Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft
File: wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft (raw, json)
Hash identifier: Lsdreb+ZH/w9B5nfKdMXQ9k4QsA5DhhsrMS2akYfqH8=
Subject key identifier: 54:F8:DB:96:9D:4F:C4:F3:3D:10:1A:11:AE:FC:9D:9C:0E:76:86:65
Authority key identifier: C1:15:F1:34:1A:87:14:0A:12:2D:C8:F9:65:02:B7:24:49:05:7E:60
Certificate issuer: /CN=c115f1341a87140a122dc8f96502b72449057e60
Certificate serial: 0194C46338781E01E3DF70909B8ED3B45F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft
Manifest number: 124C
Signing time: Sun 02 Feb 2025 02:00:24 +0000
Manifest this update: Sun 02 Feb 2025 02:00:24 +0000
Manifest next update: Mon 03 Feb 2025 02:00:24 +0000
Files and hashes: 1: OZdY9tsN8gFkESVtIbXza917_a0.roa (hash: izbPKaAtrUogn7SQSKm/hKiliCifOlraqF2HZIB4lps=)
2: wRXxNBqHFAoSLcj5ZQK3JEkFfmA.crl (hash: cL7J44kbSTAxaHB7ooeKvkq9EWwl/DCRDEx2+Sw97iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:38:78:1e:01:e3:df:70:90:9b:8e:d3:b4:5f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c115f1341a87140a122dc8f96502b72449057e60
Validity
Not Before: Feb 2 02:00:24 2025 GMT
Not After : Feb 3 02:00:24 2025 GMT
Subject: CN=54f8db969d4fc4f33d101a11aefc9d9c0e768665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c2:7b:44:b5:16:0f:4f:b7:ce:87:c7:e8:5e:
1a:f3:ba:8c:28:5a:b4:10:d6:a4:4d:de:81:16:89:
8c:7a:2f:50:9f:c8:6f:36:66:10:7e:5b:bf:e0:04:
b6:d5:e4:90:b1:36:dd:5f:59:f4:a5:86:e0:71:c6:
af:d6:06:d0:59:ef:38:9e:d1:e4:f7:4f:30:02:7a:
4b:d6:eb:b3:e9:1e:62:a5:dd:47:bb:3c:d5:ae:b0:
b8:53:66:4c:ac:15:7a:5c:ea:3c:d4:2b:dd:05:fb:
13:6e:c0:d5:37:cd:3e:d0:05:60:a5:bb:88:fd:c8:
43:45:0d:32:f6:0e:6b:3f:d6:ac:bf:0d:32:1d:f5:
fc:4b:87:99:93:3b:ca:e8:2f:74:6d:c9:ce:88:5a:
2a:28:a0:1f:bd:25:ee:af:09:98:1b:b4:b3:97:dd:
6c:22:3c:97:3c:dc:02:6b:95:f9:74:cd:9c:76:47:
ba:a1:bc:19:3b:55:57:13:94:ee:05:34:18:97:77:
1a:fa:fe:48:03:66:e4:bc:a5:e0:16:0d:2d:4a:70:
fb:fd:33:6b:f1:2d:21:36:f5:49:0d:53:18:10:d9:
bb:ca:87:39:de:57:2f:9b:bb:02:65:ba:d8:95:30:
c0:c3:43:ac:03:f7:48:43:cd:06:2d:f6:45:b9:03:
b1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F8:DB:96:9D:4F:C4:F3:3D:10:1A:11:AE:FC:9D:9C:0E:76:86:65
X509v3 Authority Key Identifier:
keyid:C1:15:F1:34:1A:87:14:0A:12:2D:C8:F9:65:02:B7:24:49:05:7E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:43:02:d7:8c:04:a1:2f:dd:21:fb:fc:39:5a:cf:a9:ec:9f:
c2:eb:7e:44:10:0f:c2:8b:77:7f:56:db:d0:b6:fd:31:cd:d7:
9e:18:bf:66:0a:67:0d:e8:51:3e:43:ed:75:6a:07:f9:b4:18:
2d:26:ce:14:94:f2:e8:12:f6:e9:3a:03:30:bf:62:d9:ae:d5:
85:53:11:11:6c:32:0c:ef:fd:0f:a6:90:33:d1:1a:0b:4c:51:
48:3a:00:b0:2a:8f:a7:c4:36:c4:92:a2:f6:3f:9f:b1:bc:28:
3a:91:60:06:8d:bc:0f:6b:4b:79:16:8f:a3:7b:62:60:64:c0:
a4:c0:7d:54:d1:2c:5d:96:28:cc:9c:47:01:87:51:65:f1:ec:
e9:93:7d:f9:17:2a:fd:e0:f6:1e:6f:76:9e:92:b0:26:98:82:
ad:83:d6:f7:70:15:a5:05:0b:99:34:17:24:77:2c:bf:ac:c4:
2b:81:8d:b7:5e:65:45:ba:c1:d0:aa:5f:d9:2e:2c:0a:1b:07:
d4:d8:14:8f:f0:3f:c0:51:03:2c:ba:e9:d7:c4:3a:58:70:e4:
5c:0f:c7:72:72:12:f8:17:5d:8c:da:b8:d5:62:c1:3d:25:92:
12:fe:9d:56:18:0b:ac:8d:39:8b:0c:36:d8:1d:38:23:ed:b3:
23:8a:22:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:04:28 2025 by rpki-client