Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.mft
File: wbsILYb1B7_635GSqmdqt9onDUI.mft (raw, json)
Hash identifier: R73BYDRArm0UKJ71wsCA4nHSpk8COrxFJ+iwTVRv+48=
Subject key identifier: 8A:6A:C0:7F:5B:D3:AF:CB:45:04:7B:B8:65:75:4F:6D:C5:CB:12:91
Authority key identifier: C1:BB:08:2D:86:F5:07:BF:FA:DF:91:92:AA:67:6A:B7:DA:27:0D:42
Certificate issuer: /CN=c1bb082d86f507bffadf9192aa676ab7da270d42
Certificate serial: 0194BB5FE0577DF362505266A2806058EF9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbsILYb1B7_635GSqmdqt9onDUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 08:00:10 +0000
Manifest this update: Fri 31 Jan 2025 08:00:10 +0000
Manifest next update: Sat 01 Feb 2025 08:00:10 +0000
Files and hashes: 1: oQclDl8_JxNhzqNyrIJDWCORZJA.roa (hash: JcEUx0LCrdDEqt2JdZzmeRRb5CPjlWwu7xHPm1S7f5w=)
2: wbsILYb1B7_635GSqmdqt9onDUI.crl (hash: XtKhEla526gOsd+jJuTqphH8X7MHcSwC4Ou9wTwlehQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wbsILYb1B7_635GSqmdqt9onDUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:e0:57:7d:f3:62:50:52:66:a2:80:60:58:ef:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bb082d86f507bffadf9192aa676ab7da270d42
Validity
Not Before: Jan 31 08:00:10 2025 GMT
Not After : Feb 1 08:00:10 2025 GMT
Subject: CN=8a6ac07f5bd3afcb45047bb865754f6dc5cb1291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4c:ae:74:dc:d7:e0:da:44:92:9a:95:44:ea:
49:bb:08:de:77:21:55:49:61:47:e9:6b:ff:18:74:
f5:f1:76:67:45:59:85:66:5a:4d:8d:dc:36:46:d0:
e6:7e:e7:b0:0c:ed:01:1c:43:87:f7:05:4c:64:e0:
a8:d2:6c:da:be:d2:a7:12:0a:a9:a9:47:01:d3:04:
16:80:04:8b:bf:5f:8c:da:7c:7c:0d:c4:8f:d4:c3:
83:de:e9:19:f0:b3:25:bb:dc:21:8f:85:ca:48:42:
48:00:4f:06:29:b1:0d:84:59:bd:b0:49:08:9b:a7:
40:c7:2c:24:d5:f8:7a:65:20:68:55:d2:fe:58:3d:
4b:21:5f:e0:60:23:86:72:1b:63:33:c6:f1:df:fb:
a7:3e:79:cc:19:f7:a5:29:1e:7d:8f:ac:ed:79:fc:
c4:67:ea:b2:74:f0:d8:95:b6:8e:63:05:81:ae:6c:
88:ec:f8:73:58:60:77:c7:4a:fe:79:47:cf:17:b6:
0d:1a:8b:a9:5a:1c:d3:d4:4a:f4:25:2b:e1:e6:82:
53:dc:42:3e:97:88:bb:a0:61:07:be:24:de:e7:ee:
9a:fe:a1:e8:00:00:6b:97:1b:2f:20:dc:d2:46:8a:
4e:c2:84:8b:ad:ad:a6:35:84:51:27:c3:41:a1:80:
e7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6A:C0:7F:5B:D3:AF:CB:45:04:7B:B8:65:75:4F:6D:C5:CB:12:91
X509v3 Authority Key Identifier:
keyid:C1:BB:08:2D:86:F5:07:BF:FA:DF:91:92:AA:67:6A:B7:DA:27:0D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbsILYb1B7_635GSqmdqt9onDUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a1:95:23:a2:8d:70:72:8f:c3:ec:d7:bc:80:a4:f4:1c:30:
f5:41:06:8c:54:2d:84:3d:3f:c4:16:73:db:a3:a7:14:a8:45:
2d:af:cb:2e:9e:ab:72:08:38:fd:39:ee:70:e7:52:6c:d1:28:
6e:2d:c3:58:97:d5:c4:d8:58:ec:33:b6:ee:58:ab:a8:29:c6:
c4:ae:ec:92:15:24:fd:1e:63:81:ae:33:10:e8:a4:e4:23:b0:
74:dd:77:b9:8c:b2:b1:f1:99:cc:28:75:ce:de:56:d2:00:8b:
f2:42:8b:5b:9a:b7:17:a3:41:96:04:8c:b7:db:d8:c5:68:82:
a8:b5:c1:0f:83:9c:8e:fd:4f:ae:ab:1f:9a:e7:b6:03:43:ee:
c9:3f:a2:33:86:02:20:cb:0c:ed:cc:cf:b9:53:d0:14:84:69:
b1:93:3e:28:4c:ce:a8:85:b3:78:e0:3a:88:49:46:ad:6d:d2:
4d:a9:bc:9f:36:b7:6b:d1:da:6e:1a:94:e1:67:fc:cc:c9:8e:
d4:32:03:37:63:7d:1f:b8:6a:40:2a:dc:a3:f4:12:11:6c:34:
ef:9a:d7:98:5c:ef:b5:74:51:e4:3c:01:30:5c:c3:c1:1f:94:
69:49:97:23:8d:ba:b9:e2:69:0d:c0:9e:24:51:8a:c2:ef:c3:
4d:5c:07:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:49 2025 by rpki-client on console-fra.rpki-client.org