Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
File: WH7X6fmKHxl17p-8sJXDrfoorsA.mft (raw, json)
Hash identifier: dGiJ8XESbxparAJZSrzR1l9WwjBEGynZtAT+ByZEFTU=
Subject key identifier: 30:B9:57:9F:3D:2F:DC:D4:48:5C:14:55:1B:66:97:1C:63:D9:79:FB
Authority key identifier: 58:7E:D7:E9:F9:8A:1F:19:75:EE:9F:BC:B0:95:C3:AD:FA:28:AE:C0
Certificate issuer: /CN=587ed7e9f98a1f1975ee9fbcb095c3adfa28aec0
Certificate serial: 0194BABB812B998FB8461F6D50F2130EE0B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
Manifest number: 140A
Signing time: Fri 31 Jan 2025 05:00:37 +0000
Manifest this update: Fri 31 Jan 2025 05:00:37 +0000
Manifest next update: Sat 01 Feb 2025 05:00:37 +0000
Files and hashes: 1: 19CW3KILFYPXEhHk2Ol76tPUYYc.roa (hash: vdEeJmbxLIeIAD2w3zH+n6I7kJJZC/K9fF2eOSXSZV8=)
2: WH7X6fmKHxl17p-8sJXDrfoorsA.crl (hash: cv7RcO1+HyTN8ehHsQxYPs+bTINyt8tUfac/zhVWM3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:81:2b:99:8f:b8:46:1f:6d:50:f2:13:0e:e0:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=587ed7e9f98a1f1975ee9fbcb095c3adfa28aec0
Validity
Not Before: Jan 31 05:00:37 2025 GMT
Not After : Feb 1 05:00:37 2025 GMT
Subject: CN=30b9579f3d2fdcd4485c14551b66971c63d979fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:28:8b:08:be:fb:ba:fd:62:b6:d3:b2:e1:0a:
56:76:bf:58:cd:4b:57:b9:85:91:c1:2d:fd:40:dd:
54:a8:84:e5:d8:8a:eb:79:a0:d2:c7:d7:f8:b5:6b:
45:56:59:6b:88:a2:3a:ed:bb:a5:ed:f2:6e:ef:ab:
e3:33:27:54:cb:aa:8c:a7:68:5c:01:67:b9:81:b4:
f1:1e:49:47:25:22:fa:18:7a:7d:33:98:34:84:5e:
8e:e0:83:ce:ce:f9:98:81:5c:8a:f4:db:0c:3f:75:
c3:a3:1e:c9:1b:a3:98:bd:86:eb:27:2a:a4:8c:7a:
0d:15:94:de:be:93:03:48:8b:ff:ac:a6:aa:a8:5b:
8d:28:79:36:2d:f2:ab:96:e3:ba:2a:7b:f9:09:76:
14:af:a3:0d:6a:2b:01:a6:62:66:a2:cf:6e:53:41:
dc:a8:e9:8d:60:bb:9f:90:5c:81:95:a5:cc:d6:a6:
11:56:17:41:15:bc:82:67:19:99:57:00:0f:b2:5d:
9c:7b:a6:3d:c8:97:d0:1e:66:f5:e1:c4:11:e9:c7:
fe:63:64:01:7d:dc:41:e4:0c:5c:81:da:e0:30:d4:
55:9b:96:9e:75:5e:c9:93:65:5d:e6:22:2f:ff:10:
8f:09:08:1e:a1:be:0f:98:20:0b:31:c0:d8:b6:fd:
d7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B9:57:9F:3D:2F:DC:D4:48:5C:14:55:1B:66:97:1C:63:D9:79:FB
X509v3 Authority Key Identifier:
keyid:58:7E:D7:E9:F9:8A:1F:19:75:EE:9F:BC:B0:95:C3:AD:FA:28:AE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:3d:cd:29:c9:43:dd:e9:38:f4:3e:7d:06:67:22:ae:ef:4b:
bd:56:ef:d2:a9:6a:9c:3b:2a:f9:35:cc:3e:5b:ae:4e:47:c2:
85:a6:f9:fb:a7:50:5b:31:dc:b7:da:3d:0f:bc:e3:31:01:ff:
f9:83:e0:3d:f2:69:8b:65:df:58:74:78:a5:85:36:90:ef:e9:
0d:78:bb:83:80:0e:f1:97:8b:cb:0a:e7:07:51:04:a8:59:e9:
c2:84:db:ea:a3:ef:f8:89:be:4d:9b:d7:10:94:af:e1:22:1c:
2e:e6:45:cb:0b:f4:b8:26:01:03:50:55:5b:ca:21:7a:d9:14:
60:1c:68:81:e8:0d:bc:5d:24:6a:dd:35:a7:38:5d:0b:6a:5e:
e0:b2:73:97:4c:45:be:12:7c:61:e6:55:ad:27:91:f7:2e:07:
7c:06:19:c0:83:72:2c:04:d5:a9:23:ee:c1:50:87:82:d7:2f:
db:4a:1b:28:4d:82:b5:ba:93:7c:e6:43:28:c1:b5:2a:a8:33:
f7:4a:41:19:95:ce:6c:52:3f:58:ad:89:df:a0:56:69:a8:d7:
9e:cc:13:69:04:72:a8:5a:e7:db:e7:74:d1:46:26:30:d6:8e:
31:1a:10:f1:40:0c:67:51:57:f2:47:11:6c:36:4b:0c:6b:15:
0c:99:b3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:01 2025 by rpki-client on console-fra.rpki-client.org