Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
File: wkDtrImIu1blLeEopdZaj07z8Tg.mft (raw, json)
Hash identifier: 3gHBaHEPJqq6lKtoMv8gYab7XBcoYGwZ6FyGg0glkZo=
Subject key identifier: 9F:6B:8B:A8:6D:C8:2D:68:C9:9D:65:CC:9A:78:AF:1B:85:15:0A:2A
Authority key identifier: C2:40:ED:AC:89:88:BB:56:E5:2D:E1:28:A5:D6:5A:8F:4E:F3:F1:38
Certificate issuer: /CN=c240edac8988bb56e52de128a5d65a8f4ef3f138
Certificate serial: 0194BABB972E21DEF75BA6FBCD6EACDAF2F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wkDtrImIu1blLeEopdZaj07z8Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
Manifest number: 0A94
Signing time: Fri 31 Jan 2025 05:00:43 +0000
Manifest this update: Fri 31 Jan 2025 05:00:43 +0000
Manifest next update: Sat 01 Feb 2025 05:00:43 +0000
Files and hashes: 1: wkDtrImIu1blLeEopdZaj07z8Tg.crl (hash: shGyvfv9TckzU237/oaicVrPSytvlF6AnGs+jyERUYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wkDtrImIu1blLeEopdZaj07z8Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:97:2e:21:de:f7:5b:a6:fb:cd:6e:ac:da:f2:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c240edac8988bb56e52de128a5d65a8f4ef3f138
Validity
Not Before: Jan 31 05:00:43 2025 GMT
Not After : Feb 1 05:00:43 2025 GMT
Subject: CN=9f6b8ba86dc82d68c99d65cc9a78af1b85150a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:d2:78:84:e3:3a:e3:95:69:1b:1a:0f:f0:
e6:68:ad:85:fc:54:35:46:31:af:56:56:00:3a:c1:
d6:a1:c9:e4:4d:2a:38:42:1c:18:10:97:30:a2:f9:
47:59:2d:fc:89:50:5a:8b:5b:88:e1:6e:95:97:33:
b9:55:23:81:7f:47:d2:75:6e:0f:44:64:54:22:60:
40:98:4d:85:66:bf:0a:e1:8b:fc:f4:fe:b0:b3:b2:
1b:e8:b6:1b:98:44:58:25:36:0d:cb:9f:70:e1:d7:
7a:f8:fa:9f:12:bd:17:16:17:89:ec:5a:42:de:93:
de:c5:42:12:72:ed:95:9c:34:ca:e0:af:4b:54:d2:
34:2c:db:1d:85:10:a1:89:ac:b8:8c:4a:6a:16:ae:
2b:95:07:38:46:ed:98:8a:b4:cb:95:03:bf:c3:fe:
2b:70:1f:4c:29:28:3f:d9:d6:2d:ba:f9:cf:a9:7e:
48:20:f3:b3:78:38:ac:17:93:ca:58:65:fc:5a:e5:
a4:56:43:f7:94:94:d1:ae:2c:10:a0:64:1c:f7:06:
7f:71:23:a0:df:72:de:e2:81:7a:6a:fd:5b:2a:82:
fc:7d:a4:bb:c3:22:36:61:f8:71:aa:40:0e:2b:33:
f6:94:72:94:c6:51:46:af:ab:2c:eb:86:7f:1b:3d:
aa:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6B:8B:A8:6D:C8:2D:68:C9:9D:65:CC:9A:78:AF:1B:85:15:0A:2A
X509v3 Authority Key Identifier:
keyid:C2:40:ED:AC:89:88:BB:56:E5:2D:E1:28:A5:D6:5A:8F:4E:F3:F1:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wkDtrImIu1blLeEopdZaj07z8Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:39:bd:8e:58:58:58:4d:11:a4:13:e7:1f:91:16:c0:4c:bc:
d3:f2:4a:29:39:7b:3c:a9:26:99:e1:ac:3e:3c:fe:a9:17:3c:
b6:ab:fc:d4:52:da:c9:a3:bf:c7:e3:c4:d0:dd:9c:27:03:82:
82:0c:0f:63:8c:1a:5a:8e:ac:70:6f:10:3f:aa:52:94:6c:9e:
9a:00:6a:d7:f9:b0:c3:8c:d5:e1:a8:e8:61:cb:08:e5:ea:d7:
2c:5e:c4:87:79:ca:0e:6f:3e:20:d5:3f:70:66:09:a3:68:c9:
a5:ce:3e:1d:ff:e6:46:84:e1:b5:b5:d6:de:97:fc:76:71:1a:
5d:2f:92:4e:9f:08:0d:3f:e5:f8:b9:d4:88:b9:e7:32:6a:5c:
1b:16:2b:88:05:04:c0:91:73:95:32:3b:3c:2d:f2:18:30:bc:
26:58:dd:02:05:37:c3:37:1f:0a:04:ae:7f:bd:d3:e6:f2:b7:
3e:d5:9d:9a:e1:72:ac:b8:b0:58:e9:ad:68:4e:d5:42:4f:79:
d2:1d:0b:cc:61:d7:e9:39:9d:ed:9d:13:31:c2:ce:87:9e:4b:
da:f2:6d:c0:8f:8b:35:49:1d:98:79:c4:bc:2a:5b:09:19:ee:
bd:3e:42:08:04:75:17:bd:a6:e6:66:5e:11:ef:cd:40:be:49:
4c:87:4b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:45 2025 by rpki-client on console-fra.rpki-client.org