Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
File: WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft (raw, json)
Hash identifier: D6700iJvWuViVMCz3shbruQ6DPXz8nM+k2OEjrCcLMI=
Subject key identifier: 08:DD:58:B5:B4:42:B3:EB:92:B3:16:35:7D:5D:36:65:D2:99:DD:75
Authority key identifier: 58:CB:FE:08:34:F8:E6:65:12:F5:5B:D7:8C:C0:75:B7:ED:56:F4:09
Certificate issuer: /CN=58cbfe0834f8e66512f55bd78cc075b7ed56f409
Certificate serial: 0194BAF26410A9A41849BF71329FE4D2706A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
Manifest number: 02E0
Signing time: Fri 31 Jan 2025 06:00:34 +0000
Manifest this update: Fri 31 Jan 2025 06:00:34 +0000
Manifest next update: Sat 01 Feb 2025 06:00:34 +0000
Files and hashes: 1: WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl (hash: 20ueZ3LelL4MsK7nU0eOGPSS3T2NdXkGG5RbPc6iunc=)
2: sqav3aLxOo9EBvGXAVp2M2JUjLk.roa (hash: VEx9zb2RSoqX9zcmLVzEThMXW7bJA3NuZWVb7RztklM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:64:10:a9:a4:18:49:bf:71:32:9f:e4:d2:70:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58cbfe0834f8e66512f55bd78cc075b7ed56f409
Validity
Not Before: Jan 31 06:00:34 2025 GMT
Not After : Feb 1 06:00:34 2025 GMT
Subject: CN=08dd58b5b442b3eb92b316357d5d3665d299dd75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6b:42:e5:87:d4:27:f3:69:7c:19:ac:84:1c:
a8:9b:a7:69:06:6b:e1:5b:49:fe:2c:28:15:8b:14:
d9:57:77:d8:40:4f:9c:ea:45:e4:f4:7f:c9:12:22:
bf:b2:4b:45:98:0e:e1:2b:3f:e8:c9:e6:f5:b4:8e:
d6:2f:b9:ee:64:d4:6a:3a:6c:f8:8f:4e:ea:36:7d:
92:f4:fc:ea:a5:5a:fb:8d:7a:47:e0:3c:44:c5:c0:
9c:fe:e8:42:d8:27:33:05:a3:dd:a7:9b:41:8f:df:
9a:f9:6a:2e:6a:50:f4:a9:80:27:72:fc:cd:dd:f4:
0d:59:32:dc:55:00:7a:73:2c:4d:0d:ea:0e:ee:14:
2f:8f:32:90:e8:6b:5c:55:86:ea:3b:e4:16:86:96:
78:8a:fc:26:79:63:d8:bd:12:db:04:5a:a4:e4:a4:
36:1d:7f:fd:11:ab:f9:a0:09:a5:58:37:a8:26:69:
5a:04:48:a7:5f:e2:79:e8:a1:2f:60:22:52:13:45:
1e:fd:64:12:6c:4b:a5:d1:90:d6:b7:ef:1c:9f:f7:
90:a6:4e:f8:bb:e9:52:7b:6f:cf:82:ea:ac:f8:07:
30:78:d6:eb:3a:28:8a:a2:2f:ca:1b:7c:3b:44:a6:
84:b9:48:81:e1:a1:c9:93:31:83:bc:58:76:4d:62:
1c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DD:58:B5:B4:42:B3:EB:92:B3:16:35:7D:5D:36:65:D2:99:DD:75
X509v3 Authority Key Identifier:
keyid:58:CB:FE:08:34:F8:E6:65:12:F5:5B:D7:8C:C0:75:B7:ED:56:F4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6a:f7:22:e4:55:27:76:ff:ef:d4:25:89:e7:b6:32:95:62:
3e:a3:11:4b:47:17:99:bd:f5:98:d6:67:70:fd:a2:9f:18:8b:
7d:be:5d:9b:9a:c3:1f:8b:5e:0d:4c:0d:f3:c9:cc:bd:93:bb:
0c:4e:3a:5d:99:d5:74:e3:4d:94:cd:88:81:f4:66:69:8e:9c:
14:70:7f:24:67:b4:02:21:da:a2:9e:81:37:ef:c4:4b:ea:7e:
27:ce:d3:3f:38:64:e4:00:d1:49:63:85:22:b6:ed:bc:1b:72:
c7:99:14:ef:92:a7:6d:0b:24:e7:b9:ea:00:e9:c2:a1:3f:65:
14:ad:b5:ad:30:94:93:db:95:f9:f4:a0:fb:7e:2c:80:cc:f2:
8a:a0:09:c5:bf:62:8c:14:de:6c:82:ec:f6:9a:39:d8:22:f7:
6a:ec:0a:99:5a:01:d2:fa:92:c7:87:4e:3b:df:81:e0:58:fa:
f8:c4:ff:b1:16:fd:a0:93:9c:72:ca:cc:a9:7e:76:ce:96:76:
d8:1b:8f:46:9f:4d:45:15:5f:67:c4:87:01:36:9a:59:21:e6:
41:52:4e:bd:3f:59:a7:c1:38:58:05:c1:b6:cd:8f:6c:6c:9f:
59:73:d8:f8:3c:c5:04:ce:35:83:5e:dd:7d:b2:f8:26:f2:9f:
0e:d6:78:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:39 2025 by rpki-client on console-fra.rpki-client.org