Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
File: WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft (raw, json)
Hash identifier: p7ZMujIaAeVDKrZq84y8G1v8AxIRmpWYMWVyyoklnRs=
Subject key identifier: 2C:EC:32:E3:D2:0A:F4:52:6A:BC:5B:78:E7:39:E9:E1:30:80:84:6B
Authority key identifier: 5A:18:29:AD:46:7B:4E:73:FF:E6:91:EC:14:6B:56:B3:69:09:F5:1A
Certificate issuer: /CN=5a1829ad467b4e73ffe691ec146b56b36909f51a
Certificate serial: 0194C4D1570DE1594AB8E8A629B3288ED338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
Manifest number: 1022
Signing time: Sun 02 Feb 2025 04:00:41 +0000
Manifest this update: Sun 02 Feb 2025 04:00:41 +0000
Manifest next update: Mon 03 Feb 2025 04:00:41 +0000
Files and hashes: 1: 7_MeqSoypZvgs9ZAL0kEwYQ0u1c.roa (hash: 8NO2vJikvip/otF7vMKB7776/r0hurKGavAakZtmDS4=)
2: WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl (hash: W8dS9VZMmIUcns5JnIeBcUkLtMAh18vVpQcWxdHwxM8=)
3: tzFD8X16hDfmCWt1Dl4XGdomYg8.roa (hash: njuYkI0SwGGHpocv80e/q9DE78xBX5bJk4xkczhpvI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:57:0d:e1:59:4a:b8:e8:a6:29:b3:28:8e:d3:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1829ad467b4e73ffe691ec146b56b36909f51a
Validity
Not Before: Feb 2 04:00:41 2025 GMT
Not After : Feb 3 04:00:41 2025 GMT
Subject: CN=2cec32e3d20af4526abc5b78e739e9e13080846b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:58:92:7c:65:38:1a:83:59:cd:89:4d:12:64:
3f:a5:35:d6:1f:bf:7c:27:0f:82:57:75:b2:39:97:
80:71:b8:61:3b:33:16:d0:34:a6:9a:42:04:67:af:
cb:ca:f8:17:d4:bd:07:56:2f:d8:14:eb:e4:5a:0c:
92:6d:81:87:53:3d:a2:42:dc:14:93:84:bd:63:3b:
76:5a:48:62:4d:3e:47:1f:f7:69:4d:f7:b4:24:f4:
ea:3d:f6:55:d6:d7:c2:a4:c0:c3:80:bf:64:b6:d5:
50:47:33:bb:98:31:7a:d2:30:41:fc:3e:f0:d0:6b:
fd:fa:c2:50:ed:cd:a3:14:f8:dc:99:30:b2:fb:a8:
3f:d6:cc:8a:11:9e:22:3c:25:8f:79:94:f7:2e:37:
e2:2d:b2:97:d5:24:34:58:6e:22:5f:2f:60:0d:99:
19:1c:7a:c6:9b:cc:6b:fa:5d:66:c3:93:41:a1:64:
40:dd:8d:c9:b4:a7:4f:e6:4b:0c:11:d3:a4:ef:0b:
81:c6:96:0f:7d:d5:a3:aa:bb:47:4d:ff:98:5c:17:
87:a9:6f:2c:2a:33:e8:3f:00:37:dd:79:a9:3a:a7:
a0:bb:27:e5:21:45:38:74:d9:92:a5:41:fd:58:1c:
df:75:eb:40:4e:23:d3:76:a8:0c:f0:a3:7a:d3:4e:
e2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EC:32:E3:D2:0A:F4:52:6A:BC:5B:78:E7:39:E9:E1:30:80:84:6B
X509v3 Authority Key Identifier:
keyid:5A:18:29:AD:46:7B:4E:73:FF:E6:91:EC:14:6B:56:B3:69:09:F5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b6:f2:f5:f4:77:f1:4e:a8:78:55:93:2c:46:2b:e1:80:9f:
66:11:25:cf:df:a7:ce:8a:12:23:ae:a9:b5:3a:e3:8b:ac:f2:
be:16:9a:fb:85:56:37:fa:3d:3c:e5:0e:02:e2:1e:1c:9e:64:
2d:da:5a:e1:f5:54:9a:75:19:48:c3:32:2c:07:ff:79:71:56:
77:77:d6:6e:8f:57:b4:37:e7:ca:75:55:40:4e:79:c9:4a:59:
91:9b:72:ca:10:62:ce:e3:8f:af:cd:23:62:e9:59:1e:5a:5c:
1b:7c:b9:a0:8a:63:6c:0a:10:46:b5:54:9b:97:cf:4f:87:cf:
5a:67:ae:1c:90:bb:ee:05:4d:82:2f:03:94:a2:c4:fb:60:27:
ef:5a:70:03:b1:9b:18:fc:5b:77:49:4d:e4:7a:c2:56:c8:49:
aa:6c:a7:1e:b0:cb:f0:93:fd:de:0c:31:28:26:a3:13:ec:5c:
8b:49:e1:c2:36:8b:61:24:44:c2:bc:94:87:c8:7d:fb:5c:25:
7c:92:a0:dc:6a:38:6e:7a:46:e3:23:51:cb:20:95:32:ea:96:
04:36:b2:11:f0:97:c5:c1:58:c8:b1:ee:d1:f4:29:07:25:39:
ea:fc:29:ec:7f:94:fa:33:73:c8:4f:fa:5a:e7:7a:3f:b9:a6:
c2:82:b6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:49:18 2025 by rpki-client