Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
File: WxweBiQDm9HxqUbLUTyTOG-raxk.mft (raw, json)
Hash identifier: cZ+Oa6X4HDz+8zsfSrISfd4pStdxqsL6LivlIY1qIg0=
Subject key identifier: B4:EC:11:DE:60:77:8C:31:D8:EF:BB:53:B5:D5:2E:70:00:50:E0:6B
Authority key identifier: 5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
Certificate issuer: /CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Certificate serial: 018F87B6D03D33B1F32C2C6EADB82E0D980A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
Manifest number: 0777
Signing time: Fri 17 May 2024 18:00:56 +0000
Manifest this update: Fri 17 May 2024 18:00:56 +0000
Manifest next update: Sat 18 May 2024 18:00:56 +0000
Files and hashes: 1: CVECOfMFy9nVNtgGCXPVDJFC9wo.roa (hash: vuSMPSMHKC2WDEuipFzC9nm9WvCfMpD3Ewjmm8VFZUU=)
2: WxweBiQDm9HxqUbLUTyTOG-raxk.crl (hash: 64IiJ/1cghqVOHmVB9Hhi1Tjoul86lb4YcygNf8smJA=)
3: XWEFqzn9Kqqmy6sYA0pFFtPLRiY.roa (hash: 0/aZpRNztct9Dyg0sAK26/RS/in7DnbxuelzwG1Gl+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:b6:d0:3d:33:b1:f3:2c:2c:6e:ad:b8:2e:0d:98:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Validity
Not Before: May 17 18:00:56 2024 GMT
Not After : May 18 18:00:56 2024 GMT
Subject: CN=b4ec11de60778c31d8efbb53b5d52e700050e06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:d3:c6:ab:1f:d8:de:50:19:1f:55:d4:e7:
3e:30:24:2c:ce:9e:f2:5d:20:f2:ed:dc:16:47:2b:
97:14:a2:b6:76:f7:ff:65:cf:31:0b:e8:43:49:0d:
5e:03:4d:40:44:de:96:3a:06:dd:47:4d:ca:22:e9:
76:0f:c4:d6:45:f3:42:95:2a:46:dc:36:40:82:55:
91:6a:25:4c:da:00:87:35:53:64:04:25:0c:25:92:
f8:c8:14:0a:13:1e:81:e4:97:c9:cb:29:b7:d3:49:
f2:a4:0e:f2:fa:c6:dd:15:86:7d:09:7d:63:e1:33:
85:5d:49:cb:33:ad:5c:2f:01:26:9c:50:62:4d:4b:
1c:19:0d:c8:18:09:29:19:16:f9:64:fc:c6:0d:46:
c0:a2:9a:7d:2e:03:bf:e8:a7:9c:13:41:02:1e:46:
52:82:cb:b0:65:c9:09:1d:9d:e9:d9:60:51:8f:a1:
ec:f9:ce:4e:26:f4:db:24:75:20:42:dd:58:e3:fc:
f3:28:9d:fe:64:1c:40:ea:fc:16:f8:05:58:93:09:
a7:06:2e:58:22:ef:d3:2d:1b:c4:cc:6a:b1:54:8d:
3d:f2:c5:e6:2c:9c:75:2f:24:cb:6d:77:67:c2:30:
cf:a2:68:b5:94:08:4f:d3:d9:47:d9:85:80:f6:19:
48:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EC:11:DE:60:77:8C:31:D8:EF:BB:53:B5:D5:2E:70:00:50:E0:6B
X509v3 Authority Key Identifier:
keyid:5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:23:11:24:35:cf:d3:22:8c:50:42:a3:91:74:a4:93:cb:67:
36:5a:c5:59:d4:50:5f:71:03:ab:58:a2:d3:ea:67:fa:19:83:
af:91:30:a2:27:21:e3:3f:ef:91:23:e1:c1:6c:b3:b9:36:92:
db:67:3f:a4:22:be:8b:49:fb:cc:ab:35:34:be:a9:b0:89:7e:
97:7a:f7:1d:66:15:26:69:55:b0:38:d3:82:4e:6b:66:90:60:
00:14:77:ba:5d:af:71:e7:d4:07:c8:96:c6:9b:be:b6:12:8f:
53:5c:c4:35:a2:71:f1:a3:9a:fc:88:38:73:3a:8e:20:44:1f:
44:e4:46:b1:2f:bc:96:81:6c:05:46:fd:9c:2c:fa:1a:28:e4:
a9:01:d6:35:fd:d0:1e:df:38:0e:29:8e:d3:ca:d3:34:b1:0c:
28:7b:82:a3:6a:bc:12:e0:d7:eb:6e:a9:17:9a:52:29:d9:c0:
2a:ec:94:bf:a5:90:c4:4c:43:ac:de:00:e5:ab:8f:09:7e:6f:
92:cd:4a:7d:6e:a5:06:f2:80:94:04:fd:87:8f:34:38:80:d5:
54:86:df:48:3a:31:a4:7e:e9:cb:47:6b:fc:3a:a5:e9:c0:be:
75:a7:94:73:fc:0a:d1:33:5a:da:9b:e4:68:9f:19:71:dd:91:
25:48:1c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:45:13 2024 by rpki-client on console-fra.rpki-client.org