Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
File: WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft (raw, json)
Hash identifier: cKMuv6dg73I9nlpHcs/FFq6uDbakL1XCOd2xma3yaAo=
Subject key identifier: 12:E8:DA:F5:2C:AB:19:1C:40:70:C1:3C:20:1A:B5:06:54:C3:B5:3D
Authority key identifier: 58:20:43:C0:1D:7A:DE:AD:D9:6F:56:BD:BB:EF:27:48:E0:08:02:34
Certificate issuer: /CN=582043c01d7adeadd96f56bdbbef2748e0080234
Certificate serial: 0194C46365A8C1546B6CF97C1607AD30C6D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
Manifest number: A6
Signing time: Sun 02 Feb 2025 02:00:35 +0000
Manifest this update: Sun 02 Feb 2025 02:00:35 +0000
Manifest next update: Mon 03 Feb 2025 02:00:35 +0000
Files and hashes: 1: WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl (hash: OjUyIDQxY3bcNhDfUCzEIS1mAV4KWk+RWrMAgxxnCE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:65:a8:c1:54:6b:6c:f9:7c:16:07:ad:30:c6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582043c01d7adeadd96f56bdbbef2748e0080234
Validity
Not Before: Feb 2 02:00:35 2025 GMT
Not After : Feb 3 02:00:35 2025 GMT
Subject: CN=12e8daf52cab191c4070c13c201ab50654c3b53d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0f:81:12:cd:36:0e:5f:7e:4e:d2:94:30:b8:
f9:29:44:c1:0b:fe:e0:09:52:45:3d:5b:af:62:11:
4b:57:a8:5c:05:e9:a1:31:be:fc:16:82:47:04:55:
30:13:1a:2c:d7:fc:57:31:b9:26:3c:81:51:e9:d4:
43:76:3c:84:fb:35:95:e6:12:d9:e7:78:5c:b0:f5:
b1:ae:45:24:22:73:b9:56:ee:0d:9e:63:38:11:8d:
80:4a:01:d3:87:52:8f:10:90:f0:aa:db:e7:c1:71:
f8:ec:6f:1d:7b:9f:af:b3:b4:63:10:5f:7a:ec:2b:
7c:ab:df:a2:72:c9:8a:4d:48:4c:80:c4:74:c6:82:
30:bb:b3:11:9c:de:03:54:b6:32:05:7d:50:86:73:
73:62:ac:0b:5f:82:b9:1a:e6:67:bd:cf:28:2a:7a:
f3:21:bf:e3:64:de:11:a3:91:9d:4e:3b:f5:d7:a6:
d6:4d:47:6b:e8:f5:66:48:3a:40:53:95:39:15:7c:
90:cf:f1:f7:a3:96:fa:a3:71:c6:df:f7:75:99:c7:
16:ab:8b:03:50:86:35:ad:10:74:c9:16:e3:81:67:
6a:e4:7e:16:72:9f:a3:b4:90:eb:d1:36:b6:04:ba:
1b:c8:0a:f3:e7:db:eb:93:d2:12:f3:8a:e8:c1:5b:
d8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E8:DA:F5:2C:AB:19:1C:40:70:C1:3C:20:1A:B5:06:54:C3:B5:3D
X509v3 Authority Key Identifier:
keyid:58:20:43:C0:1D:7A:DE:AD:D9:6F:56:BD:BB:EF:27:48:E0:08:02:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:37:01:f2:93:0c:77:28:7f:68:ea:5d:79:66:55:3e:d3:1a:
ca:3e:79:33:ce:e3:05:4f:c2:88:6f:ae:dc:89:4f:66:6a:f5:
