Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
File: WHO1mFUN9b_byZp6HjlsNJW9qDs.mft (raw, json)
Hash identifier: nLeQxcuc5EGp5Hs6LHwn1GUKxjWZCZ3Djjb/8OD5W3o=
Subject key identifier: 5A:AD:22:00:86:5B:42:A7:B8:52:03:29:E7:0A:DB:4A:73:48:0C:CD
Authority key identifier: 58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
Certificate issuer: /CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
Certificate serial: 01935351349EF9CB2CF21136CE08C6B25897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
Manifest number: 1371
Signing time: Fri 22 Nov 2024 10:00:50 +0000
Manifest this update: Fri 22 Nov 2024 10:00:50 +0000
Manifest next update: Sat 23 Nov 2024 10:00:50 +0000
Files and hashes: 1: WHO1mFUN9b_byZp6HjlsNJW9qDs.crl (hash: rHXpbi3H0dCqesk45R4lb7OxbixLNTXklPUmN3I1qcU=)
2: Y3rckJedRxRAxrzRgK4vVltglwg.roa (hash: eHtnNlleecqHwkbqKfVnrPIAjwsccqzScEtWboWU/1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:51:34:9e:f9:cb:2c:f2:11:36:ce:08:c6:b2:58:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
Validity
Not Before: Nov 22 10:00:50 2024 GMT
Not After : Nov 23 10:00:50 2024 GMT
Subject: CN=5aad2200865b42a7b8520329e70adb4a73480ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d8:ef:4b:08:ca:6f:4e:56:e0:49:89:99:81:
8c:d4:2c:df:fb:03:ed:1c:70:ee:69:e8:62:ca:df:
28:a0:ad:50:67:91:12:0b:9b:09:49:52:5b:c9:94:
0a:70:0a:a1:12:cc:4e:bb:6a:69:aa:a3:e9:8e:ce:
70:1f:63:67:10:6a:69:d0:30:5c:9d:c9:02:ce:27:
1b:44:b3:a3:f1:17:06:06:2c:46:e5:db:9a:19:c0:
1a:7e:a3:63:ec:77:af:76:c2:7e:4c:0f:75:af:61:
49:74:2e:97:c2:db:3d:3a:ce:cf:eb:bc:5c:01:3c:
3f:4e:d8:22:99:d5:c5:5b:4f:b9:1d:9e:e5:5f:cb:
b1:97:fd:ed:3d:4d:ad:28:df:64:e5:dd:4e:38:5d:
ea:f1:2e:87:ea:ff:6b:80:53:c3:8b:74:09:e7:18:
b8:a0:35:65:80:99:7e:cb:a4:82:e6:b7:f4:51:d3:
0e:c1:35:da:03:e0:c2:0e:2e:cc:fc:24:4f:8b:14:
ad:86:19:4a:ef:56:d5:ab:15:82:74:1b:e7:fd:ac:
6e:98:fd:26:13:f1:94:59:33:1c:1e:e1:30:bc:e3:
9d:62:62:af:93:1d:37:f6:e6:10:6a:1d:3c:36:2b:
86:ee:e6:f6:ed:42:53:df:f2:b8:c1:c9:ce:50:6c:
b6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AD:22:00:86:5B:42:A7:B8:52:03:29:E7:0A:DB:4A:73:48:0C:CD
X509v3 Authority Key Identifier:
keyid:58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:2f:77:8e:a6:3f:f0:34:57:a0:00:04:a5:ec:70:ea:db:56:
ee:9d:af:12:67:48:d3:db:36:35:e6:e9:30:b8:61:9e:9e:94:
9d:7b:ba:32:21:2e:7b:bb:fa:52:af:2d:8f:4a:ad:03:19:39:
e5:5d:ae:0d:3f:dd:cc:68:7c:65:1f:7a:04:df:c9:07:98:92:
e2:b4:cd:4c:ae:ba:f1:06:ee:66:eb:c1:46:03:d0:d9:fc:f7:
ac:4a:97:b8:aa:65:91:49:1b:41:30:ec:fd:4c:3d:d5:62:2e:
7d:c5:09:e4:3f:e6:da:33:e1:4b:b8:91:70:58:3e:13:97:d3:
17:91:7a:b4:11:f9:f0:97:93:5f:6b:51:81:fb:98:c8:ea:0f:
24:d7:34:51:6b:aa:8a:59:9d:67:d4:8b:31:03:80:10:56:ec:
73:bb:b1:2e:89:e7:9c:f2:5a:b2:e0:9a:08:f2:38:6a:25:37:
e5:7a:d4:41:9f:53:ad:97:4e:26:cf:da:cd:3f:5e:05:f8:8a:
14:0c:c9:e0:ee:c9:ab:b8:e2:10:82:55:79:5d:af:4e:7d:1e:
ff:a6:f9:2a:26:52:25:ee:fc:ee:8f:a2:36:45:d1:f2:4f:10:
95:d9:5c:40:f8:58:10:87:99:4d:fe:34:82:ef:df:88:92:5c:
38:2c:98:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:27:03 2024 by rpki-client on console-fra.rpki-client.org