Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
File: wrQuSlwckevE7__xSLMS_nt-iXA.mft (raw, json)
Hash identifier: xDlwgGBb2KsfOmALLMbK7UX7zP+kHXCy3B6ghL9K4uQ=
Subject key identifier: 18:59:46:2D:EA:90:9D:FE:D2:43:32:00:E2:2D:08:2A:96:7F:29:71
Authority key identifier: C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
Certificate issuer: /CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Certificate serial: 0194C350D7FF6555559AFB754CDC67C7E073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
Manifest number: 7F
Signing time: Sat 01 Feb 2025 21:00:42 +0000
Manifest this update: Sat 01 Feb 2025 21:00:42 +0000
Manifest next update: Sun 02 Feb 2025 21:00:42 +0000
Files and hashes: 1: wrQuSlwckevE7__xSLMS_nt-iXA.crl (hash: c95yK0ly5YSJpK7coTQos+om6Z3mjr453hk5fEOIZ5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:d7:ff:65:55:55:9a:fb:75:4c:dc:67:c7:e0:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Validity
Not Before: Feb 1 21:00:42 2025 GMT
Not After : Feb 2 21:00:42 2025 GMT
Subject: CN=1859462dea909dfed2433200e22d082a967f2971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:15:ea:6e:98:4c:6e:cf:43:30:4c:f0:64:c5:
fc:18:10:3e:d3:e3:99:79:33:36:a6:05:e1:06:aa:
5b:b8:1f:a3:48:47:03:e2:0b:d8:31:fd:7d:3d:62:
94:7b:21:7b:d4:ec:8c:0e:24:fd:b8:20:c2:8b:d8:
a4:94:3d:d0:02:56:57:71:ed:01:b2:04:95:ee:dc:
5d:d0:55:85:00:16:69:19:e3:9a:24:8c:c5:e2:80:
51:0c:58:c5:48:31:ae:48:c6:58:57:6e:a3:74:db:
1f:3a:76:d8:3a:04:8c:5b:76:41:45:91:70:f3:56:
1d:2c:08:75:4b:e5:5f:3b:06:c1:3c:ff:ef:db:32:
42:68:82:24:dd:ae:73:fd:24:bd:b4:23:06:38:a1:
ca:bf:0c:11:6b:da:ec:2d:cb:79:4d:04:5a:f1:52:
e3:03:4e:3c:82:74:46:39:15:35:f1:81:38:98:27:
38:4d:cb:34:d3:8f:f9:cf:c8:e6:c3:21:c2:3d:17:
8a:0c:f7:4a:f1:b0:a0:d4:5f:cf:48:49:ce:17:57:
67:74:b8:4f:8d:50:8e:65:55:72:fd:58:57:1c:00:
16:81:36:e5:2f:b7:64:44:2f:7a:06:23:38:fe:cf:
e5:2c:a5:46:c8:ac:2b:1b:93:41:64:fa:2b:a2:df:
9c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:59:46:2D:EA:90:9D:FE:D2:43:32:00:E2:2D:08:2A:96:7F:29:71
X509v3 Authority Key Identifier:
keyid:C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:c5:33:c0:b5:9b:ae:a2:cb:99:13:e8:d4:42:f2:ef:68:4b:
5d:8d:53:37:53:99:ec:f3:d1:76:4d:4d:05:a7:99:b8:18:dc:
5d:8e:75:1a:4c:c7:b5:e7:be:ca:84:19:de:f6:df:b4:09:6e:
9d:e4:6d:5b:2d:00:d3:4f:73:55:e1:02:9e:2d:ae:15:9a:ef:
87:86:46:7f:c3:9f:d7:65:8a:3b:23:a4:1e:d2:f0:27:47:6b:
f2:18:76:db:b2:e5:da:25:75:6e:0e:f9:80:2f:80:79:93:63:
d5:c6:39:72:85:67:25:59:1c:7f:53:a7:d8:87:5d:d1:b5:c4:
06:f3:bb:03:0d:a7:22:b0:2b:03:18:db:a3:f9:93:11:96:f8:
7b:d0:28:6b:f0:f8:d3:62:5e:4c:d1:c4:87:4b:3d:4d:7b:9b:
ec:85:f0:ba:96:16:5c:2b:18:96:83:ca:d8:a3:3e:04:a2:c4:
16:8e:98:7d:6f:88:0f:be:6f:29:d2:66:84:94:61:fd:00:6b:
8b:4e:60:6d:a9:be:6e:60:25:fb:a0:43:8b:f8:c7:12:9e:28:
90:02:0d:0e:bf:04:9e:4f:1a:e8:c7:ad:b4:a1:43:b6:56:20:
64:63:d5:3a:12:21:14:6a:b1:de:77:9b:ea:4f:da:c7:7e:65:
2a:23:56:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:46:07 2025 by rpki-client