Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
File: WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft (raw, json)
Hash identifier: 9KQe9D7dwfBjrzl+OJVEXr27nKbI5MTK0CKlTyniyVs=
Subject key identifier: B8:32:F5:DB:EF:64:C6:80:96:C1:E7:39:71:F6:FB:79:F6:9E:49:0C
Authority key identifier: 58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA
Certificate issuer: /CN=58131e8f9a485040d9fcae7167a428b8a12f49ea
Certificate serial: 0194BABB211D766A410A719A5112DD0BAC8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
Manifest number: 06ED
Signing time: Fri 31 Jan 2025 05:00:13 +0000
Manifest this update: Fri 31 Jan 2025 05:00:13 +0000
Manifest next update: Sat 01 Feb 2025 05:00:13 +0000
Files and hashes: 1: WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl (hash: ZO3E2L+q3fpMZxBIfca+6u3T5JMwkGatC0mxsHFNzpM=)
2: vdHTEb2gTWFnAUlb8EFFzZFOAyk.roa (hash: 7sUvaXCmkwC5CKTFltnkxSzQliSsm8MxQWVCiowpXtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:21:1d:76:6a:41:0a:71:9a:51:12:dd:0b:ac:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58131e8f9a485040d9fcae7167a428b8a12f49ea
Validity
Not Before: Jan 31 05:00:13 2025 GMT
Not After : Feb 1 05:00:13 2025 GMT
Subject: CN=b832f5dbef64c68096c1e73971f6fb79f69e490c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4b:2f:a4:7b:eb:56:60:52:78:fa:7b:73:41:
db:bc:ae:2f:f8:d4:55:de:6a:45:39:be:eb:d1:55:
23:62:a8:6c:c7:74:c2:9d:82:0f:78:f8:fa:33:79:
5c:83:a6:5a:15:e3:1e:4a:21:16:34:03:f7:05:74:
f4:37:25:41:c0:e8:7a:6e:0c:a7:a1:09:7e:9d:c2:
c0:8a:df:db:3f:48:06:0e:08:ad:e6:e7:5a:a4:3c:
85:57:db:0e:91:6c:bc:71:7c:6a:ca:b0:bd:62:2a:
c2:ee:0f:fb:82:27:bb:86:ed:7a:0d:22:c5:ff:68:
22:db:f2:03:e5:38:b7:72:ed:cc:96:96:f5:f1:54:
88:39:f4:fe:b4:a6:0d:15:c3:7f:d7:57:35:82:96:
68:0c:ac:87:9a:74:dc:21:30:e2:63:35:4b:0f:89:
be:f6:aa:9f:c0:94:fe:3c:88:ea:a0:5e:36:9e:0f:
5c:9a:3a:ad:b3:7d:ff:99:62:32:b8:e7:08:68:d5:
09:2f:b5:8c:37:3d:15:1f:49:4e:0e:f8:b7:d4:25:
43:4b:6c:3e:25:94:f7:d9:25:57:ca:bb:f3:fc:35:
18:ad:af:f1:21:cd:4c:f4:e1:ba:74:f4:3d:a1:06:
f0:d5:33:e3:2a:b6:bb:ed:3c:d8:f1:52:09:55:bf:
1e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:32:F5:DB:EF:64:C6:80:96:C1:E7:39:71:F6:FB:79:F6:9E:49:0C
X509v3 Authority Key Identifier:
keyid:58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:22:bc:21:4d:69:f4:0a:d1:f6:b7:86:3a:a9:ae:e2:68:d5:
46:53:26:26:8b:31:e8:75:57:53:38:cb:29:4c:13:75:00:7a:
cd:d6:10:14:ff:78:99:c0:5c:46:7d:b6:8e:2f:a0:4f:f9:ca:
53:46:c8:87:80:32:d9:3c:10:20:a2:d1:45:7a:7c:af:71:fc:
a5:b8:3d:1f:a9:7c:37:5c:64:83:1d:7b:14:3d:e4:af:28:5a:
68:25:36:d3:9e:7b:21:e7:01:88:3f:15:41:ab:73:be:3a:27:
c5:86:0c:25:86:00:52:39:84:34:55:28:04:0d:72:b7:a1:8f:
53:48:9a:88:bc:f8:59:20:c3:04:7d:6c:d4:ed:b1:86:ef:ea:
58:99:31:0a:c5:78:50:b2:b2:30:30:59:a8:2c:d6:1b:72:09:
70:d5:ed:19:1a:e4:bf:23:b2:49:46:ba:df:69:e1:69:f0:64:
7f:6b:c5:84:57:97:c5:4e:77:66:0f:13:b8:9f:c6:b7:93:f6:
14:83:a0:56:f6:a9:ba:62:25:c2:67:e7:5f:e0:db:2d:06:34:
c7:8c:34:34:f4:c0:77:89:a8:5f:f5:05:04:42:22:62:9c:ef:
e3:9d:66:54:90:c0:96:46:d8:f4:98:d2:e4:e9:43:85:3a:dc:
95:43:95:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:49 2025 by rpki-client on console-fra.rpki-client.org