:59:35 2025 by rpki-client