Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft
File: W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft (raw, json)
Hash identifier: qDXtg7VvQV5NdAqk0gKcEmg2cZUA/6i/c11+Wu2Lgx0=
Subject key identifier: 76:8C:EA:12:3C:E9:DB:88:DB:C0:01:AF:AB:45:BB:5E:EB:2C:87:0F
Authority key identifier: 5B:E5:F1:95:3E:03:1D:27:98:64:F3:C3:BE:FF:0B:C6:75:A0:0E:E4
Certificate issuer: /CN=5be5f1953e031d279864f3c3beff0bc675a00ee4
Certificate serial: 0194C3F571FC29BF4C39C431694F20F4F609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft
Manifest number: 11C7
Signing time: Sun 02 Feb 2025 00:00:29 +0000
Manifest this update: Sun 02 Feb 2025 00:00:29 +0000
Manifest next update: Mon 03 Feb 2025 00:00:29 +0000
Files and hashes: 1: W-XxlT4DHSeYZPPDvv8LxnWgDuQ.crl (hash: c3qfLEEKQBmBx2IXnpLueepNN09njPf/NLp6gZb2UNk=)
2: yA5B5VXhOCm628j2BmlmI-fci1Y.roa (hash: QTSh8buWKlIWj0giqvjbzYLkHrxbOtA9phJCik8JbFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:71:fc:29:bf:4c:39:c4:31:69:4f:20:f4:f6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5be5f1953e031d279864f3c3beff0bc675a00ee4
Validity
Not Before: Feb 2 00:00:29 2025 GMT
Not After : Feb 3 00:00:29 2025 GMT
Subject: CN=768cea123ce9db88dbc001afab45bb5eeb2c870f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ac:70:c9:a6:c3:38:0e:17:63:24:30:9e:38:
5a:d5:f5:f8:59:e6:23:e8:47:23:34:cc:93:89:00:
2e:2f:d6:a3:83:ee:f6:92:20:ff:be:8e:8a:82:e7:
0f:5c:81:e2:6f:dc:96:7f:90:a8:09:fd:e1:dc:23:
e5:8c:04:ab:26:5b:11:53:5c:e0:a1:1c:be:c8:9a:
29:8b:a6:59:56:cb:64:27:ab:dd:db:64:12:9f:af:
da:4c:61:e0:fd:36:5d:27:62:2e:33:ff:98:f3:b1:
5d:c0:16:39:58:d0:d9:c1:17:05:6a:85:0e:cc:30:
05:9c:4b:d8:a5:a9:f9:43:ba:59:ab:39:12:d9:f6:
17:60:b6:b8:32:23:f8:b2:ef:0a:10:e2:a1:b4:e7:
8f:81:e5:ae:42:cb:aa:55:b4:02:09:5b:d3:f7:0f:
1a:1b:49:a1:cb:07:79:70:2e:ab:1d:04:97:c1:df:
36:35:e7:62:43:91:e2:f5:84:ee:f8:89:02:ee:b2:
dd:03:3f:4c:98:8e:de:f9:93:33:78:76:60:73:40:
49:e5:8f:ee:36:bc:ad:14:2d:e5:30:fe:c7:0f:b2:
bd:e2:74:86:8a:d6:13:a2:b6:31:ae:7d:dd:88:b3:
25:27:b5:66:b4:bd:86:d3:bd:86:71:ac:97:0f:39:
3e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8C:EA:12:3C:E9:DB:88:DB:C0:01:AF:AB:45:BB:5E:EB:2C:87:0F
X509v3 Authority Key Identifier:
keyid:5B:E5:F1:95:3E:03:1D:27:98:64:F3:C3:BE:FF:0B:C6:75:A0:0E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:19:7e:a3:4b:7b:1a:84:4b:85:88:91:6e:29:c0:67:74:fa:
cd:d3:bb:4e:68:4a:e5:05:50:f5:f8:3b:40:85:77:c1:76:14:
f8:9f:e6:28:e4:00:cd:9e:11:0d:50:76:7f:90:9d:8a:9f:87:
57:d8:53:8b:9a:82:76:5b:8b:71:44:01:b8:25:e7:eb:57:9f:
9a:66:ad:2e:c3:51:ae:14:1f:b7:26:0c:9c:cf:2a:5e:35:8a:
3e:23:9c:4c:f6:2c:44:77:75:6c:04:86:62:8a:53:0e:fb:85:
7f:b0:8f:5a:28:4c:d4:d1:5c:73:e2:a8:3e:b1:fd:ef:41:5d:
19:df:38:cc:3f:ab:d3:13:0b:b5:26:8c:2c:d8:34:96:ed:5c:
fa:68:b6:c0:a2:06:26:df:bf:44:9f:48:ba:29:7f:23:0d:7b:
72:38:7b:7d:f3:c8:c0:00:f9:c4:84:9d:12:49:6a:07:0a:82:
bc:74:33:f8:c4:3b:b4:42:e7:09:72:21:1f:8f:c3:f1:2e:f5:
15:ff:7e:bc:f0:83:7d:de:02:56:fa:9c:8b:05:c8:4f:73:d1:
a7:f5:ad:b8:b2:7f:82:56:a4:75:89:26:0f:e0:6d:35:07:ed:
07:49:d7:7e:da:72:e6:2b:ef:b4:8b:64:14:8f:d2:7a:68:a9:
8d:c7:a9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:42:08 2025 by rpki-client