Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft
File: WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft (raw, json)
Hash identifier: Dqk86cqOB63R229/BP1/rAJ9zUd8w7XHasLH/erYeFI=
Subject key identifier: FC:CB:F0:9C:3D:57:63:E0:22:74:7D:60:D4:15:94:54:83:95:D1:0C
Authority key identifier: 59:5A:51:F4:5C:0C:B6:37:91:42:0D:09:43:C2:83:51:D1:BB:BD:0A
Certificate issuer: /CN=595a51f45c0cb63791420d0943c28351d1bbbd0a
Certificate serial: 0194BA846DE522A2856BB5D9C372A4DB06D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft
Manifest number: 0836
Signing time: Fri 31 Jan 2025 04:00:28 +0000
Manifest this update: Fri 31 Jan 2025 04:00:28 +0000
Manifest next update: Sat 01 Feb 2025 04:00:28 +0000
Files and hashes: 1: WVpR9FwMtjeRQg0JQ8KDUdG7vQo.crl (hash: bKv5Nb1YqLJDgxHTvLpm3u2/6G0Wde425ysfR5u0lOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:6d:e5:22:a2:85:6b:b5:d9:c3:72:a4:db:06:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595a51f45c0cb63791420d0943c28351d1bbbd0a
Validity
Not Before: Jan 31 04:00:28 2025 GMT
Not After : Feb 1 04:00:28 2025 GMT
Subject: CN=fccbf09c3d5763e022747d60d41594548395d10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8f:d5:d7:b3:1d:e2:be:bd:09:93:a1:6a:36:
8c:ae:d3:2b:b7:a0:26:64:ab:75:32:76:2b:d9:de:
bf:46:c1:f2:ff:42:00:75:e3:28:0b:94:e2:b7:f5:
4e:1e:05:8d:03:fa:69:d9:ce:83:3b:47:10:0c:d4:
f9:28:9f:b3:61:23:6d:af:b7:b5:0a:1c:57:d7:62:
4b:e2:34:47:62:9d:d1:57:ef:78:1d:2a:44:a3:36:
d9:bb:f0:ad:c5:1e:d6:2b:e0:69:78:52:59:2b:e6:
79:5d:86:d7:6b:be:0b:0f:c9:12:5a:df:54:00:fc:
c6:f9:f4:67:b1:90:5c:65:1f:57:2e:22:05:d2:6a:
d3:ee:b7:c7:f5:9c:78:f4:b0:3f:bb:2e:9c:c5:c4:
52:f3:87:53:af:ac:97:9c:ca:f2:f6:05:26:b0:28:
d3:45:be:63:51:e4:ec:fe:d1:c6:b5:9b:e2:d8:ca:
d9:2e:ed:c7:9c:14:86:f0:34:45:43:dd:b2:11:42:
0d:00:f6:14:bf:7c:bb:0d:ab:ef:41:8c:9b:d8:4c:
65:7e:e0:39:7b:df:6e:16:63:fa:0a:ea:77:9a:34:
52:24:60:98:e7:4a:5c:be:7d:55:f8:2d:7f:22:3b:
8a:4b:80:47:ca:a0:d7:87:7a:b2:a6:45:20:29:b9:
1b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CB:F0:9C:3D:57:63:E0:22:74:7D:60:D4:15:94:54:83:95:D1:0C
X509v3 Authority Key Identifier:
keyid:59:5A:51:F4:5C:0C:B6:37:91:42:0D:09:43:C2:83:51:D1:BB:BD:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:26:43:80:63:59:59:06:cc:b8:50:71:ed:26:79:4c:04:8a:
7f:45:1d:ea:7f:20:f9:c6:99:42:88:e2:8d:72:c8:fc:a1:a2:
fe:6f:c6:fd:34:f9:72:d5:cf:a6:de:81:10:46:3a:d5:de:77:
5a:1a:37:dc:fb:9f:88:1b:f9:a6:2a:10:ba:43:b1:ca:d4:46:
3e:f7:94:cf:53:e3:62:c4:16:60:fc:a4:c3:ca:bd:fe:03:6b:
17:3e:c4:1b:ba:25:13:54:f2:52:8c:80:2b:bd:70:a9:92:92:
73:8b:20:f1:81:c9:04:9b:fb:67:2d:f7:70:45:b4:0c:ef:2a:
2c:ee:72:f1:39:2a:e5:12:a0:d4:4f:5f:76:e4:0f:89:c8:4e:
60:80:fc:c9:87:2b:ab:32:25:86:a9:29:10:d9:6a:28:f4:27:
90:63:d4:0b:c7:32:20:8a:42:88:db:ca:9f:83:b6:db:47:47:
34:04:53:7f:6c:5b:7d:05:f3:10:09:a8:ef:49:5e:6e:b0:ad:
2d:03:c8:82:bb:2a:bb:97:d3:19:56:94:8b:d3:8a:ab:f8:51:
ec:e8:4a:c9:43:76:d7:b6:3a:0b:cf:a3:e3:83:35:a8:80:7f:
49:06:3e:70:6f:03:91:69:9d:01:77:15:8c:b4:aa:b7:fc:bd:
08:89:10:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:56 2025 by rpki-client on console-fra.rpki-client.org