26:bd:d4:28:34:45:f8:7b:f9:89:84:94:17:31:70:c3:08:2a:
01:da:d3:e3:f5:ed:62:96:a6:3d:3f:e7:d4:b4:76:5f:01:ee:
5f:d1:e9:85:25:60:e9:d5:bb:c5:e6:08:26:96:12:ba:75:28:
11:c1:5b:71:a5:85:9a:45:16:bb:f6:62:24:53:10:92:df:ce:
49:63:b6:0c:90:32:59:75:93:a0:3a:76:ad:af:76:ac:64:07:
cb:4d:ed:05:8d:75:de:11:69:7d:d6:8b:20:ff:ab:8c:dd:a6:
e2:7c:ee:e7:f7:cf:81:f3:75:94:73:e6:5d:51:0b:e3:27:c1:
b0:ed:7e:f6:bd:a8:b8:e3:22:5f:87:e7:23:1a:f2:8f:51:ff:
8a:09:c5:4e:0b:a1:e3:e3:56:cb:35:77:ed:ac:f7:8f:64:46:
83:d8:de:ec:4c:e8:e7:66:c3:86:23:9e:55:e9:a6:de:34:43:
0d:06:85:f3:0f:b8:d9:77:4c:ea:36:4c:68:6b:e2:32:a8:c0:
b2:9d:48:98:b3:b4:63:ee:9b:18:3d:bc:ac:7b:37:19:3b:f6:
e7:3d:45:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTEY2WowVRrbPl8FgetMMbUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MjA0M2MwMWQ3YWRlYWRkOTZmNTZiZGJiZWYyNzQ4ZTAw
ODAyMzQwHhcNMjUwMjAyMDIwMDM1WhcNMjUwMjAzMDIwMDM1WjAzMTEwLwYDVQQD
EygxMmU4ZGFmNTJjYWIxOTFjNDA3MGMxM2MyMDFhYjUwNjU0YzNiNTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg+BEs02Dl9+TtKUMLj5KUTBC/7g
CVJFPVuvYhFLV6hcBemhMb78FoJHBFUwExos1/xXMbkmPIFR6dRDdjyE+zWV5hLZ
53hcsPWxrkUkInO5Vu4NnmM4EY2ASgHTh1KPEJDwqtvnwXH47G8de5+vs7RjEF96
7Ct8q9+icsmKTUhMgMR0xoIwu7MRnN4DVLYyBX1QhnNzYqwLX4K5GuZnvc8oKnrz
Ib/jZN4Ro5GdTjv116bWTUdr6PVmSDpAU5U5FXyQz/H3o5b6o3HG3/d1mccWq4sD
UIY1rRB0yRbjgWdq5H4Wcp+jtJDr0Ta2BLobyArz59vrk9IS84rowVvYJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLo2vUsqxkcQHDBPCAatQZUw7U9MB8GA1UdIwQY
MBaAFFggQ8Adet6t2W9WvbvvJ0jgCAI0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0NCRHdCMTYzcTNaYjFhOXUtOG5TT0FJQWpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hNzQ0YzQtNWMyNC00OGMyLWFiMDYt
NjA3MzY4NTljMGM0LzEvV0NCRHdCMTYzcTNaYjFhOXUtOG5TT0FJQWpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9hNzQ0YzQtNWMyNC00OGMyLWFiMDYtNjA3MzY4NTljMGM0
LzEvV0NCRHdCMTYzcTNaYjFhOXUtOG5TT0FJQWpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPzcB8pMM
dyh/aOpdeWZVPtMayj55M87jBU/CiG+u3IlPZmr1Jr3UKDRF+Hv5iYSUFzFwwwgq
AdrT4/XtYpamPT/n1LR2XwHuX9HphSVg6dW7xeYIJpYSunUoEcFbcaWFmkUWu/Zi
JFMQkt/OSWO2DJAyWXWToDp2ra92rGQHy03tBY113hFpfdaLIP+rjN2m4nzu5/fP
gfN1lHPmXVEL4yfBsO1+9r2ouOMiX4fnIxryj1H/ignFTguh4+NWyzV37az3j2RG
g9je7Ezo52bDhiOeVemm3jRDDQaF8w+42XdM6jZMaGviMqjAsp1ImLO0Y+6bGD28
rHs3GTv25z1FNQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:44:49 2025 by rpki-client