Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
File: WtlDpBzifnt7z9_2monD4zfqY7U.mft (raw, json)
Hash identifier: WTC2EPvAoD8GU2TIu4Lr/56JfZ31/lqPyC+zQSV0274=
Subject key identifier: 5F:DD:8E:D2:0F:7C:36:58:82:F4:92:5C:46:71:8D:6A:45:F9:71:9C
Authority key identifier: 5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
Certificate issuer: /CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Certificate serial: 0193579B916A48FC820C0ABA4B9A2C05DC1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
Manifest number: 057E
Signing time: Sat 23 Nov 2024 06:00:33 +0000
Manifest this update: Sat 23 Nov 2024 06:00:33 +0000
Manifest next update: Sun 24 Nov 2024 06:00:33 +0000
Files and hashes: 1: H_nPyMxME9RUB7WUAh9ovkBIVtQ.roa (hash: 9oHGyyY72VOdCICFgYwyc/ftZpefFexZmBZokww6yKk=)
2: WtlDpBzifnt7z9_2monD4zfqY7U.crl (hash: IHUYz0eNRWlWOkuHqcNL995CjB5z2F8g+IQwkdTWxKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:91:6a:48:fc:82:0c:0a:ba:4b:9a:2c:05:dc:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Validity
Not Before: Nov 23 06:00:33 2024 GMT
Not After : Nov 24 06:00:33 2024 GMT
Subject: CN=5fdd8ed20f7c365882f4925c46718d6a45f9719c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8b:d5:88:e1:73:06:65:e4:90:67:ce:9b:37:
8b:0d:c7:20:cd:a2:ba:ac:93:2e:5c:c8:cf:14:6f:
d8:27:c2:5c:b6:e7:a3:98:39:db:a2:9f:b9:4c:c4:
7c:05:1c:7a:19:a3:ba:ab:7e:7b:52:fe:3f:5c:6e:
40:47:a6:00:2b:ea:59:f5:66:ad:26:17:75:14:7d:
cb:1d:d0:76:d7:a3:b0:00:a4:46:7d:1c:fa:51:fc:
6c:24:2a:e6:f4:ef:75:c5:ac:8d:f9:27:db:df:49:
f5:a9:1c:8d:6e:c5:71:37:20:5e:fb:5a:d0:4d:10:
f9:82:be:dd:ca:91:b9:92:b7:87:17:d3:e3:b6:14:
e0:55:3d:76:d4:01:37:c2:26:6c:9e:02:b7:1e:0b:
f5:ad:0a:f8:0a:b6:91:5c:26:be:65:1b:eb:1a:33:
51:ea:f0:8d:7c:1a:33:46:41:b7:71:8c:e6:15:45:
c8:69:4b:98:7c:cd:63:19:8d:1d:19:93:0e:98:a4:
ca:97:90:0c:79:17:d0:09:97:c7:e9:b7:6f:31:49:
65:75:0f:38:7e:bb:29:c7:dd:7f:84:65:e8:a6:f8:
96:78:e5:43:4d:38:18:f3:8c:42:50:ed:fd:e6:12:
c7:52:6b:87:44:30:d5:76:83:48:bc:cf:c8:10:89:
53:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DD:8E:D2:0F:7C:36:58:82:F4:92:5C:46:71:8D:6A:45:F9:71:9C
X509v3 Authority Key Identifier:
keyid:5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:f5:36:b1:fa:cf:1e:f5:db:af:1a:0b:0f:f5:23:ca:59:c0:
74:22:98:a7:83:b5:f4:09:df:65:85:c6:1e:5f:88:30:25:6c:
d6:5e:0b:8f:50:a8:bf:47:ac:dd:25:80:60:37:1b:a9:c8:67:
a8:ce:9e:27:68:95:b9:b3:25:e7:e3:a1:c4:3d:ce:dc:90:3a:
13:a4:f1:65:4b:fa:2a:d5:d4:a6:e4:b9:55:09:c0:be:5b:74:
2f:cd:dc:d2:67:1a:07:6d:d2:d2:35:e7:5a:26:81:7a:03:f8:
47:b8:d4:4e:13:1d:a3:46:9f:7b:9f:7e:02:d7:93:30:03:c4:
62:f9:16:7e:27:e3:43:00:c4:c8:d3:e4:a7:f2:c6:e1:1c:ee:
8f:12:27:95:7f:ef:34:66:e0:95:7e:6f:ad:96:e7:fe:a0:72:
df:64:e4:cf:9b:c9:c8:7e:51:ae:c9:d3:b6:8f:8d:f8:ae:06:
92:40:2f:71:02:59:71:76:88:e7:46:9a:81:d4:03:52:66:cc:
85:8f:01:66:ad:24:29:ed:db:1d:12:45:72:c2:4a:c7:af:0d:
72:3d:62:f8:28:f2:af:ca:c5:a4:1d:2f:95:f9:a1:6c:7b:f6:
8a:23:fe:69:2d:4c:23:0a:d2:8c:92:39:43:69:1b:3f:21:6c:
2b:a3:6c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:19:00 2024 by rpki-client on console-fra.rpki-client.org