Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft
File: wATtnrWVyJu57H4g-YUp6VFznYQ.mft (raw, json)
Hash identifier: GmyMyfp7KLTgtnz5VvNlLw0pAFAVml5v6BmTnixH2h0=
Subject key identifier: 2A:5C:DF:46:4F:26:20:9F:F1:1E:B1:08:00:D6:C1:2D:F0:F0:19:7E
Authority key identifier: C0:04:ED:9E:B5:95:C8:9B:B9:EC:7E:20:F9:85:29:E9:51:73:9D:84
Certificate issuer: /CN=c004ed9eb595c89bb9ec7e20f98529e951739d84
Certificate serial: 0194BB5FE74BD6B4BF013B9B7025389C7538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wATtnrWVyJu57H4g-YUp6VFznYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft
Manifest number: 0182
Signing time: Fri 31 Jan 2025 08:00:11 +0000
Manifest this update: Fri 31 Jan 2025 08:00:11 +0000
Manifest next update: Sat 01 Feb 2025 08:00:11 +0000
Files and hashes: 1: wATtnrWVyJu57H4g-YUp6VFznYQ.crl (hash: WlYYZIe+TUaHYI46yfEp3YUNCONdPt+7u4AtEpFh0wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wATtnrWVyJu57H4g-YUp6VFznYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:e7:4b:d6:b4:bf:01:3b:9b:70:25:38:9c:75:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c004ed9eb595c89bb9ec7e20f98529e951739d84
Validity
Not Before: Jan 31 08:00:11 2025 GMT
Not After : Feb 1 08:00:11 2025 GMT
Subject: CN=2a5cdf464f26209ff11eb10800d6c12df0f0197e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:c3:b0:23:96:9a:bb:f7:b3:2b:92:c5:7d:
f7:56:89:2c:b0:37:ff:ef:f5:43:06:93:6a:ce:13:
56:bd:d3:98:24:e6:d3:2f:b3:e3:60:45:db:a3:79:
91:7d:cc:4f:e9:61:78:b6:f8:2d:be:b7:82:8f:74:
b4:f2:b2:87:b0:ae:6b:ed:d1:f2:b5:59:ab:d7:fa:
b7:48:8e:ab:2b:6c:8e:dd:65:61:4d:0f:2e:aa:d8:
8f:75:7f:29:57:17:4b:84:1f:2c:36:08:d9:ca:f7:
ab:89:06:03:c5:08:53:e0:29:f6:da:c7:b4:49:4b:
43:12:0d:81:0d:ea:bf:ec:47:55:50:74:d5:73:d6:
05:91:e5:eb:29:65:5a:e6:49:e1:3e:17:77:55:29:
ea:4e:2a:fb:f8:ba:af:86:89:13:bb:e0:2b:c8:bd:
b6:46:eb:d8:6b:e8:8e:51:46:3e:9b:80:9c:d7:0e:
4b:1b:01:8f:17:a8:7a:36:a4:89:d9:85:b8:52:d8:
ed:21:21:9b:37:40:a3:23:ba:96:93:48:29:a2:a0:
56:f8:0b:d8:84:9b:82:08:40:ec:cf:c5:ff:fc:c3:
3c:14:63:77:89:46:0e:3c:27:4e:52:a9:ff:af:70:
cb:b4:c7:83:cd:e6:ab:6f:ee:9d:3b:d6:fa:ea:90:
8e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5C:DF:46:4F:26:20:9F:F1:1E:B1:08:00:D6:C1:2D:F0:F0:19:7E
X509v3 Authority Key Identifier:
keyid:C0:04:ED:9E:B5:95:C8:9B:B9:EC:7E:20:F9:85:29:E9:51:73:9D:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wATtnrWVyJu57H4g-YUp6VFznYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c3:32:a5:4b:c9:2b:20:2b:1b:80:ae:5d:1c:e9:6f:45:69:
63:5f:67:b2:3e:03:e3:d6:69:4a:61:34:fb:49:49:0f:14:1b:
fa:d4:ce:30:15:24:98:94:23:7b:cf:a4:58:e7:0f:1f:e2:bf:
9e:fd:ef:35:1f:cb:90:48:34:0a:68:f9:bc:50:21:5d:71:e4:
bd:50:3c:f4:27:bf:9f:5f:53:9a:ed:9a:0e:79:f6:66:94:47:
5c:25:75:d2:ee:97:10:3d:21:da:c2:0e:b5:6d:10:9b:b0:67:
8d:10:d5:76:85:32:ab:16:0e:29:93:47:4b:33:55:ae:6d:4b:
ec:8d:95:c3:0b:2a:9c:ea:d1:78:bb:a5:fa:43:06:06:8c:e7:
de:f9:94:c7:b4:06:5f:df:4e:b8:f5:5c:9f:b4:22:4f:95:59:
e1:ab:b1:49:30:29:6c:9f:a4:84:c9:5b:4d:d4:79:6c:bf:d3:
bb:30:de:8b:8e:16:d2:7f:be:ce:a4:26:2d:de:54:23:10:08:
08:b7:28:a9:b9:f6:d9:ef:8f:f2:4a:2c:02:bf:d5:53:77:74:
51:61:77:79:bb:ae:54:eb:cf:60:78:2c:96:6d:21:10:3e:a8:
58:47:e1:ba:66:be:1e:2a:65:80:39:5e:1d:eb:7c:4d:ec:1f:
f3:05:b3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:37 2025 by rpki-client on console-fra.rpki-client.org