Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
File: W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft (raw, json)
Hash identifier: bMUwBnYPpkPLiErTXH7gabP/sdCRjPtMFoVLINpKEBQ=
Subject key identifier: E7:E8:C7:5E:26:F4:FD:F1:A4:28:43:23:52:36:A1:E9:2D:E6:20:D9
Authority key identifier: 5B:D6:CB:DA:A7:94:A9:7A:7D:82:66:70:2C:B0:54:F1:B2:49:D4:BF
Certificate issuer: /CN=5bd6cbdaa794a97a7d8266702cb054f1b249d4bf
Certificate serial: 0194BB97354F175E4C320B1F7C6DF5C2A1F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 09:00:36 +0000
Manifest this update: Fri 31 Jan 2025 09:00:36 +0000
Manifest next update: Sat 01 Feb 2025 09:00:36 +0000
Files and hashes: 1: W9bL2qeUqXp9gmZwLLBU8bJJ1L8.crl (hash: IDGwxyjD2JXMSqYV+vPdJIiMHa6JcUItmrv4P44I9EA=)
2: cwNcFibEiknBhjZUsu5CDMCAHjU.roa (hash: uRGOj4tJKaLxVK1NmQ/cajMQwRP5s1agqok1B0mO3Is=)
3: ocfaSphrJL3xu-4-94X1BAg_eco.roa (hash: CMK1dG+CtJembHP9+sAk12iQiNKdSn83yhz9BkvkSQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:35:4f:17:5e:4c:32:0b:1f:7c:6d:f5:c2:a1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd6cbdaa794a97a7d8266702cb054f1b249d4bf
Validity
Not Before: Jan 31 09:00:36 2025 GMT
Not After : Feb 1 09:00:36 2025 GMT
Subject: CN=e7e8c75e26f4fdf1a42843235236a1e92de620d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:e9:f6:2d:98:c5:bd:12:d1:d5:93:5d:06:
19:d1:42:a7:ca:93:70:0e:66:17:97:1e:5c:53:ab:
31:08:38:4a:55:a8:f0:ca:ed:43:f8:e4:1b:b6:84:
c2:6a:2b:ae:e5:53:cc:33:0c:ed:5e:60:d4:a4:92:
ce:cd:d4:14:89:c3:d5:16:08:9a:3f:54:b6:cc:53:
15:4b:6f:ff:bd:cf:11:ac:e7:9b:16:03:9a:67:45:
46:d1:8b:92:e6:bf:92:2e:c5:e3:78:ea:0d:f3:20:
a8:ff:f1:dd:24:2f:15:06:a3:5c:e4:1d:e8:91:a8:
b8:07:43:cb:f2:bb:7a:6c:a5:84:4a:eb:5a:16:21:
4a:48:8d:16:c1:a2:d1:67:8b:ea:81:1a:67:ee:d7:
ff:6c:ff:8a:74:6f:43:d8:48:ab:3b:91:80:01:45:
cf:66:b9:cc:8e:79:6b:61:44:26:e0:c7:3f:15:01:
ee:c1:c5:48:b3:ee:74:4b:e9:8d:01:4e:90:de:55:
22:b6:20:42:60:19:de:e8:99:30:3f:3f:bc:f6:71:
57:d7:e2:44:0f:8c:90:81:c7:5e:c1:d6:1b:d0:bf:
35:18:69:7d:ca:15:be:f2:f5:14:b0:6a:eb:24:63:
36:1f:61:d9:10:3b:c0:4d:04:76:f8:13:b5:65:68:
33:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E8:C7:5E:26:F4:FD:F1:A4:28:43:23:52:36:A1:E9:2D:E6:20:D9
X509v3 Authority Key Identifier:
keyid:5B:D6:CB:DA:A7:94:A9:7A:7D:82:66:70:2C:B0:54:F1:B2:49:D4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:32:c4:6e:90:19:86:fa:e4:cd:22:7a:79:0d:85:6e:39:fc:
6b:8c:34:47:66:22:00:a5:ba:21:4c:e4:82:76:78:43:b9:4c:
b1:d5:52:d8:62:15:09:48:88:68:37:33:6b:cf:f3:e1:52:77:
0b:3d:04:46:9d:15:11:29:16:a8:6c:b7:9a:e8:a0:93:f9:9f:
70:c5:fc:be:c6:fd:9a:e6:55:98:d2:70:78:53:49:6c:6a:a9:
c1:55:64:42:fc:2b:d4:e6:1d:34:29:2f:30:2f:c8:e7:50:26:
57:2c:b4:c9:34:be:62:fb:7b:15:64:68:4f:e2:6d:31:40:61:
e6:20:0f:08:70:ab:ab:d4:8c:1f:35:1b:75:8a:22:e5:be:74:
b9:8b:10:44:d3:e4:69:fa:20:7f:17:e9:8c:a2:8e:2f:12:3a:
05:8d:dd:01:2e:07:ea:83:47:98:8f:4e:56:e7:90:ef:e8:b0:
d2:11:3f:bc:d2:8e:41:3c:1d:ca:62:07:2b:4c:4b:f2:dc:05:
8a:fa:e6:9b:2f:71:03:ea:34:b5:d0:ae:79:14:9f:14:45:ad:
fd:92:c0:10:f2:c5:d2:34:99:a8:83:d7:3e:0d:29:01:5c:44:
f9:e9:d7:7e:f6:e0:75:6f:1c:8b:89:f0:e1:db:c2:2a:f7:9c:
af:f5:17:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:45 2025 by rpki-client on console-fra.rpki-client.org