Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft
File: wqmG2jXxcQTosRZSb4BjFXoW25c.mft (raw, json)
Hash identifier: ZAmHOH0Mf+xWhenwnB0y6eyZV9Li4fF7TDWxBeBXDGs=
Subject key identifier: 6A:55:9A:CE:A6:0A:C0:FB:C2:D0:6D:35:33:35:B9:B1:E1:EF:22:E2
Authority key identifier: C2:A9:86:DA:35:F1:71:04:E8:B1:16:52:6F:80:63:15:7A:16:DB:97
Certificate issuer: /CN=c2a986da35f17104e8b116526f8063157a16db97
Certificate serial: 0194BB293E0B2CF7178BDFF06FF3E2628A02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqmG2jXxcQTosRZSb4BjFXoW25c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft
Manifest number: 0EC2
Signing time: Fri 31 Jan 2025 07:00:29 +0000
Manifest this update: Fri 31 Jan 2025 07:00:29 +0000
Manifest next update: Sat 01 Feb 2025 07:00:29 +0000
Files and hashes: 1: wqmG2jXxcQTosRZSb4BjFXoW25c.crl (hash: xaM7W/4mK/Kxc+JWIEtUsvL49xfAXvvuQPaIuiP5DPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqmG2jXxcQTosRZSb4BjFXoW25c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:3e:0b:2c:f7:17:8b:df:f0:6f:f3:e2:62:8a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a986da35f17104e8b116526f8063157a16db97
Validity
Not Before: Jan 31 07:00:29 2025 GMT
Not After : Feb 1 07:00:29 2025 GMT
Subject: CN=6a559acea60ac0fbc2d06d353335b9b1e1ef22e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5a:e6:67:8b:e6:1b:b2:5b:ce:7f:bc:98:fa:
d4:34:7d:bd:7f:66:9f:ed:83:e4:c1:a3:ce:12:78:
2a:cc:b3:55:35:e1:29:80:5d:83:dc:5d:43:01:11:
fe:37:7a:9f:56:40:cd:db:04:ff:c3:a1:44:af:da:
b1:44:82:ef:5d:6d:91:b9:e2:7a:38:cb:2e:31:62:
12:e5:0f:ea:ea:4d:32:46:88:7f:f9:d8:f5:be:5b:
d8:9c:3c:88:49:8e:f5:79:20:bd:2c:4a:32:ae:be:
a0:55:a8:d9:4b:39:20:a1:f3:1f:5b:fb:68:f0:2c:
bf:96:99:cc:ff:d2:41:75:10:07:4a:d3:10:33:29:
da:66:a6:e6:04:9f:9a:a5:7f:17:b1:50:8c:17:37:
a8:07:ab:88:15:50:a3:2f:61:6c:07:f6:6e:63:f9:
2d:bf:b1:48:f5:6f:47:d1:83:4a:33:a7:ef:53:ef:
fd:55:d3:47:72:51:62:71:fd:31:ca:86:fd:67:dd:
76:93:57:9b:03:75:4b:e2:b8:9d:c6:d6:c7:05:87:
2b:66:31:2e:03:41:47:91:01:6f:31:2e:60:55:87:
be:2d:b0:85:26:39:93:2b:fc:79:b4:a6:7c:4e:6c:
44:bb:a1:65:a5:3b:e6:15:1b:80:d8:40:42:b1:88:
d6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:55:9A:CE:A6:0A:C0:FB:C2:D0:6D:35:33:35:B9:B1:E1:EF:22:E2
X509v3 Authority Key Identifier:
keyid:C2:A9:86:DA:35:F1:71:04:E8:B1:16:52:6F:80:63:15:7A:16:DB:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqmG2jXxcQTosRZSb4BjFXoW25c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c8:b0:32:89:5d:61:94:a2:0b:3c:44:1f:4b:b1:4e:b1:6c:
42:01:d5:fe:95:ce:73:5a:26:72:46:98:45:3a:d5:a9:76:d3:
83:ab:24:e5:89:e6:8c:79:96:99:11:0d:a7:3b:0a:4d:91:d1:
89:29:98:68:9c:3e:d4:1d:b9:27:a6:7a:d2:8e:3d:cc:cf:3a:
48:49:81:48:88:b8:92:ef:3b:28:ac:7f:50:38:3e:89:f4:dd:
cc:82:ee:53:c5:f3:42:d4:51:a9:ab:80:67:13:4a:25:05:5b:
99:9a:6b:bb:35:fe:94:7f:35:5d:a6:c1:7d:d0:df:41:a5:d6:
73:b5:f1:ed:cf:8d:75:73:f4:09:00:c8:35:0e:b8:83:76:c5:
1d:41:1e:1e:c3:23:38:33:70:6a:24:8d:9f:ec:b1:82:c8:42:
68:7e:00:2f:70:3d:ac:69:56:c9:ee:7f:9c:06:20:d6:58:ed:
4d:76:26:d1:2c:2c:23:09:45:6a:ed:2e:cf:94:14:0d:47:0b:
be:84:e7:50:f5:7a:a3:b6:2a:23:f8:95:59:31:57:1f:21:2a:
5e:d1:1f:56:2e:b3:d2:a5:58:45:f9:ce:e2:c4:30:01:cd:ac:
f5:4f:01:76:d5:fa:97:50:21:fc:61:2d:41:84:b3:fb:3e:22:
66:73:9a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:41 2025 by rpki-client on console-fra.rpki-client.org