Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
File: wcIPvEj6WafY3qV5CPNQobl0Wd8.mft (raw, json)
Hash identifier: U0V3kyxtnKHkFOrc6V31PamTYwt4qmRkP7R6W4mfmbE=
Subject key identifier: F0:36:5D:8D:35:EB:F6:50:07:03:46:58:93:E6:82:EE:AE:2A:B8:17
Authority key identifier: C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
Certificate issuer: /CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Certificate serial: 0195116BF89750F3B554EEE2A838B72F2039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
Manifest number: 126E
Signing time: Mon 17 Feb 2025 01:00:43 +0000
Manifest this update: Mon 17 Feb 2025 01:00:43 +0000
Manifest next update: Tue 18 Feb 2025 01:00:43 +0000
Files and hashes: 1: gZ9Ojc4UNWeqqwMBpp7FrP10wiI.roa (hash: LB2ZQVKXYnVtOl1GjrynJ1NY20hqhQVioGRUarT0MgI=)
2: wcIPvEj6WafY3qV5CPNQobl0Wd8.crl (hash: nij02Rr8rt7PLIlvAvjN1hhOu3z4MLMyOU3CBEGE2zE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:f8:97:50:f3:b5:54:ee:e2:a8:38:b7:2f:20:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Validity
Not Before: Feb 17 01:00:43 2025 GMT
Not After : Feb 18 01:00:43 2025 GMT
Subject: CN=f0365d8d35ebf6500703465893e682eeae2ab817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3d:09:80:b8:73:88:e2:2a:ca:bc:d3:b5:a6:
05:86:5a:17:77:4f:f5:67:80:00:a9:9c:02:d4:67:
ad:d3:6f:f6:06:44:1d:54:0a:68:44:41:1b:27:50:
1c:24:eb:58:f7:92:7d:2e:b3:fe:82:5c:b9:18:26:
45:e8:e8:ec:95:6f:9d:e1:00:1e:79:15:52:ee:80:
7f:1d:15:a3:57:04:7e:e3:33:e8:fb:58:bd:38:fe:
16:89:38:f0:68:e0:59:d0:f4:1a:31:a6:1e:19:82:
9d:9d:50:f6:60:1c:ca:55:c0:a1:70:e0:f7:38:bf:
c0:b5:82:b1:33:c6:18:0b:f0:53:e4:d9:3d:88:c4:
0c:22:db:e6:79:00:0a:9f:b3:06:6a:20:30:5a:1e:
92:0c:9b:67:a6:b9:58:7b:84:d8:fb:d6:6f:87:1b:
be:43:dd:cf:cf:e2:35:9d:44:64:59:19:88:db:7b:
bc:da:26:12:e9:51:86:59:62:f8:26:d9:c1:c8:ae:
67:ef:c3:ed:26:52:b4:17:87:6a:87:c8:25:d9:82:
a9:1b:4b:3b:90:66:d2:61:c0:b8:a0:55:00:e3:f6:
dd:bc:69:ec:43:c6:27:9b:2e:28:9d:80:3b:c4:59:
51:fd:08:40:c1:11:c5:8d:00:62:27:d1:31:33:11:
8f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:36:5D:8D:35:EB:F6:50:07:03:46:58:93:E6:82:EE:AE:2A:B8:17
X509v3 Authority Key Identifier:
keyid:C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:36:1b:60:3d:a4:30:ca:73:62:1f:7f:55:98:48:1c:12:ef:
b4:9b:08:9e:ad:18:91:7e:4b:95:96:ba:b9:1b:f7:9a:40:ba:
dd:9d:6f:b0:30:46:11:42:f9:4d:21:f7:a4:ca:d5:60:3b:da:
d8:0c:a3:e5:19:41:0f:37:85:d4:aa:93:85:de:7e:76:39:90:
c9:39:71:c7:69:31:8b:50:bc:e3:40:b4:c4:88:83:45:55:21:
18:29:db:bd:47:6a:b2:29:7f:b2:c7:53:81:61:34:f8:6e:2a:
87:9b:1e:05:f6:c1:9a:c0:41:62:87:bd:52:73:ed:5a:17:32:
94:44:43:67:50:cd:a4:6b:a6:72:a8:1a:a3:34:21:83:fe:5f:
f7:ed:47:bb:a7:3b:b8:56:ed:1c:ae:ee:d1:be:bf:13:30:f5:
53:1e:1c:0a:be:6f:5d:24:f9:02:80:2a:fe:44:b6:51:9b:bd:
49:5e:b3:df:8e:9a:04:1b:dc:8c:d0:d2:00:58:32:18:e2:fc:
62:f0:7f:fb:a5:14:96:ec:96:b3:1c:19:7f:a3:f3:76:04:ce:
24:26:bf:1f:0f:60:b2:7c:37:c3:a6:c0:c9:5d:3b:1f:90:56:
33:9b:17:51:b6:e2:11:6d:78:df:c6:1e:8c:ef:cb:3b:49:b1:
04:79:9c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:40 2025 by rpki-client