Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
File: wYXXJDrphs3khBTmrYHyIpwKV9g.mft (raw, json)
Hash identifier: GPcOD+gGuGMPWNJuojvTd05MAKidiJiN6srDz4TfsEE=
Subject key identifier: 39:D3:D2:DB:4F:CE:0F:7E:06:22:18:AD:6C:34:62:14:BF:31:06:0A
Authority key identifier: C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8
Certificate issuer: /CN=c185d7243ae986cde48414e6ad81f2229c0a57d8
Certificate serial: 019510C738F402404499F07841E628933302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
Manifest number: 13AC
Signing time: Sun 16 Feb 2025 22:00:46 +0000
Manifest this update: Sun 16 Feb 2025 22:00:46 +0000
Manifest next update: Mon 17 Feb 2025 22:00:46 +0000
Files and hashes: 1: W8cSUwyXIXnz6M1NsyKlwsJXzJ4.roa (hash: rZPkwf4eFRkmaVkGU+tJg15LkBGz0xTeLhl3l0qmLag=)
2: wYXXJDrphs3khBTmrYHyIpwKV9g.crl (hash: L2ehgOWyh2jrTGZhH6mIraZoUMmvf4VpUlNfPUbaCX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:38:f4:02:40:44:99:f0:78:41:e6:28:93:33:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c185d7243ae986cde48414e6ad81f2229c0a57d8
Validity
Not Before: Feb 16 22:00:46 2025 GMT
Not After : Feb 17 22:00:46 2025 GMT
Subject: CN=39d3d2db4fce0f7e062218ad6c346214bf31060a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:22:f6:8f:ee:4b:6f:ed:69:c9:98:4a:03:32:
da:15:bd:fa:07:f7:01:2c:44:eb:e1:93:d6:66:90:
ae:d6:16:89:f9:12:b8:da:1e:79:8f:0d:09:61:4e:
74:41:15:71:70:b4:1a:23:23:0a:0b:05:15:38:7d:
85:58:bc:d7:10:39:ac:92:a3:25:1f:da:8e:67:33:
a1:77:eb:42:34:eb:b8:01:6d:50:8e:57:c4:0d:22:
de:08:d3:80:5b:40:91:ab:c8:03:7b:de:d2:79:ea:
c0:43:b6:d7:07:c7:dd:61:cf:c0:65:dd:f1:ba:6f:
d8:49:d5:3f:0f:5b:87:5a:ee:e8:d7:18:3c:66:05:
80:31:3f:7e:71:f7:e8:c8:99:60:dd:7a:92:cd:85:
b2:4f:21:f0:b4:09:02:d8:cf:85:47:8d:a3:ab:ae:
37:28:da:66:e9:69:f9:fd:ef:ce:b6:9f:12:76:8c:
49:b1:48:4a:55:e5:fb:85:6a:4a:b0:bd:c3:b3:73:
6b:4b:0f:72:c5:2e:bd:50:88:8b:b2:c9:8f:65:08:
f2:af:1a:1f:64:e2:1d:57:37:07:21:c2:89:14:01:
96:28:77:6a:4e:89:c3:ff:6b:81:4a:5a:b9:b3:95:
3b:5a:94:0a:a1:b8:75:6e:c7:57:91:03:63:5c:dc:
ec:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D3:D2:DB:4F:CE:0F:7E:06:22:18:AD:6C:34:62:14:BF:31:06:0A
X509v3 Authority Key Identifier:
keyid:C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:aa:c9:2f:fd:54:66:87:d9:38:15:5d:56:d9:c3:72:ca:96:
8a:0e:0e:a6:b5:eb:ca:9c:a1:f3:94:f9:6e:4f:8b:c9:e3:0e:
38:67:b1:63:7d:b7:9a:b4:8f:ac:27:18:74:df:f2:71:04:0f:
17:f0:ed:53:ae:11:74:98:e8:b8:98:1d:70:fc:0a:34:7f:ff:
a2:51:cf:16:43:6d:ef:d3:b8:3d:c1:9f:c9:ea:97:f3:41:8b:
de:44:cb:7e:d3:40:a7:27:c3:54:b3:07:c5:4b:53:c4:e8:b1:
5e:19:6e:2f:d4:88:96:1a:cb:30:65:0c:a8:35:4f:e1:7a:95:
d7:42:90:7e:a7:11:fe:38:1f:84:a1:ae:c7:8a:2e:f9:92:86:
ed:39:41:01:f2:18:95:7e:2c:ae:d3:8e:16:bd:01:76:65:df:
a3:c6:f0:8d:d2:9a:58:10:60:ee:85:dc:8d:d5:09:7e:a0:dc:
b9:a2:af:a4:7f:e6:c5:a3:eb:af:06:a7:26:51:2b:d9:5e:25:
d2:ca:a5:da:e3:ba:75:78:a5:9f:ca:70:00:13:c4:9a:66:32:
a4:b8:ae:5d:f3:93:fe:82:1b:99:45:25:6c:26:4d:8a:e5:b0:
5d:4b:f7:eb:89:69:20:77:8e:eb:8a:d4:0d:86:d6:2b:56:8b:
29:2a:05:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:12 2025 by rpki-client