Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.mft
File: wUuc2uDH11fKow4dR7Nz3uffdW0.mft (raw, json)
Hash identifier: hY0mMziQf6CvFXeyisAxiBM9eQstmvQfM8KOiVrPoCg=
Subject key identifier: 2D:E1:70:7B:3D:75:3B:7D:33:B1:2B:FE:27:CC:D7:8B:0C:9E:5B:7F
Authority key identifier: C1:4B:9C:DA:E0:C7:D7:57:CA:A3:0E:1D:47:B3:73:DE:E7:DF:75:6D
Certificate issuer: /CN=c14b9cdae0c7d757caa30e1d47b373dee7df756d
Certificate serial: 0194C3F55926106A588984AFDB2506ED9C72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUuc2uDH11fKow4dR7Nz3uffdW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.mft
Manifest number: B2
Signing time: Sun 02 Feb 2025 00:00:23 +0000
Manifest this update: Sun 02 Feb 2025 00:00:23 +0000
Manifest next update: Mon 03 Feb 2025 00:00:23 +0000
Files and hashes: 1: wUuc2uDH11fKow4dR7Nz3uffdW0.crl (hash: XkCfW1Pwbu/1kxi/ipoZkYjCjsaNLTOjWJn0TdcTCzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wUuc2uDH11fKow4dR7Nz3uffdW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:59:26:10:6a:58:89:84:af:db:25:06:ed:9c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14b9cdae0c7d757caa30e1d47b373dee7df756d
Validity
Not Before: Feb 2 00:00:23 2025 GMT
Not After : Feb 3 00:00:23 2025 GMT
Subject: CN=2de1707b3d753b7d33b12bfe27ccd78b0c9e5b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b5:c0:24:c9:46:36:cd:fe:f8:f2:6a:41:ad:
71:c9:cb:1c:1e:9e:bb:08:39:7e:65:94:65:3b:a1:
20:b6:6c:7c:68:1c:c4:7d:51:5b:99:39:e5:81:81:
82:cf:cd:48:8a:82:68:82:aa:97:1a:9f:03:bc:75:
88:9c:da:b7:6b:81:c9:c7:96:73:47:83:c7:fb:cd:
9e:a9:9d:04:11:13:10:fc:29:5c:f8:03:9d:16:28:
66:35:14:a5:dd:08:6f:05:6b:5d:70:d8:57:80:21:
82:c7:66:9e:9b:ea:14:81:8a:8b:39:f9:f4:42:e6:
74:c3:b7:7d:02:15:a3:ed:7a:66:f6:cc:30:c7:f6:
79:94:6f:18:1f:0f:81:c4:91:a4:2b:4c:e5:cf:7c:
59:57:2f:cb:9a:c3:c4:dd:7d:dd:1a:81:f6:8e:38:
2d:53:81:f7:95:8f:f6:9a:ba:8f:0d:f4:a4:91:e4:
b8:ed:4f:f6:c0:8e:64:04:78:ee:4b:ca:9d:8e:a3:
9c:e5:84:47:0d:9b:3e:86:15:a4:34:82:81:5d:66:
4a:98:51:d2:7d:ce:cd:0f:0f:79:45:9b:f3:e1:4e:
b6:f3:6e:f5:6c:77:61:eb:fc:95:6b:f1:d0:d3:a3:
c9:9b:a3:9e:6a:cd:31:bb:d5:f0:c3:be:80:16:ec:
d2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E1:70:7B:3D:75:3B:7D:33:B1:2B:FE:27:CC:D7:8B:0C:9E:5B:7F
X509v3 Authority Key Identifier:
keyid:C1:4B:9C:DA:E0:C7:D7:57:CA:A3:0E:1D:47:B3:73:DE:E7:DF:75:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUuc2uDH11fKow4dR7Nz3uffdW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:9c:0b:b6:69:a8:1c:1f:3f:67:ff:10:a5:1c:a5:65:76:cc:
6f:c5:4a:b4:1a:05:d2:7a:fd:5b:2d:28:60:8d:cb:62:58:ee:
cf:69:cf:13:82:64:f9:b1:33:54:90:ac:30:27:0c:39:20:d3:
03:6c:e6:48:00:28:1f:35:36:ba:2a:ef:3a:d4:27:53:2f:2f:
b0:0e:ed:e6:aa:6e:73:ec:d2:e8:93:b7:96:ba:4e:fe:fd:8d:
95:bc:9b:4f:16:87:35:a6:15:f6:15:2b:00:d3:74:51:bc:ea:
31:28:dd:2f:97:11:eb:5f:a0:84:b6:c3:59:53:74:15:55:87:
b6:a3:b6:07:45:1d:7a:f2:fc:62:ac:f7:0c:de:e9:7f:12:e7:
38:8b:ab:dc:91:8c:f2:31:70:15:ca:03:d1:45:b7:8f:a2:fa:
c9:f7:00:9f:8b:85:ff:46:da:62:40:e6:00:0f:10:0c:a5:c6:
02:9a:0d:51:67:d1:c3:b0:ee:39:70:dc:ef:cb:58:53:ce:27:
b6:81:1a:1f:9d:40:01:6f:0c:41:2d:51:1f:d9:04:e5:ab:42:
b7:de:50:c6:5a:6d:b2:7f:5d:ff:f4:9d:f1:2f:3e:da:f4:3d:
f9:48:03:67:93:5f:b9:1f:9e:05:77:84:f9:ce:20:23:f0:a5:
d2:6c:2a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:56:12 2025 by rpki-client