Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft
File: waGQUEttntnBgJaEBCWxHXsi3_Q.mft (raw, json)
Hash identifier: hMUY3r+jXOgKWOjcK936eZcpJxOVIGnKRddngD95sks=
Subject key identifier: BD:25:66:2F:0A:34:38:E2:CE:A6:E4:C1:8B:07:A6:A1:F0:8B:87:67
Authority key identifier: C1:A1:90:50:4B:6D:9E:D9:C1:80:96:84:04:25:B1:1D:7B:22:DF:F4
Certificate issuer: /CN=c1a190504b6d9ed9c18096840425b11d7b22dff4
Certificate serial: 018F8635A24AD7CF120C142AB79FB7249387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waGQUEttntnBgJaEBCWxHXsi3_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft
Manifest number: 117A
Signing time: Fri 17 May 2024 11:00:12 +0000
Manifest this update: Fri 17 May 2024 11:00:12 +0000
Manifest next update: Sat 18 May 2024 11:00:12 +0000
Files and hashes: 1: OR-zFl2ZW9WrwEdypx5VnqmEjqU.roa (hash: eHD9aszImfpFEOong+YF7Sl+sNkhyUDTmdp70f2hXro=)
2: waGQUEttntnBgJaEBCWxHXsi3_Q.crl (hash: letxZJv7QGZqrcLaQqmg+9wVVijUJqF0PXOqwPo0HaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/waGQUEttntnBgJaEBCWxHXsi3_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 11:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:35:a2:4a:d7:cf:12:0c:14:2a:b7:9f:b7:24:93:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a190504b6d9ed9c18096840425b11d7b22dff4
Validity
Not Before: May 17 11:00:12 2024 GMT
Not After : May 18 11:00:12 2024 GMT
Subject: CN=bd25662f0a3438e2cea6e4c18b07a6a1f08b8767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:30:b8:3d:d5:91:a8:3f:6f:90:ba:68:a5:cf:
b6:7c:b9:41:e8:03:61:2a:02:1e:6a:81:c6:bc:bf:
5d:83:15:17:1d:a8:8f:cf:d7:a0:eb:02:22:68:a8:
73:0a:25:3b:87:99:50:74:65:f7:2c:d9:a0:81:7c:
f0:21:98:fa:97:d3:0c:fa:3a:d6:2d:0e:84:c6:bc:
29:94:7e:42:e6:c6:55:1b:65:96:71:64:15:d4:3e:
83:8c:55:8c:ea:46:b3:92:0c:f7:b6:0c:07:8f:65:
4e:f7:6a:d2:51:50:96:4c:df:81:58:26:ee:ba:b5:
f2:98:0c:e8:c5:fe:b7:fa:4a:60:f0:a8:38:ed:6c:
c7:f1:f2:f5:ee:f0:7d:25:9e:1c:f3:33:a7:44:46:
c9:a9:d9:fc:f4:74:82:44:b7:ce:85:24:25:78:84:
55:c5:02:37:f2:c8:c4:a6:0a:99:8f:b8:83:1e:0f:
32:81:bf:f5:a1:c9:03:f5:83:18:d6:dd:3c:60:a6:
0c:53:19:11:70:5b:78:20:cb:2a:fd:97:79:e9:50:
82:ba:2a:c2:2b:3c:d1:36:61:68:6e:fb:db:52:76:
88:c5:e2:8e:52:c2:5f:66:26:ee:d8:f3:62:41:d3:
f0:62:b6:f7:94:58:8a:78:a7:b2:76:e2:2d:d6:b7:
fb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:25:66:2F:0A:34:38:E2:CE:A6:E4:C1:8B:07:A6:A1:F0:8B:87:67
X509v3 Authority Key Identifier:
keyid:C1:A1:90:50:4B:6D:9E:D9:C1:80:96:84:04:25:B1:1D:7B:22:DF:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waGQUEttntnBgJaEBCWxHXsi3_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:19:0e:d9:f6:61:a7:6b:f7:1d:d0:86:3e:9e:4f:e0:a7:34:
ba:4f:9a:9e:4f:47:5d:ad:87:a8:dd:74:b8:de:e1:8a:61:6a:
c6:d4:bf:4c:e3:00:9f:a5:67:68:e1:45:3d:3d:6e:bc:0a:0d:
94:cf:8c:ef:92:f5:3b:21:e6:7f:df:d6:0e:59:f7:e5:b5:24:
be:2d:f7:f0:85:1e:a8:ec:56:ff:d8:0d:17:91:b2:ee:7e:81:
37:d9:e4:76:ad:5b:f9:66:a7:ae:a9:c9:c0:5c:25:f6:8a:29:
64:fe:e5:e5:6f:6f:25:e0:9b:62:fd:e3:30:85:db:a3:18:17:
e7:b5:a3:d4:0f:3e:e6:3f:36:5b:74:c2:52:d3:81:6b:58:1a:
86:b1:ef:0c:26:b6:86:51:a0:12:6a:49:0c:e4:69:2b:3f:4e:
34:77:61:6b:10:54:b0:b5:5c:30:58:9e:66:51:44:39:c9:3e:
b7:c4:32:d2:33:cd:5e:ca:e4:4c:df:d7:b0:75:df:60:ed:0e:
36:cc:fe:17:bf:1c:3d:d1:05:0a:30:5d:7a:65:d6:aa:81:60:
19:95:f2:8d:04:e1:85:9c:6c:c6:3c:3c:bc:95:91:a8:50:c5:
a7:0f:33:1a:a1:a7:d0:fa:42:24:f0:68:a6:25:0f:02:af:c2:
86:99:39:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:52:25 2024 by rpki-client on console-ams.rpki-client.org