Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
File: WtRDrRlESBQSLzsny5OlBavlB5k.mft (raw, json)
Hash identifier: 480dT++F+8SNxI7piF6StafzwvR0sbsAwWhG2OjgIRU=
Subject key identifier: EE:1E:F6:B9:8C:79:93:D8:53:17:03:93:85:DF:A8:8C:D8:85:61:22
Authority key identifier: 5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
Certificate issuer: /CN=5ad443ad19444814122f3b27cb93a505abe50799
Certificate serial: 01906F08BDEAEFFE8BC60C68B5ED82951724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
Manifest number: 11F0
Signing time: Mon 01 Jul 2024 16:02:41 +0000
Manifest this update: Mon 01 Jul 2024 16:02:41 +0000
Manifest next update: Tue 02 Jul 2024 16:02:41 +0000
Files and hashes: 1: RW-d5JscVRCg1yOsHhL6ZPAJV-4.roa (hash: GNIyRT1I9iwu+Mf56gl5HVi023H3/9zDemHDM5GgsVM=)
2: WtRDrRlESBQSLzsny5OlBavlB5k.crl (hash: 8+qgRi2HFOGjAL+VX+0QJ1KavXF9AaOLVoCas7F8iX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 13:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6f:08:bd:ea:ef:fe:8b:c6:0c:68:b5:ed:82:95:17:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad443ad19444814122f3b27cb93a505abe50799
Validity
Not Before: Jul 1 16:02:41 2024 GMT
Not After : Jul 2 16:02:41 2024 GMT
Subject: CN=ee1ef6b98c7993d85317039385dfa88cd8856122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a9:03:2c:12:6b:34:23:b3:ea:ec:d6:9a:1c:
ea:3c:96:ac:84:2b:c5:03:76:c8:43:0c:d1:fa:a3:
d9:a8:f4:57:8f:ab:73:14:e3:7c:27:eb:6e:0c:f4:
b1:ff:b9:58:fd:c9:4a:e1:9a:51:c4:bb:64:c5:bd:
6d:f4:54:c3:fb:31:d4:6a:d5:b5:f0:bb:3c:57:61:
99:c6:23:e8:f1:20:67:e3:72:4f:50:be:cd:64:4c:
4a:d5:6c:45:15:ff:e4:7f:5c:70:08:bf:4c:ad:8e:
46:cd:cd:9d:91:a3:95:10:05:36:0c:e0:83:fc:96:
b5:68:b6:a7:ae:07:57:c4:ef:5f:d3:e1:37:3f:54:
d0:62:e8:f4:11:71:42:dc:dc:05:af:0d:41:b8:9e:
82:7a:93:c1:33:c3:ec:ac:45:ca:b5:46:6e:cd:ab:
67:ac:f6:5d:e7:6d:68:c5:dc:a9:d2:14:94:d9:e9:
99:8e:e2:49:15:d8:22:ff:54:67:84:9d:79:43:62:
ee:48:d5:3d:96:90:f3:46:cf:bb:72:f3:09:1f:f1:
b7:c2:68:75:ff:ba:85:2f:22:17:e6:da:27:cd:59:
bc:51:15:b2:c3:20:9e:e7:22:46:99:77:a6:8d:97:
cb:32:56:85:0a:7c:e9:cf:ca:d3:d2:20:29:44:18:
69:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1E:F6:B9:8C:79:93:D8:53:17:03:93:85:DF:A8:8C:D8:85:61:22
X509v3 Authority Key Identifier:
keyid:5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:47:45:78:f3:35:39:15:2d:7b:42:69:71:9e:30:fd:62:6a:
69:75:ef:1a:ea:10:6d:19:0e:4d:89:0c:a2:dd:97:a9:15:4c:
dd:c9:30:b4:de:9d:58:bb:97:7d:1b:e2:9f:e1:d1:f2:f1:3e:
33:f9:f6:ae:0f:74:9e:3f:58:a0:d8:c5:5b:b1:1d:fb:f0:bb:
0e:ad:93:c5:cf:2d:37:36:2b:e1:84:1c:7c:e9:34:53:ef:fa:
c1:31:d0:89:b9:40:03:1b:5d:0f:40:f5:cc:19:42:e2:2f:cb:
fc:3f:bf:81:ac:4a:4b:a9:81:f0:7f:e7:84:d9:93:ac:9c:8e:
dc:91:9f:dc:69:46:dd:62:de:46:69:1d:4b:ac:fe:c2:0b:c8:
9f:b0:7e:d3:5b:54:96:5a:ec:8a:df:68:05:c6:84:fb:c2:a5:
bf:1a:b5:b0:96:78:fa:62:53:83:3e:1e:67:30:84:f2:ee:9a:
8a:1e:82:4a:97:31:d9:46:40:7c:00:0a:39:aa:63:14:f9:d8:
92:32:59:a0:a0:b2:3e:89:48:64:7f:3a:7c:04:4c:16:64:5a:
85:50:1f:00:d0:e0:61:0f:cf:d5:45:57:5f:8f:37:a8:39:6f:
73:8c:28:02:f8:8d:70:ab:c2:b9:88:40:49:a7:d3:05:0b:b0:
00:67:f3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 18:48:21 2024 by rpki-client on console-fra.rpki-client.org