Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
File: wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft (raw, json)
Hash identifier: aDU2VSorfBrmzUNmMVIsXbmsbCc7RNh1TZcjreUR590=
Subject key identifier: A0:FB:E5:F4:B2:02:22:C7:42:00:77:AE:93:64:97:1B:62:60:F5:D2
Authority key identifier: C3:0A:EF:39:63:94:EA:59:50:DC:79:56:AB:1B:F4:91:36:46:22:A4
Certificate issuer: /CN=c30aef396394ea5950dc7956ab1bf491364622a4
Certificate serial: 0194C3BEB25464DD31B471AC1D97872293D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
Manifest number: 1388
Signing time: Sat 01 Feb 2025 23:00:42 +0000
Manifest this update: Sat 01 Feb 2025 23:00:42 +0000
Manifest next update: Sun 02 Feb 2025 23:00:42 +0000
Files and hashes: 1: rZbNK2xJ4XhKao8afy4CimeXVSk.roa (hash: DH234KafhTlCh4Rrjfu8Y3PnZSWa2Wt2QfsLpMy42vQ=)
2: wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl (hash: ZufzVGwYXMJHxmWFbWJsrNyJlTEb2jw715UGKVnFpXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:b2:54:64:dd:31:b4:71:ac:1d:97:87:22:93:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c30aef396394ea5950dc7956ab1bf491364622a4
Validity
Not Before: Feb 1 23:00:42 2025 GMT
Not After : Feb 2 23:00:42 2025 GMT
Subject: CN=a0fbe5f4b20222c7420077ae9364971b6260f5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6a:3a:8a:ca:b5:6d:46:5d:25:31:0d:a5:07:
de:c1:61:1c:11:75:4b:9a:82:2e:2b:9a:2b:21:4e:
f1:8b:44:85:7b:c2:a9:34:b0:dd:b1:bd:5a:3c:47:
ad:99:09:10:86:63:49:68:4d:9c:24:b8:9c:77:a6:
49:06:87:ee:94:75:aa:f2:c6:2c:e3:d9:34:3d:00:
dc:ef:a6:25:96:06:82:d7:e8:a5:61:c6:cf:36:c2:
d6:c8:08:df:99:e1:e3:df:0d:c9:80:78:0c:9c:4b:
ea:4a:e1:eb:d4:1d:aa:52:3f:6c:f6:58:45:8f:b2:
de:c9:0c:e1:6f:3f:15:95:68:a0:4d:e3:f5:a6:4f:
9b:c9:21:31:ed:41:c6:4b:40:44:fa:10:35:00:89:
d1:da:d3:88:11:a2:6b:0d:8f:b3:aa:2b:40:a1:bb:
02:f6:8d:a1:27:7f:81:1f:d9:95:0b:7b:6a:3d:8e:
88:e4:fc:f8:3d:fd:6d:34:2b:2c:b0:14:6c:23:1f:
b0:8a:b7:c2:3a:14:0f:2c:20:51:9b:71:96:a2:26:
4e:ed:79:f8:25:96:2a:84:32:4f:a8:ba:b0:e5:4c:
42:af:ee:22:04:c4:0b:a3:df:09:9c:99:ee:b6:64:
0e:60:a7:42:15:6c:0f:34:ff:10:ff:d5:d0:ad:c5:
4c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FB:E5:F4:B2:02:22:C7:42:00:77:AE:93:64:97:1B:62:60:F5:D2
X509v3 Authority Key Identifier:
keyid:C3:0A:EF:39:63:94:EA:59:50:DC:79:56:AB:1B:F4:91:36:46:22:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:85:a7:61:09:7f:5f:0c:28:28:2e:38:f1:1f:79:46:05:ff:
2c:b5:3b:f4:88:f2:8f:23:59:18:4c:f1:a6:08:8d:da:d3:d9:
a2:17:69:68:9c:b6:5a:1b:27:b2:57:49:96:79:26:e4:d1:18:
c5:2c:4c:44:42:a5:b4:9a:39:e0:ba:af:d3:f5:46:c9:64:8b:
3a:76:d4:b2:ef:e9:16:03:fc:f1:25:a3:18:5a:24:3a:33:37:
1d:17:e5:95:ad:8a:27:a2:ad:08:85:aa:9d:75:14:37:3f:25:
e6:7e:5b:c3:60:5a:ac:29:8a:3f:5c:01:2e:b6:84:c8:9b:a0:
27:be:64:4d:2c:93:f9:34:27:0e:bf:df:4d:6a:60:b7:e3:f1:
a0:29:fb:b9:e4:ae:f0:33:4f:02:53:6d:71:e4:be:90:cc:08:
17:86:9e:18:99:2e:9d:5d:94:75:0d:b4:95:9b:e9:18:cc:13:
cf:69:9d:f1:c6:c1:76:37:98:c4:6d:ec:d4:6c:db:23:98:e7:
d5:8b:72:e9:54:ae:fc:52:8c:4e:03:57:f9:6e:49:5b:30:89:
0a:0f:1e:45:b9:fb:b1:e2:45:67:4d:94:fe:59:7a:ef:50:b3:
b2:9c:d3:f4:5c:32:36:57:53:b7:a7:5a:33:03:42:34:26:36:
8d:21:10:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:41:15 2025 by rpki-client