Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
File: veLbhJjuj3s6tcqug4KVlmIHAsE.mft (raw, json)
Hash identifier: k1CgL34EkZY9FS51ehg3f9NM3+glmQcQLoa3V5E+18U=
Subject key identifier: C0:3F:43:54:8C:E6:BC:91:97:C9:19:CD:69:7E:88:73:AA:BC:B4:7C
Authority key identifier: BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
Certificate issuer: /CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Certificate serial: 019512474108F06B6205EB5C6065B3C04D9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
Manifest number: 1459
Signing time: Mon 17 Feb 2025 05:00:14 +0000
Manifest this update: Mon 17 Feb 2025 05:00:14 +0000
Manifest next update: Tue 18 Feb 2025 05:00:14 +0000
Files and hashes: 1: 8K-Dk9nDQwdChkEETkkV17gu04A.roa (hash: vo9xMwNRBb0zQzlCz29+SzofyhN7BH2JxEX9AVrPkwI=)
2: iu0Q7TLsh_YHXWJT0VGbOd2zsZU.roa (hash: 3TFPxppeoBP4LYAjJUoNSHVfrsnVo7BRtfkHBrHECp4=)
3: veLbhJjuj3s6tcqug4KVlmIHAsE.crl (hash: DijA/OGy26mjVo3wZeqUCux2lB03ZgdFPvzVVa4z5A4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:41:08:f0:6b:62:05:eb:5c:60:65:b3:c0:4d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Validity
Not Before: Feb 17 05:00:14 2025 GMT
Not After : Feb 18 05:00:14 2025 GMT
Subject: CN=c03f43548ce6bc9197c919cd697e8873aabcb47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:fa:17:c4:67:c5:20:0c:4e:09:e4:56:5d:
3b:5e:2b:0c:53:11:ff:e8:00:96:1f:31:d9:cf:c7:
f3:0a:27:83:71:4a:4e:be:3f:45:d8:f7:19:81:1f:
ad:a8:97:e7:dc:b1:6e:42:13:f9:2a:09:7a:cd:50:
81:c3:cd:17:67:3f:9e:5a:dd:3a:04:de:b8:42:20:
24:c0:a9:62:24:e8:5b:58:8f:d5:77:89:e7:f7:82:
e3:11:4a:1f:d7:0b:9a:52:ad:90:c1:9a:77:ed:9e:
ce:48:b4:0c:f6:7d:98:f4:99:a3:b1:bf:ba:ad:66:
6b:ba:d2:ea:7e:1c:70:fc:c1:db:b0:51:46:4e:a2:
3a:a1:28:61:92:c2:c9:1d:43:1e:f2:42:da:15:a3:
57:26:a8:29:a2:f1:74:a6:a2:5b:36:68:14:93:8a:
d6:d0:61:78:fe:25:22:dd:2e:d1:d4:53:92:9f:e9:
b1:dd:f8:7b:1c:38:25:0b:bd:9f:c8:10:8f:ca:69:
58:32:52:35:0f:58:b6:eb:f3:09:7d:5c:16:76:b8:
d6:88:11:a6:56:73:67:15:9c:8e:56:3e:32:c0:de:
89:91:26:2c:77:a8:c3:13:c0:f2:82:87:69:08:45:
48:ac:4e:a2:43:f1:4f:ce:fd:48:7c:e5:d2:03:e5:
7c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3F:43:54:8C:E6:BC:91:97:C9:19:CD:69:7E:88:73:AA:BC:B4:7C
X509v3 Authority Key Identifier:
keyid:BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ce:68:2b:b1:ae:51:c7:c0:07:6a:40:70:20:68:22:19:c7:
73:c5:d5:04:5e:46:2c:59:e3:a3:7b:aa:5a:dc:fb:f2:d5:cc:
d6:3f:1f:5a:12:37:33:70:e7:8a:d1:82:8c:a0:ef:ef:aa:19:
9c:bb:84:58:07:3e:9b:b9:31:60:86:96:6e:0b:66:b5:86:42:
8c:dc:1e:32:b2:d9:c4:3c:7b:f7:76:06:36:11:97:b8:3e:fd:
e7:8c:62:4d:83:0f:fd:de:4a:6f:f3:de:7e:bf:76:54:97:8c:
bd:61:44:2c:05:35:3e:9c:2a:1c:a8:59:00:14:6c:de:5f:26:
b5:58:20:3a:32:3c:af:69:c1:8c:55:f7:f3:e5:c5:35:c2:ce:
15:ff:bb:d1:13:b6:ed:a1:36:13:2c:25:a7:52:18:57:a6:eb:
bd:fe:39:2f:ed:99:57:1d:bb:a5:06:d5:ee:82:13:e1:cd:ed:
df:72:98:f0:91:78:3b:99:58:05:92:a5:62:8f:06:44:55:c7:
e4:5f:db:6f:da:3c:af:52:af:da:d7:ab:57:a5:83:10:ac:4f:
3c:08:1c:c6:7f:fe:28:c1:16:5b:81:e6:dd:47:b8:70:9e:f6:
02:b5:ba:cf:1c:48:7c:8c:1b:2a:8a:52:40:54:37:13:e4:87:
c5:62:fb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:12 2025 by rpki-client