Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
File: wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft (raw, json)
Hash identifier: oGx2XexcE0tyZm8GmLNxLlvfQNZ4vQKmrcBSL6RnfU0=
Subject key identifier: 93:8B:8D:24:11:B5:C4:63:CF:BF:72:55:AF:0C:E1:A7:1C:C8:F2:68
Authority key identifier: C0:52:D5:D9:35:72:2C:2C:5C:C4:9F:05:2C:D5:A5:A8:F1:45:73:6B
Certificate issuer: /CN=c052d5d935722c2c5cc49f052cd5a5a8f145736b
Certificate serial: 0194BB29669EFA53825337C97F0C31F25425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
Manifest number: 12F8
Signing time: Fri 31 Jan 2025 07:00:40 +0000
Manifest this update: Fri 31 Jan 2025 07:00:40 +0000
Manifest next update: Sat 01 Feb 2025 07:00:40 +0000
Files and hashes: 1: wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl (hash: 893ejgi7g1l3qFrC2SXCFsXgyVutUbbrGbHDPVnsWuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:66:9e:fa:53:82:53:37:c9:7f:0c:31:f2:54:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c052d5d935722c2c5cc49f052cd5a5a8f145736b
Validity
Not Before: Jan 31 07:00:40 2025 GMT
Not After : Feb 1 07:00:40 2025 GMT
Subject: CN=938b8d2411b5c463cfbf7255af0ce1a71cc8f268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:24:f8:b6:84:d7:14:b7:b9:09:19:d1:ae:c3:
44:ab:b6:a6:d2:8d:5d:ab:2c:13:40:af:83:0b:73:
b3:24:00:67:07:de:96:1c:2d:0b:30:68:6c:c9:42:
e9:a4:62:59:38:70:4e:8c:00:3f:3c:33:f1:a7:7a:
dd:72:6e:94:ec:a4:e8:bb:f0:c9:e0:cd:32:b4:1c:
8c:ec:0b:f1:77:4f:e5:78:6a:34:e1:ad:5f:45:f0:
44:41:5e:28:6e:ec:e4:1a:8f:64:6e:15:8b:ed:d0:
29:3d:0e:4d:bf:23:e1:cc:19:62:73:fd:67:1c:1f:
08:62:54:d3:b6:f1:b1:cf:60:87:5b:e8:7b:8e:6c:
43:aa:06:e9:29:a3:b8:b9:e0:4d:48:cb:f7:6d:90:
1f:3d:ef:ff:2d:39:52:fd:1f:46:6a:cf:5d:18:da:
c9:ae:a5:30:35:7c:f2:51:8b:58:67:e5:78:23:25:
12:50:92:8a:bf:ea:74:ce:63:54:52:22:5e:26:39:
45:84:ca:62:fb:d2:18:9c:f3:96:0d:51:d1:4e:7b:
26:5c:e2:2b:2a:f5:7f:67:88:69:32:8d:f8:8b:4c:
e5:c0:58:6e:f4:f0:18:3a:94:44:c4:21:7c:ae:48:
c6:e1:bc:1f:d5:52:c2:a7:66:20:08:96:7c:e8:97:
9f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8B:8D:24:11:B5:C4:63:CF:BF:72:55:AF:0C:E1:A7:1C:C8:F2:68
X509v3 Authority Key Identifier:
keyid:C0:52:D5:D9:35:72:2C:2C:5C:C4:9F:05:2C:D5:A5:A8:F1:45:73:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6a:11:df:bc:13:f3:b0:35:5b:37:7e:79:d5:4e:08:02:fe:
9a:e9:8c:2d:95:6d:84:4b:fa:f1:e1:ac:fd:9e:87:51:89:bb:
60:93:fd:55:e0:0c:56:c1:8e:f4:80:6b:bb:83:4e:61:7f:8e:
5c:b2:ac:e3:01:6e:1c:c9:f7:8d:4d:b7:3a:bd:dc:4e:e2:92:
81:d4:22:fb:3c:61:93:3a:a0:6e:87:e3:ab:67:31:c4:9e:5d:
01:75:c1:48:c5:2c:93:2c:ae:b7:cc:67:f3:45:fd:2d:ea:f7:
11:ae:56:23:91:7e:56:94:2b:ea:1f:e7:b2:8b:32:b8:89:3c:
1b:fe:d3:31:85:b6:e0:7d:e8:54:b1:44:fb:50:c5:8b:a2:e7:
36:17:ab:17:53:67:fb:83:85:9b:51:13:1b:38:32:8e:cb:c7:
b6:6d:37:c1:7e:da:a2:f5:a1:8c:f9:5a:f5:f8:69:0a:0f:7c:
30:b2:b6:46:68:35:55:a2:a1:d4:24:71:3e:c6:00:b7:a5:07:
ee:c3:c0:6c:d6:98:cf:64:b3:98:5e:b1:02:4b:9a:d6:0d:49:
47:f5:00:3a:d9:97:1c:10:22:f2:07:33:58:8b:95:4c:8f:11:
8d:d4:b9:63:e6:be:06:e2:58:d2:cd:60:da:bf:79:61:11:1f:
37:be:48:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:32 2025 by rpki-client on console-fra.rpki-client.org