Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
File: wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft (raw, json)
Hash identifier: N3qyNIXvqCWbgrmduOnk9SYqtPMSdGxioxXHZtUcQYo=
Subject key identifier: 76:BC:8B:D5:EF:77:EE:09:D8:86:E0:83:8C:D7:1E:40:0E:FB:56:6F
Authority key identifier: C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
Certificate issuer: /CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Certificate serial: 0194C3BEA2EB8A52F088867772A494B24024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
Manifest number: 04A5
Signing time: Sat 01 Feb 2025 23:00:37 +0000
Manifest this update: Sat 01 Feb 2025 23:00:37 +0000
Manifest next update: Sun 02 Feb 2025 23:00:37 +0000
Files and hashes: 1: 6zfU2J2wR6MMPAQDPcdRmDUSTTk.roa (hash: qvQ90YxdjeGEsA7jHHHCLNHaXx9teWbipOiBvb0hjRc=)
2: wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl (hash: T+fS6H++aKTSg/w4iCqir3jvoGlMZCnyE2tfbgRBkyc=)
3: x0gusjZxaAiftvAcjczux1Ius_E.roa (hash: HFa+GGzqn2pKQb0OIJEk/YaY1MmpeAOG1mYH0pjtvqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:a2:eb:8a:52:f0:88:86:77:72:a4:94:b2:40:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Validity
Not Before: Feb 1 23:00:37 2025 GMT
Not After : Feb 2 23:00:37 2025 GMT
Subject: CN=76bc8bd5ef77ee09d886e0838cd71e400efb566f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a8:ad:04:84:5a:22:07:c0:32:f9:6b:6a:b7:
66:c9:cf:09:f4:ff:14:4b:ab:5f:ab:20:69:99:20:
d7:ae:e1:c5:a8:fd:19:65:79:d0:ef:bb:80:c4:2d:
25:84:7b:0c:01:45:fe:24:2d:a3:94:96:a6:88:8d:
61:10:99:4d:da:0f:d3:59:08:f0:b0:78:57:de:81:
0d:8a:af:46:90:da:89:d3:d8:34:f8:70:0c:b9:33:
8e:57:bd:4b:80:6e:69:8e:ad:7f:6a:d3:52:de:fc:
2d:dd:7e:f4:5c:d7:24:a0:7e:23:80:68:56:00:87:
fb:dd:53:7a:92:7e:43:9e:37:c8:77:ce:5d:72:e3:
b2:59:90:8e:ad:ac:49:0a:00:2e:6d:40:6a:40:d5:
4a:e2:99:e8:59:fc:e6:90:c2:5b:97:b7:b7:ff:40:
e0:01:f6:05:81:b4:d3:b0:b6:5c:f0:f6:0b:75:bc:
63:fc:6f:53:c4:84:0b:ba:a3:66:2f:5b:76:65:96:
b2:0f:23:cc:a3:40:cb:fc:ff:53:5d:81:0f:28:99:
5a:c4:15:df:52:70:3e:59:42:19:58:fb:f6:44:0a:
31:54:bc:24:d8:68:0e:41:7a:a6:e4:ea:71:74:3c:
04:e2:c5:d0:1a:44:3d:69:f8:c9:d5:ea:6b:d5:14:
f8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BC:8B:D5:EF:77:EE:09:D8:86:E0:83:8C:D7:1E:40:0E:FB:56:6F
X509v3 Authority Key Identifier:
keyid:C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:bf:56:e5:d7:c5:18:08:e4:83:a8:2f:df:43:73:90:fb:e0:
3f:d3:ac:2c:5c:7f:69:ad:f0:7d:5d:9a:dd:eb:ff:10:30:80:
ea:24:ac:c0:f9:f0:ad:e4:51:73:fa:32:cb:84:f1:3d:9f:94:
6f:77:82:b2:ca:18:e7:8e:52:50:57:88:3d:55:cd:0a:86:04:
02:20:cb:f9:69:8d:5a:0c:b5:9a:2e:9d:84:79:0c:1a:2b:f7:
99:03:4d:11:9b:23:9e:35:38:7d:45:25:f9:e4:9d:57:4a:fc:
77:b4:4b:60:ff:71:66:64:17:44:d0:91:1e:80:14:d0:59:32:
ed:40:7e:10:8d:bb:c2:f0:81:a0:48:5e:79:14:c9:85:7c:23:
c3:b8:b3:c3:67:78:8d:37:21:9b:c3:18:0e:dd:d1:2f:85:e0:
c6:96:b9:e2:b2:f8:43:08:4c:c7:87:98:25:61:de:29:d5:9f:
c9:99:5e:a8:a1:07:9e:4d:2a:01:94:f3:73:b0:49:aa:46:28:
fa:98:d1:3e:d2:4e:04:18:16:81:7b:34:55:9d:71:32:d6:ff:
4b:46:a7:1c:12:ed:91:63:54:4b:e2:4d:f4:c6:c4:21:b5:4e:
cb:d6:7b:b0:1f:26:db:e3:7a:06:63:70:39:1a:a1:c9:7c:99:
9a:4d:e8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:53:02 2025 by rpki-client