Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
File: WgqpaCxoOpwblc6WdtUbINOf0q4.mft (raw, json)
Hash identifier: eXisaD/xSaTkBFZImbrj3H9YMLFqEkf5WbNE530hQ9o=
Subject key identifier: 4C:7B:A0:18:E5:C2:0A:AF:97:2E:A6:04:78:9C:40:38:83:9D:A1:1D
Authority key identifier: 5A:0A:A9:68:2C:68:3A:9C:1B:95:CE:96:76:D5:1B:20:D3:9F:D2:AE
Certificate issuer: /CN=5a0aa9682c683a9c1b95ce9676d51b20d39fd2ae
Certificate serial: 019511A3020E7BD5964FDEA195F61597FAB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
Manifest number: 0CC5
Signing time: Mon 17 Feb 2025 02:00:50 +0000
Manifest this update: Mon 17 Feb 2025 02:00:50 +0000
Manifest next update: Tue 18 Feb 2025 02:00:50 +0000
Files and hashes: 1: D9VtpqQ5QcOE8_3AAGv6AbSncPk.roa (hash: 45VJpPEdefwyDmmpbMXwZdBXiJtpSM2szrEhn6hGnnw=)
2: WgqpaCxoOpwblc6WdtUbINOf0q4.crl (hash: uIQp/Dww2WG+KdU4R7w8tffSnTT/Yl4I/sJWmqOX4PM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a3:02:0e:7b:d5:96:4f:de:a1:95:f6:15:97:fa:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0aa9682c683a9c1b95ce9676d51b20d39fd2ae
Validity
Not Before: Feb 17 02:00:50 2025 GMT
Not After : Feb 18 02:00:50 2025 GMT
Subject: CN=4c7ba018e5c20aaf972ea604789c4038839da11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c6:22:1e:6d:48:ad:8f:ba:4b:ca:c2:9c:cb:
53:d6:92:fb:54:ec:e0:50:ed:c4:1f:e7:ae:d5:59:
34:41:39:9d:60:95:1e:c5:0a:0c:89:e5:51:2a:11:
95:c7:fa:a0:60:72:d1:b9:78:cb:4c:7f:1b:32:de:
dd:51:ab:8f:fa:0e:bb:51:3a:95:c0:71:95:93:0c:
8e:74:1c:04:e1:2b:41:bb:3e:f2:38:19:ff:b9:53:
4b:30:91:9c:5e:87:a9:43:0e:6e:1c:8c:93:9f:25:
65:a2:2b:24:a2:79:67:b3:b0:f3:07:f9:c8:b5:42:
f4:18:c7:94:34:0b:8c:16:83:8a:b4:8a:e7:b6:b7:
34:ad:35:18:c3:3a:6f:40:5f:43:66:e7:93:96:3a:
8d:0d:09:4a:b5:2a:75:b4:08:2e:b6:2d:8c:b1:ad:
49:e6:14:9c:a7:d2:c0:d3:ef:a0:80:1f:26:ff:ae:
bd:41:cb:29:c7:3a:9c:60:16:8d:ca:1d:3c:65:0e:
2a:18:b5:33:6e:1f:1b:89:52:49:50:07:b9:c9:ed:
60:35:e4:5f:fc:7e:8a:b1:f0:1a:c6:05:f2:21:38:
d4:06:af:a0:a4:54:ed:ca:22:a7:4d:14:0d:66:55:
29:a1:97:ba:35:43:91:e9:64:e4:8d:4f:f7:c2:af:
68:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7B:A0:18:E5:C2:0A:AF:97:2E:A6:04:78:9C:40:38:83:9D:A1:1D
X509v3 Authority Key Identifier:
keyid:5A:0A:A9:68:2C:68:3A:9C:1B:95:CE:96:76:D5:1B:20:D3:9F:D2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:13:28:1b:9d:00:f8:67:f8:86:3e:56:27:3f:50:99:23:1c:
b6:44:76:12:d8:9b:61:61:08:04:6d:55:98:14:e9:84:c5:0e:
c3:18:c7:e9:ed:87:25:3d:d3:8f:b8:5b:f7:8e:15:04:7f:16:
30:08:f3:ef:bb:55:35:c2:25:88:03:43:bd:bf:e2:ba:cc:95:
aa:8c:84:b1:c0:58:65:b7:ac:4e:0b:87:40:47:0c:e2:ae:18:
a0:56:e7:57:f2:bc:b5:cc:d6:80:53:c4:e3:aa:cc:19:0c:e1:
eb:7c:4a:53:7a:61:a2:92:b4:dc:1f:e0:83:36:f7:b9:f2:ca:
c3:ba:23:7f:90:ae:31:ea:27:77:51:4e:a3:28:0c:2b:5c:df:
83:92:90:b9:64:25:76:3a:f0:af:da:58:db:14:10:e3:b6:9b:
70:6d:83:b9:bf:19:1c:33:8f:8a:cd:c9:8e:fa:f5:39:20:84:
eb:3b:bf:fe:91:3b:6c:33:02:d6:3e:eb:d6:87:ec:4c:be:58:
c8:d0:75:f9:a4:68:31:98:e8:5d:2f:78:15:bc:31:ac:50:76:
64:a1:a1:11:58:28:93:d2:0d:cb:eb:af:b2:87:00:50:82:29:
fb:e9:a7:9a:07:4a:3d:de:91:86:00:4f:8d:f9:b5:15:0f:9f:
3f:7b:00:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:34:26 2025 by rpki-client