Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
File: WNKjVqVHgVW-qovGJWqG9tWz9zw.mft (raw, json)
Hash identifier: 5bj7Pv9Zax3hVyTr/0bPpeltnZr4y8dfQKNbaBOEAVY=
Subject key identifier: C4:37:F7:29:8F:A7:F3:2E:C7:6E:91:F2:C8:DC:51:32:C0:07:5C:08
Authority key identifier: 58:D2:A3:56:A5:47:81:55:BE:AA:8B:C6:25:6A:86:F6:D5:B3:F7:3C
Certificate issuer: /CN=58d2a356a5478155beaa8bc6256a86f6d5b3f73c
Certificate serial: 019356F678FF05B07AA2C903EB775CE4FFEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 03:00:13 +0000
Manifest this update: Sat 23 Nov 2024 03:00:13 +0000
Manifest next update: Sun 24 Nov 2024 03:00:13 +0000
Files and hashes: 1: FrjHBr6yfZ0iByP4cW7T3WaihRc.roa (hash: 5nTbRpGCRk6o9k+phNRv1ttWXj8wA+fHkuadarOH3ks=)
2: WNKjVqVHgVW-qovGJWqG9tWz9zw.crl (hash: pOBd/4R9i4cric+p9W/0E5nLNQuWMwlvXLEfnW8QpY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:78:ff:05:b0:7a:a2:c9:03:eb:77:5c:e4:ff:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d2a356a5478155beaa8bc6256a86f6d5b3f73c
Validity
Not Before: Nov 23 03:00:13 2024 GMT
Not After : Nov 24 03:00:13 2024 GMT
Subject: CN=c437f7298fa7f32ec76e91f2c8dc5132c0075c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b2:3d:b5:4d:5c:48:e1:95:2e:fe:3c:9a:f9:
62:28:23:82:89:71:2c:61:d6:05:c5:d4:66:40:6c:
60:cc:3b:c4:73:13:1f:5e:be:cc:ba:a4:01:02:64:
54:c4:57:c7:a3:75:3f:b9:01:a9:5f:bf:d5:76:fa:
39:fb:79:6e:47:20:26:f4:83:d4:a3:6a:1c:21:7c:
c9:2e:ef:be:05:07:87:55:3e:ad:b0:63:ef:6e:ad:
66:b3:95:80:e1:50:d1:ed:a6:65:b6:e2:40:b3:64:
c2:2f:dd:13:b3:00:83:1c:85:b9:25:d7:43:89:b3:
56:10:3d:b2:bb:9f:06:d8:92:57:d6:62:df:c1:12:
e1:ee:92:75:1e:bb:9b:0e:a3:a5:99:e1:2e:58:0c:
bf:05:13:c3:05:33:4a:38:06:f9:9b:07:a7:f4:24:
9a:98:e1:38:fb:1b:31:fb:3a:d6:21:f8:62:ab:a9:
68:af:9f:8d:fa:d1:ae:e8:44:59:f2:89:46:8c:54:
a0:31:e7:b1:52:11:9c:a4:d3:0c:d2:9a:6a:ca:1e:
5e:c6:26:fc:1e:2f:84:6f:d1:76:6c:44:98:57:e9:
22:d1:df:4f:70:fc:fe:f0:b7:64:ac:27:c5:f2:95:
61:9f:48:28:85:89:6c:d5:67:94:83:99:42:94:e6:
a0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:37:F7:29:8F:A7:F3:2E:C7:6E:91:F2:C8:DC:51:32:C0:07:5C:08
X509v3 Authority Key Identifier:
keyid:58:D2:A3:56:A5:47:81:55:BE:AA:8B:C6:25:6A:86:F6:D5:B3:F7:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c9:62:32:65:16:87:0f:ee:47:87:85:96:48:1d:b8:b2:29:
9a:17:36:61:a3:b9:20:b3:b9:36:3b:08:b7:48:ce:37:b4:07:
f8:ec:03:98:b8:2b:cb:68:05:6a:50:bf:03:55:49:5f:6d:f5:
f9:e3:1d:d9:5c:4b:99:3b:ec:dc:52:de:00:3a:e1:63:c5:49:
e2:ee:76:ef:36:61:80:bb:47:9e:c5:32:9a:eb:e2:d9:92:70:
7f:19:45:f9:2b:86:4b:55:c1:fa:2a:fa:c4:a2:9f:4f:ea:f8:
d3:77:84:88:d7:a3:ec:65:f7:c0:84:86:48:a6:e8:5c:47:54:
7b:61:7c:79:49:95:1c:c2:36:27:5d:b4:f7:5a:91:b7:e8:81:
e5:a0:a7:eb:f7:c5:c6:12:21:36:f6:ac:7b:aa:fb:99:f5:87:
5f:4d:9f:f8:01:d3:75:c9:90:b3:7c:92:ac:c4:9b:9c:47:68:
d8:06:83:57:b8:38:1a:de:96:54:83:bd:8e:3e:08:84:6d:0d:
d7:b3:fd:22:4b:16:d8:fc:2e:ef:9d:44:af:32:59:a1:37:91:
5b:a2:8b:fb:ac:99:0b:71:6d:80:e3:29:d1:81:4d:76:66:27:
32:65:f5:ba:43:4e:bb:d4:01:58:05:05:2f:bb:78:f5:c5:3e:
fc:51:d4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:54:36 2024 by rpki-client on console-ams.rpki-client.org