Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
File: WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft (raw, json)
Hash identifier: qcHfnSPYGstTJBxrATdhGQPZmzUvkVEdj+p6LuY6qlQ=
Subject key identifier: 7E:A4:75:3C:F9:88:57:88:03:DF:97:4D:92:85:ED:06:46:7F:30:45
Authority key identifier: 58:63:29:F3:07:B9:82:85:B7:1D:22:C7:19:7E:C1:9B:70:1D:ED:67
Certificate issuer: /CN=586329f307b98285b71d22c7197ec19b701ded67
Certificate serial: 0194C3F5AA899E8D45F7822B034BAF0212C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
Manifest number: 1431
Signing time: Sun 02 Feb 2025 00:00:44 +0000
Manifest this update: Sun 02 Feb 2025 00:00:44 +0000
Manifest next update: Mon 03 Feb 2025 00:00:44 +0000
Files and hashes: 1: WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl (hash: m46+wx8WR+3AvQJo2QFhzzXlcj9QP+k33pLvRIyXX4U=)
2: ZCzZ6B2u5Zf0R9Y8Y6T2rnCnCK0.roa (hash: BwRWZGhT6pSvo1byUoJl9cETFO/GPicyDq7ilzu/Egw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:aa:89:9e:8d:45:f7:82:2b:03:4b:af:02:12:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586329f307b98285b71d22c7197ec19b701ded67
Validity
Not Before: Feb 2 00:00:44 2025 GMT
Not After : Feb 3 00:00:44 2025 GMT
Subject: CN=7ea4753cf988578803df974d9285ed06467f3045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d5:e0:fa:a8:6b:c5:7e:2d:be:3f:1b:d5:3d:
ff:9d:03:c4:9d:0b:d1:9e:f5:af:62:53:cd:49:aa:
a8:83:3f:e2:e3:09:74:fd:89:fb:15:b9:df:7b:ed:
2e:fb:6a:53:8d:ab:b8:50:b9:cb:38:16:49:1a:ff:
61:bd:1c:33:64:04:8b:ed:1f:57:71:bd:08:ff:a8:
f6:40:54:17:4d:d2:04:5f:b3:21:7b:6c:dc:68:8d:
b7:79:58:0b:89:06:f2:e5:21:d1:28:59:12:d6:89:
f4:1f:8c:e8:cb:f4:d7:b6:98:ce:41:59:5a:b9:d2:
5e:d6:68:36:bf:95:6e:ba:74:b8:15:3c:0d:f0:c3:
4a:77:b5:96:38:cd:9c:9a:30:03:3f:7c:28:f8:d1:
c1:49:cb:81:35:44:a3:33:5d:95:86:66:9e:2c:dc:
25:75:1a:e7:42:59:3f:21:08:4b:ab:ca:58:64:f9:
b4:e2:18:52:7f:de:c8:bf:ce:1e:2f:a0:ce:e5:cc:
86:42:c8:c6:f7:f0:73:5d:39:8b:92:1b:7b:53:1f:
aa:7c:fa:94:8f:88:6b:1a:d8:d8:c7:a6:e4:e8:62:
a6:f9:f0:b9:3b:97:c0:79:88:a3:c5:16:9e:75:29:
ce:8c:d2:da:45:f7:0c:42:42:42:c3:b8:76:d7:82:
88:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A4:75:3C:F9:88:57:88:03:DF:97:4D:92:85:ED:06:46:7F:30:45
X509v3 Authority Key Identifier:
keyid:58:63:29:F3:07:B9:82:85:B7:1D:22:C7:19:7E:C1:9B:70:1D:ED:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:61:54:55:d3:6a:7f:b1:1a:1f:4b:2f:43:50:aa:1d:df:a9:
4d:85:67:7e:a7:f7:c7:22:b8:79:50:24:e9:26:60:a5:e5:1a:
c8:15:70:f4:34:43:81:55:aa:71:0f:3f:d6:e4:15:98:8f:a5:
75:67:8f:af:8e:99:38:41:12:be:1a:a6:32:1b:08:d9:b1:53:
1f:a0:94:35:b8:60:00:05:17:c7:a1:c7:db:89:f8:18:36:c7:
68:a0:f8:4f:55:a7:27:b9:1c:a6:52:2d:a3:a2:99:59:77:ae:
3c:ee:80:c8:be:24:bf:ae:89:f7:01:28:45:81:a6:ce:e3:e1:
cd:12:d4:f7:31:b3:10:1c:d9:b0:cc:73:1f:0c:76:b5:44:f5:
75:24:9d:bd:47:05:33:10:ae:34:19:0f:81:b0:39:59:64:61:
b7:44:97:29:49:33:df:f6:83:89:b7:20:e5:95:37:41:f3:96:
34:2f:e6:5e:e8:74:9a:fa:56:3f:b2:ce:b0:a4:0f:46:ac:63:
d0:bf:e6:db:06:28:2b:90:6c:12:11:1e:10:ec:a1:8c:45:64:
14:f3:ac:7a:c1:01:47:6c:39:79:e5:a2:19:ce:cc:d1:0d:c9:
af:cf:fc:49:4a:05:70:aa:2a:b4:1b:ac:45:b5:6b:f1:76:10:
c7:04:5a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:54:18 2025 by rpki-client