Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
File: wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft (raw, json)
Hash identifier: PqpKn3ndfiXroCBFMgUH5gijhePXV81CtEbR1ILRwag=
Subject key identifier: 65:DE:B6:02:60:03:78:23:B2:2A:5C:8C:12:93:38:4D:01:62:B8:3D
Authority key identifier: C2:DE:D2:50:E3:BA:F2:1D:8E:0A:25:9A:79:9F:90:AD:AE:9B:E3:05
Certificate issuer: /CN=c2ded250e3baf21d8e0a259a799f90adae9be305
Certificate serial: 0194BB29B8C039D41C284FA6D5BEA982247C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wt7SUOO68h2OCiWaeZ-Qra6b4wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
Manifest number: 0A4A
Signing time: Fri 31 Jan 2025 07:01:01 +0000
Manifest this update: Fri 31 Jan 2025 07:01:01 +0000
Manifest next update: Sat 01 Feb 2025 07:01:01 +0000
Files and hashes: 1: wt7SUOO68h2OCiWaeZ-Qra6b4wU.crl (hash: 3g+FtJMvK1QD8X7xDw2mmlFxamdEtT/Xc69t85g8tYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wt7SUOO68h2OCiWaeZ-Qra6b4wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:b8:c0:39:d4:1c:28:4f:a6:d5:be:a9:82:24:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ded250e3baf21d8e0a259a799f90adae9be305
Validity
Not Before: Jan 31 07:01:01 2025 GMT
Not After : Feb 1 07:01:01 2025 GMT
Subject: CN=65deb60260037823b22a5c8c1293384d0162b83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:52:41:45:c3:14:1f:6d:1a:4b:eb:48:d4:99:
ab:1d:c3:0a:0b:1f:03:c1:ed:76:03:8d:fd:ac:f4:
4f:9a:ce:c9:62:46:19:11:2e:6e:4b:ea:bc:c0:e7:
b9:6c:c0:79:6f:30:e2:b2:7a:3f:ab:9f:84:6a:0f:
56:8b:51:4a:7f:0c:55:7d:e4:fb:bd:c7:9a:42:a5:
69:cb:e0:dd:1a:05:0f:6d:09:40:5c:f5:9a:0a:e5:
73:f8:a6:b1:b8:f2:32:2b:74:f7:e1:d9:0f:5e:85:
0c:be:0c:3f:41:a2:4d:22:97:51:ff:33:14:17:cb:
34:ad:43:07:fd:11:22:c2:fc:c1:e1:04:7e:53:ae:
3f:6e:4d:38:f8:ac:a3:f5:bd:9f:76:8e:94:ff:de:
44:60:c4:bd:8b:52:bf:19:54:bf:c9:bb:c6:5a:41:
38:9d:e4:98:4f:32:bc:e6:bd:0f:32:24:01:e5:49:
b9:69:93:2e:a5:1d:21:2a:36:39:45:91:ca:a1:30:
c5:9e:23:52:21:44:fd:d5:5a:ca:68:a9:ab:95:a5:
59:13:b4:32:e9:b0:02:d2:03:5a:f6:ec:40:1b:ca:
6d:f4:0b:58:8d:3b:06:76:b8:f0:56:9e:f7:81:c6:
55:ff:26:48:f3:51:dc:b1:bb:04:88:8a:a8:87:4b:
c7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DE:B6:02:60:03:78:23:B2:2A:5C:8C:12:93:38:4D:01:62:B8:3D
X509v3 Authority Key Identifier:
keyid:C2:DE:D2:50:E3:BA:F2:1D:8E:0A:25:9A:79:9F:90:AD:AE:9B:E3:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wt7SUOO68h2OCiWaeZ-Qra6b4wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:41:21:37:ce:5f:43:d5:5d:51:cd:8c:f5:be:40:bb:61:72:
59:cb:57:51:98:b5:de:5f:e0:3a:cc:04:bc:11:94:b7:e5:09:
af:e3:4a:6c:48:99:cc:d6:ad:03:53:8d:28:50:28:40:b0:e3:
e0:d9:86:e7:99:17:07:d1:30:ae:cf:9a:e5:58:bd:b9:5d:41:
bf:2c:46:da:c6:7c:2c:b5:c4:34:04:fd:8e:1c:fa:77:57:a1:
cd:3e:12:45:05:69:e6:80:f0:a6:98:dd:62:51:30:52:7d:98:
64:6b:e9:ba:7f:ad:de:a4:21:6b:6c:4f:af:ea:c0:b6:13:ab:
cc:c7:cb:7c:5d:5b:ca:70:47:5b:56:b9:56:22:da:2e:74:2f:
b4:d8:fa:ca:0a:ef:d6:1e:f8:03:ef:da:90:d2:3b:19:82:82:
d8:11:28:19:c4:c3:30:f4:78:23:f2:fc:c3:75:4a:74:da:13:
48:3b:c4:71:05:cc:0f:5a:b1:95:0a:a2:0b:69:20:ee:a4:af:
d8:b7:31:1d:55:08:aa:1d:91:e8:ca:b4:7d:a5:cb:c9:05:13:
7c:12:03:4c:da:db:7f:fc:a0:a9:4e:15:32:ea:ea:58:c2:a8:
82:1f:54:e3:2f:69:7b:96:c2:8c:b7:52:93:48:cf:9a:5d:60:
cf:92:42:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:29 2025 by rpki-client on console-fra.rpki-client.org