Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
File: wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft (raw, json)
Hash identifier: VCzzFNbJ5w3YtkbDiRtD15dPLb7a06quIewawk6BX9M=
Subject key identifier: F6:7A:58:E9:0E:0E:8C:06:FA:97:ED:15:68:9B:B4:1E:E4:74:FC:BD
Authority key identifier: C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
Certificate issuer: /CN=c1b050211219d18e996e086cb7f6309178804860
Certificate serial: 0193549B5A8DA60BCC352FBA6DC6AFFEDA89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
Manifest number: 13C0
Signing time: Fri 22 Nov 2024 16:01:27 +0000
Manifest this update: Fri 22 Nov 2024 16:01:27 +0000
Manifest next update: Sat 23 Nov 2024 16:01:27 +0000
Files and hashes: 1: Juuq6NFlR_u0wegQ1mbet9E7950.roa (hash: 9BeXrWuMt1rSgHFDH8nilGY1NiIKTCNucFevlOidHs0=)
2: UjOI4D4bFnn3-69OmtW1EOFqQcw.roa (hash: Lev7DEgQqT6Xm7J3gHcShkE9ryrEB/bruJS8hTJT8ps=)
3: Z8yIXOGt-R81_p1X8gc7IFzMN60.roa (hash: UrzH24x3uoywiwr/7yoHropCgM2fcMRRu+pc9DAupB4=)
4: aE6rUPg7uW_xAN7Vj6B1enDwUsg.roa (hash: V5FSNYz6NN2Bw4ZdRSpbl0Cwevq1uPcXvFPnRzjv7eA=)
5: aV2tlRfaFNOGgwhONPSFe8FMjhY.roa (hash: LNGPrr5aalBDoCoCd2Fg0HeHcgtY2Iz6ETDdyX3r6aI=)
6: tXPAGmMeMGUt_Y_GLIdZ4bm84u8.roa (hash: Oq4uFu3qipLlmPEUoTtkEvFzy024ZUUiULoF07CLIxw=)
7: wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl (hash: kRjhcu1fOLw6DFXwN8e6suyh7k4dyGJQcWZ9bqisYcE=)
8: y19d9mLYEwnaQFrYY-KiaJDTT7Y.roa (hash: /FU0vTmK/MHqgbVfmXfxMVXHyd02mSJ/5+msPlk/B3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9b:5a:8d:a6:0b:cc:35:2f:ba:6d:c6:af:fe:da:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1b050211219d18e996e086cb7f6309178804860
Validity
Not Before: Nov 22 16:01:27 2024 GMT
Not After : Nov 23 16:01:27 2024 GMT
Subject: CN=f67a58e90e0e8c06fa97ed15689bb41ee474fcbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c9:c6:cb:6f:c0:52:74:70:b9:4b:f1:a7:32:
0a:ba:05:5a:cf:01:92:2b:4e:02:6e:ce:20:1b:37:
55:1f:6c:17:3b:af:f5:90:9e:7e:69:80:de:64:7c:
27:24:e4:c4:43:aa:1d:cc:fc:2a:9e:b3:5c:ef:dc:
cb:09:07:b0:c8:e4:9d:28:56:90:bd:e0:e1:7d:35:
84:a4:df:05:c6:03:0b:33:53:35:d5:11:e5:4c:8d:
91:79:b5:75:72:6e:16:b1:d9:1e:8e:64:46:cf:de:
fe:a4:a3:bb:e2:7f:0d:7e:2f:6c:b0:63:b9:ec:dc:
5b:72:c7:21:1e:7a:76:5d:4a:d7:45:68:01:bd:15:
c3:37:03:28:af:b0:17:d6:30:a0:eb:cc:0e:14:2a:
a2:f1:8c:89:a5:5c:ca:a1:79:42:2e:0c:69:f2:ff:
ed:72:57:1f:31:dd:63:12:33:b2:c0:d5:d9:95:fe:
a2:45:82:97:b8:70:02:57:9f:66:18:ba:94:1a:a5:
38:69:77:80:9e:84:77:f6:56:33:16:6e:eb:a6:3c:
5a:93:3c:37:e9:0a:b5:63:0b:c6:bb:63:4e:d4:90:
e8:64:46:97:74:72:f9:c1:60:a2:85:2d:7f:93:64:
93:4c:d1:7d:a9:ac:cb:3e:1b:4a:a5:b3:82:8d:31:
17:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7A:58:E9:0E:0E:8C:06:FA:97:ED:15:68:9B:B4:1E:E4:74:FC:BD
X509v3 Authority Key Identifier:
keyid:C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ab:d1:c1:f9:45:f2:38:c6:a2:25:db:d1:be:25:a7:fb:b1:
7e:25:d9:7f:39:a8:7f:77:3b:62:01:6b:25:d6:0b:43:72:e0:
a1:12:16:f8:6a:d9:2d:26:32:82:0c:76:8c:79:6e:4a:df:e8:
da:4e:99:96:54:37:81:f0:45:66:34:a7:03:0d:7d:50:a9:69:
d6:9e:f3:be:24:fa:de:e6:ad:67:84:34:22:df:98:3d:a2:90:
a0:9e:f0:05:09:4f:bd:ee:a4:68:4b:0d:e0:9b:32:96:05:34:
87:69:5c:ba:af:29:7e:cd:63:cb:0a:26:6c:44:32:ee:17:fc:
28:31:3c:5b:c8:11:83:98:c1:20:c4:8a:cc:d6:61:6d:b4:c3:
03:d1:1c:fb:6f:fc:ae:24:84:5f:a9:5d:6d:3f:04:b6:08:1c:
50:a5:7b:5c:ee:dc:9a:05:f8:70:35:4e:fe:3c:cb:e0:86:f1:
65:5c:e0:ab:83:03:01:7b:c5:72:f5:25:d0:30:c5:48:fe:71:
13:ee:d6:56:09:fe:5d:97:6f:dd:34:3e:77:99:c4:c2:1a:16:
86:d7:e2:97:2e:3a:3a:f3:8f:f1:6a:88:0e:c7:f8:49:c4:97:
73:02:c0:45:33:f9:88:fb:03:db:f1:8f:ba:9e:35:1f:e2:82:
84:e7:ad:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:24:56 2024 by rpki-client on console-fra.rpki-client.org