Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
File: wrXTr9C3Lrc0wh7XgjKetufBzkE.mft (raw, json)
Hash identifier: AiFT1K2OHyg+jyaEMgi68obWN9TE/Y36wIDJ+mn+o2Q=
Subject key identifier: 88:5A:64:D5:2B:11:3A:69:96:6B:46:15:38:FD:11:9C:8D:BC:F6:21
Authority key identifier: C2:B5:D3:AF:D0:B7:2E:B7:34:C2:1E:D7:82:32:9E:B6:E7:C1:CE:41
Certificate issuer: /CN=c2b5d3afd0b72eb734c21ed782329eb6e7c1ce41
Certificate serial: 0194C4636F44D221339230914190114EB7FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
Manifest number: 06FA
Signing time: Sun 02 Feb 2025 02:00:38 +0000
Manifest this update: Sun 02 Feb 2025 02:00:38 +0000
Manifest next update: Mon 03 Feb 2025 02:00:38 +0000
Files and hashes: 1: 24ln-8DkQtv-Hk-B6dzvfSqyjQY.roa (hash: SeW6VNZ/+9bUzjzq/OzL5WVkY+lRaswkW52Mz3zEsYI=)
2: wrXTr9C3Lrc0wh7XgjKetufBzkE.crl (hash: LUGar3/8p5aRuw0OUQ6yZJ9vfKVe1tZBRmInnRJE/Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:6f:44:d2:21:33:92:30:91:41:90:11:4e:b7:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b5d3afd0b72eb734c21ed782329eb6e7c1ce41
Validity
Not Before: Feb 2 02:00:38 2025 GMT
Not After : Feb 3 02:00:38 2025 GMT
Subject: CN=885a64d52b113a69966b461538fd119c8dbcf621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:80:59:bf:1b:63:28:3a:ae:8a:9a:c0:fd:c8:
e8:7e:2b:06:df:f8:a7:5c:4f:1c:22:42:d0:a4:75:
be:a0:f9:9f:e0:0d:75:a9:f6:60:7a:b7:e3:47:60:
44:23:5b:d6:54:8e:81:e0:41:63:78:e1:79:29:a8:
d0:a1:48:71:ad:21:a6:67:c3:04:11:15:d0:b0:ac:
b3:80:aa:ab:fd:09:0d:28:a4:b2:40:2b:7d:b7:e7:
dc:6c:d3:a3:2c:c9:d0:42:7e:2a:ee:11:63:fc:30:
11:66:63:88:79:07:f9:8e:35:36:85:07:ce:49:c2:
c7:cb:7b:93:d0:74:8b:ce:0a:af:90:2e:40:0d:9e:
4e:73:2a:e3:30:f8:83:df:e5:ec:85:79:93:38:03:
1c:50:4b:36:22:c0:8e:35:68:49:cf:52:ed:0c:25:
fa:bb:ca:4d:98:04:d2:c8:6e:27:fe:6d:2c:6c:6e:
a0:60:da:be:4e:8c:c2:13:31:9c:eb:d4:e8:d2:f8:
83:03:87:a1:d3:eb:c3:69:92:e3:6c:f9:3c:37:ee:
e0:a3:3d:b1:d6:ea:39:20:15:1f:51:ac:9a:fb:11:
04:10:d7:d9:fd:f8:35:e3:26:58:21:f6:e7:01:d0:
f4:0a:e0:e9:9e:5d:82:b2:c7:e0:ea:b3:78:60:96:
44:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5A:64:D5:2B:11:3A:69:96:6B:46:15:38:FD:11:9C:8D:BC:F6:21
X509v3 Authority Key Identifier:
keyid:C2:B5:D3:AF:D0:B7:2E:B7:34:C2:1E:D7:82:32:9E:B6:E7:C1:CE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c3:22:67:e8:24:a1:d1:65:13:08:18:cb:95:2b:06:4b:cf:
5e:ef:70:54:dd:48:79:0e:b3:2c:4b:07:e7:f6:00:9f:d5:3f:
1e:19:cc:ca:5e:11:70:76:59:4f:80:48:83:c7:e7:cf:1f:00:
89:8b:ba:2d:3f:8a:a9:3e:01:63:81:53:88:c1:90:2f:15:a1:
8f:5a:1e:28:85:6d:0f:e9:0e:4a:87:cd:4c:ec:c2:b7:7b:5a:
1a:ab:81:3b:8a:01:20:87:99:21:81:6b:f4:34:9e:00:f1:4b:
5b:0e:34:23:63:be:1d:f5:47:a0:48:8b:68:9e:ad:2d:77:96:
0a:f5:46:64:40:48:59:f7:fd:47:c2:7f:5d:67:37:5b:4a:85:
6f:db:f6:56:13:19:28:67:ad:fa:0f:28:22:ff:02:ff:06:df:
99:e9:4a:e0:08:79:70:a3:90:c0:52:84:52:38:9c:77:f2:a5:
75:0f:b6:73:b5:2f:18:60:a6:39:84:39:ce:71:33:3d:45:25:
58:e4:db:69:fe:2c:ee:91:a7:e3:10:15:1e:03:ee:ad:98:75:
bd:ed:df:9b:22:9a:92:53:d9:7d:66:b9:80:7b:71:4a:70:3a:
57:2f:aa:e7:c3:85:59:0b:1d:c6:40:3d:f7:33:b3:98:fa:ed:
8d:80:6f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:59:53 2025 by rpki-client