Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft
File: wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft (raw, json)
Hash identifier: THQi94wn2p881Z8GVythQHUFrUA9rwxsPKT7uOxn/Tc=
Subject key identifier: A1:6A:68:E9:B5:2C:B7:15:C8:35:40:06:E2:4E:79:C7:8E:CF:62:75
Authority key identifier: C1:31:D4:65:61:74:4A:68:10:16:C8:D6:F9:A6:1B:9C:17:CB:7F:0F
Certificate issuer: /CN=c131d46561744a681016c8d6f9a61b9c17cb7f0f
Certificate serial: 0194BABB96865BE6452296563C7736775E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft
Manifest number: 1288
Signing time: Fri 31 Jan 2025 05:00:43 +0000
Manifest this update: Fri 31 Jan 2025 05:00:43 +0000
Manifest next update: Sat 01 Feb 2025 05:00:43 +0000
Files and hashes: 1: ZDdnNxC-Iv1H5A5BkJloJqSNxf8.roa (hash: UCqx4EaKls5iWpImDrWYZpurlTDip+uji9Lqqm7JLEg=)
2: wTHUZWF0SmgQFsjW-aYbnBfLfw8.crl (hash: fTQ4WRf/IzwZJNpN383zuCr+mKbNP3gSgbWf5LGfsnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:96:86:5b:e6:45:22:96:56:3c:77:36:77:5e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c131d46561744a681016c8d6f9a61b9c17cb7f0f
Validity
Not Before: Jan 31 05:00:43 2025 GMT
Not After : Feb 1 05:00:43 2025 GMT
Subject: CN=a16a68e9b52cb715c8354006e24e79c78ecf6275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:13:a8:b2:0b:35:eb:0e:f1:91:08:6c:0a:53:
84:6d:74:88:3a:ba:79:d6:38:0a:84:fb:b5:12:50:
c0:76:fd:46:a1:48:d2:97:bf:4d:d0:1d:3e:93:27:
27:28:df:c4:67:bc:c7:d8:63:d0:65:f4:17:11:e5:
ad:83:9e:1e:07:00:99:96:07:45:e5:54:61:35:2d:
67:bb:22:2a:24:4d:84:0d:06:23:bd:bf:3f:04:14:
6c:d5:99:e5:c7:a0:8f:ee:24:9d:7b:84:5b:fe:66:
d2:ee:05:e3:15:18:0b:a8:65:b3:66:0f:4e:97:de:
6a:cf:56:d4:e2:93:ad:d0:19:aa:2f:98:3e:cd:83:
8f:f9:11:8d:f8:56:ed:18:f9:97:c9:60:f3:75:f0:
25:51:53:d8:a9:da:30:55:18:02:46:8d:84:e6:0b:
37:82:d2:83:82:ad:c4:90:9a:84:3e:69:28:83:06:
7e:7b:67:41:a0:fc:f6:31:20:d7:fe:58:24:6b:f4:
d2:15:6b:c6:4e:ff:4b:15:d1:3b:dd:6c:8f:e9:db:
c8:41:c8:40:46:cb:d3:12:14:5e:5f:61:2f:14:6d:
22:90:f1:2d:53:06:f8:d0:95:f6:2e:4e:b8:6f:f0:
59:40:64:a7:a8:a9:a0:18:de:8d:ed:16:00:af:dd:
b4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6A:68:E9:B5:2C:B7:15:C8:35:40:06:E2:4E:79:C7:8E:CF:62:75
X509v3 Authority Key Identifier:
keyid:C1:31:D4:65:61:74:4A:68:10:16:C8:D6:F9:A6:1B:9C:17:CB:7F:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ca:4e:47:5a:9b:90:69:1d:9c:65:09:95:39:28:59:b0:d3:
92:46:ab:94:b6:0f:34:d0:71:8f:79:29:92:39:e4:f5:c9:a2:
8a:7b:ff:33:bc:25:b1:36:db:c8:8e:13:b7:39:d5:78:db:65:
3a:76:87:85:b9:c1:f6:c7:ae:52:31:d1:a4:65:ca:c6:8b:68:
49:8d:c4:7c:b2:36:03:02:f8:e5:05:42:23:4c:51:61:19:ba:
e2:14:d9:07:10:e2:9d:87:2d:6c:66:d7:bc:53:0c:1f:55:8e:
bc:c0:d3:e7:2c:22:e0:c1:88:16:b0:7b:98:d2:ae:43:9a:5c:
79:40:14:6d:91:5c:28:95:1d:48:b4:50:3c:59:5a:a9:02:51:
1d:52:91:3e:35:4f:96:67:dd:3c:38:38:88:15:46:c7:6c:8f:
36:e9:9e:f6:f3:d5:89:9f:f1:34:0e:52:ba:5e:87:81:e4:3b:
e7:06:9e:6a:d5:90:a0:ab:9c:0c:0d:1c:6a:df:40:b9:2b:17:
6e:40:9d:f6:93:fc:93:f2:b9:5d:34:c9:30:4e:3e:20:36:39:
68:12:a7:78:dc:30:db:c7:f9:59:02:88:9f:b7:94:74:45:eb:
3c:b8:41:a7:4f:2c:c3:9a:63:41:2e:ea:96:fc:7e:39:76:7e:
7c:15:f1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:06 2025 by rpki-client on console-fra.rpki-client.org