Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
File: W-oEa0mXgK7H1hgtLVanXrCJaM0.mft (raw, json)
Hash identifier: tITH92QnCc3noephNiiRiWVOup/+/Gj76TX0hPdRk38=
Subject key identifier: 4B:27:EC:DF:82:9C:F3:1E:6D:3D:13:0B:3D:0C:5D:9D:7B:B4:6D:15
Authority key identifier: 5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD
Certificate issuer: /CN=5bea046b499780aec7d6182d2d56a75eb08968cd
Certificate serial: 019352ADFA3BBCA42238A272E9063C651BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
Manifest number: 1258
Signing time: Fri 22 Nov 2024 07:02:33 +0000
Manifest this update: Fri 22 Nov 2024 07:02:33 +0000
Manifest next update: Sat 23 Nov 2024 07:02:33 +0000
Files and hashes: 1: W-oEa0mXgK7H1hgtLVanXrCJaM0.crl (hash: JNuiE2d7AGEV6R1urFuuuCus+HBw56hAAb9LR+YNw5k=)
2: YZKZ7FHtffo5kIwr1tffUqIGBLY.roa (hash: MFrLfE+u+GGhgxO/3E7KkR66PsOR5/EbAl0gdkjKww0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ad:fa:3b:bc:a4:22:38:a2:72:e9:06:3c:65:1b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bea046b499780aec7d6182d2d56a75eb08968cd
Validity
Not Before: Nov 22 07:02:33 2024 GMT
Not After : Nov 23 07:02:33 2024 GMT
Subject: CN=4b27ecdf829cf31e6d3d130b3d0c5d9d7bb46d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:39:db:1a:f2:86:fe:29:01:ac:ab:67:4f:89:
fb:75:be:39:7e:e2:ea:26:a5:b6:5f:7c:3c:55:6d:
ec:59:36:7f:92:36:be:4e:ba:f3:81:b9:45:9f:6a:
03:36:37:a5:08:a7:e7:34:27:82:18:19:6e:14:3e:
71:b2:28:91:60:11:dd:c3:76:23:fe:f6:b7:0c:a9:
57:30:29:76:b0:35:02:c9:d2:b8:51:ee:75:2e:da:
84:f1:a3:2b:34:24:de:c6:23:24:5f:83:bb:cf:d9:
e1:72:e9:2b:c3:2b:68:4b:7a:84:89:1e:2d:f9:37:
f4:af:cc:34:6d:33:09:89:5e:cf:4c:68:93:76:0d:
e7:35:86:b3:40:6a:76:19:8e:f9:91:7a:7f:b6:93:
f4:3d:75:fa:e4:ba:c4:cc:88:95:e8:b2:9c:fc:3b:
47:74:f3:5b:4d:76:76:bf:7a:43:eb:c5:84:ac:a9:
c7:1e:e6:aa:06:c9:a3:4b:9e:35:62:47:2e:10:da:
6d:35:23:0b:0d:96:75:95:43:f5:5a:81:18:a9:4b:
b5:bd:37:05:0c:ac:25:e6:88:5c:4b:1c:62:4d:57:
fd:cb:16:41:1c:07:00:f3:f6:45:db:5c:20:28:4c:
6e:6f:b0:40:e0:d3:4b:24:cb:ab:09:65:63:85:ae:
6d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:27:EC:DF:82:9C:F3:1E:6D:3D:13:0B:3D:0C:5D:9D:7B:B4:6D:15
X509v3 Authority Key Identifier:
keyid:5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:7a:e5:ad:86:9f:fb:36:92:78:1a:5f:b8:b0:35:94:b9:db:
30:9d:e4:77:22:ad:8a:1a:1a:87:0a:c6:84:f6:b6:d3:ec:8d:
b2:fb:44:3a:92:1f:ab:ba:ae:12:45:40:42:c6:d2:fe:d9:0f:
ea:56:72:91:ef:fb:d7:90:5c:6a:95:dc:4f:b1:cd:0a:c2:1c:
ce:d2:e7:17:d0:71:60:72:bf:54:3e:c7:2a:f7:be:88:29:c9:
dd:d1:95:f4:84:a7:ce:a7:11:7c:b3:24:af:0c:79:b1:03:3c:
b6:e0:eb:03:8a:5d:54:59:7f:aa:d3:6d:cb:64:eb:0a:bb:37:
e4:4a:b8:75:cc:1b:0f:a1:f0:08:4f:4f:4f:15:1d:53:5d:e7:
85:11:6e:44:af:9f:47:9d:e4:d8:44:da:a8:d1:cc:c6:bc:45:
23:01:79:44:99:90:64:3f:be:4f:4e:1c:6b:b3:42:9d:c3:54:
94:e6:fc:f7:e2:fb:5f:85:d3:26:0d:95:30:b6:4e:95:ed:3d:
06:f8:46:da:75:15:4f:13:d5:33:7e:39:d2:c9:49:2d:0c:e5:
70:b1:9d:cb:5c:3b:87:c8:b7:d3:e8:3c:07:67:f4:4b:9e:7e:
08:fb:ec:5e:14:9c:5e:e2:1e:59:c6:74:24:f2:3e:a5:2b:7f:
7c:9f:7d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:00:25 2024 by rpki-client on console-fra.rpki-client.org