
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
File: WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft (raw, json)
Hash identifier: tnu+Qem1/vGuTR9mw+gfDvv9Zp4vXqnD2EHKK/dCkOE=
Subject key identifier: 55:39:6A:59:F8:A6:D3:0B:9D:D7:EE:81:A9:CB:AE:EF:3F:2F:DD:5B
Authority key identifier: 58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9
Certificate issuer: /CN=58667131d760b5db1de98ea20c0f82fc01c9f1d9
Certificate serial: 0194BAF2523F07F45E62ED4ECEAAC18F7487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 06:00:30 +0000
Manifest this update: Fri 31 Jan 2025 06:00:30 +0000
Manifest next update: Sat 01 Feb 2025 06:00:30 +0000
Files and hashes: 1: 4QXRAbNR3yAj5SaRnruidaQPNKo.roa (hash: phO8vfaPccH9SR7nce4AC0vjdKm6fZJc24zYaHvUQ+8=)
2: 9PCEGLXY6xCziVFP40kVixOzsgM.roa (hash: XwgSZPxwwBlT3GDonAYhaJ+Jud/pltUIiWMk+iraIZ0=)
3: WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl (hash: 7bIVrZKrBqUg6rdI/SdyTPjl/ZSr+wzZYF+Nv+Y0pcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:52:3f:07:f4:5e:62:ed:4e:ce:aa:c1:8f:74:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58667131d760b5db1de98ea20c0f82fc01c9f1d9
Validity
Not Before: Jan 31 06:00:30 2025 GMT
Not After : Feb 1 06:00:30 2025 GMT
Subject: CN=55396a59f8a6d30b9dd7ee81a9cbaeef3f2fdd5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:41:f4:a0:19:8c:cf:01:49:aa:5e:7e:5a:3e:
e7:2f:b1:a3:3e:ee:89:7a:34:40:c4:96:c9:5d:11:
25:6c:64:e9:ec:07:87:99:ca:6b:70:78:56:a3:8c:
1c:bf:be:08:d0:77:3e:48:4d:b6:48:ed:74:18:13:
65:3b:02:70:34:91:6b:f4:98:7a:d9:e7:db:d4:14:
d1:74:70:7f:7e:c2:4a:2f:bb:9a:26:b4:c3:11:3b:
96:a4:fa:7b:37:0c:73:b4:71:37:67:f1:e6:4a:db:
68:0b:f1:47:1e:2c:57:df:bc:97:8e:3d:b2:47:b6:
2a:29:ee:b5:45:12:a7:da:28:ba:20:70:ac:29:8c:
14:27:44:fd:6b:28:d5:90:99:5e:2d:5e:7e:d0:03:
62:38:11:af:e7:f7:6e:e3:2a:43:65:5a:1b:2f:2c:
07:c5:2f:fa:81:ea:c1:3c:89:c0:86:06:0c:cc:ba:
f4:94:87:98:d8:f1:bc:1c:f5:e8:1f:2b:6b:6a:04:
cb:d8:d8:06:c9:eb:4d:97:78:56:39:e9:d7:ab:a9:
c4:15:12:94:5f:d0:33:ed:b6:e5:76:63:b2:76:fa:
e4:bb:6b:a4:f9:ac:f6:9f:e1:87:f1:55:e4:24:fe:
7f:24:d9:c8:c3:52:f2:40:2e:1d:6f:0c:a7:9b:07:
2a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:39:6A:59:F8:A6:D3:0B:9D:D7:EE:81:A9:CB:AE:EF:3F:2F:DD:5B
X509v3 Authority Key Identifier:
keyid:58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d6:41:68:ba:29:e8:5f:49:f4:0a:27:e1:38:d0:aa:9a:94:
e2:0f:c4:d4:23:c2:b1:33:38:8f:f0:32:e1:0c:c0:f1:f6:a4:
23:e8:a5:59:7e:61:6f:88:aa:fd:84:eb:3a:ef:e9:2f:cf:77:
56:ed:62:ab:fc:16:ef:4d:b3:83:e7:97:b3:27:f7:be:98:7f:
8f:f9:fc:00:83:af:79:30:a9:17:07:92:63:7b:eb:c2:95:5f:
47:49:a8:28:db:86:fb:78:ae:fa:86:e4:c3:64:07:33:9b:82:
16:80:44:55:95:56:b3:fc:ca:f6:8d:c8:12:6b:a3:da:c8:26:
db:f2:e2:04:d7:86:5f:3c:5f:43:ff:9f:5a:63:47:1b:0d:fc:
c5:8c:39:b9:94:20:9b:a0:ee:7a:2f:a8:de:39:66:c9:cc:e0:
de:da:88:2d:96:ee:36:81:20:ec:34:c5:1d:39:ff:2e:95:c3:
7b:48:a1:b9:fc:e1:ac:3b:6b:f5:5a:f6:89:88:fe:c3:dc:d8:
f9:c5:94:20:57:fa:1c:46:14:2f:75:b3:6a:64:f7:f9:a5:d4:
8f:ca:4f:f5:46:5d:a8:e7:a6:4b:2e:da:95:f5:94:63:a4:e7:
bc:3b:4f:a2:6f:db:55:95:64:90:02:6f:e7:fc:af:86:41:0a:
ec:7e:b2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:05 2025 by rpki-client on console-fra.rpki-client.org