Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
File: VFjdpvrZNtqJUgABqigr-syLguM.mft (raw, json)
Hash identifier: /z4GrIuQWQNKsdnNj0TARy6PCYi5Zzmjt9WbWkRb1kg=
Subject key identifier: 58:81:94:D5:C3:45:9B:13:77:22:E0:AB:59:CF:57:2A:09:98:09:34
Authority key identifier: 54:58:DD:A6:FA:D9:36:DA:89:52:00:01:AA:28:2B:FA:CC:8B:82:E3
Certificate issuer: /CN=5458dda6fad936da89520001aa282bfacc8b82e3
Certificate serial: 0194C38873E19987BA26C3A59D5854472428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
Manifest number: 0F15
Signing time: Sat 01 Feb 2025 22:01:27 +0000
Manifest this update: Sat 01 Feb 2025 22:01:27 +0000
Manifest next update: Sun 02 Feb 2025 22:01:27 +0000
Files and hashes: 1: VFjdpvrZNtqJUgABqigr-syLguM.crl (hash: rseI1XcRYaYgedMbvbICQAGKdQwDfo5TjWJS9buKn54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:73:e1:99:87:ba:26:c3:a5:9d:58:54:47:24:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5458dda6fad936da89520001aa282bfacc8b82e3
Validity
Not Before: Feb 1 22:01:27 2025 GMT
Not After : Feb 2 22:01:27 2025 GMT
Subject: CN=588194d5c3459b137722e0ab59cf572a09980934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a6:d9:7f:03:f8:1b:f0:78:c9:0f:7c:1f:ba:
9c:58:d4:13:7d:ea:bf:6b:dd:9e:43:22:f0:fb:6b:
a9:9c:41:6a:b0:f5:41:f7:3c:1d:1e:6e:d8:e6:92:
8f:d7:f5:a9:98:1c:bf:cf:82:d0:d4:1f:89:41:4b:
95:70:7e:56:00:f7:ef:58:57:cf:de:b8:de:e1:52:
51:fd:c9:aa:cd:77:5b:21:32:87:56:62:df:f9:ce:
f3:b8:c8:40:f1:49:93:79:73:7d:54:f9:f8:7c:51:
c9:15:6e:b3:24:1b:20:c5:4f:94:ac:cb:99:9b:30:
d6:a8:1f:ee:92:08:8c:96:35:58:ca:81:38:68:02:
fb:b3:d3:2e:26:63:3b:10:43:29:14:18:dd:9b:e3:
b5:d5:2d:a5:67:82:83:83:fc:82:88:48:64:05:af:
3b:37:ed:cc:b0:87:af:42:b1:61:1a:c8:bf:15:3f:
83:60:13:a3:b5:d6:c9:c6:86:0b:13:0e:cd:c9:1e:
71:41:3d:74:43:e3:e1:12:67:37:ea:6c:61:7e:cf:
8a:d0:05:7a:0f:a1:2a:5b:c7:e2:7c:67:70:67:0e:
f9:9d:be:0d:48:7b:e4:5a:e1:40:07:4e:34:a1:96:
75:f6:68:3e:42:33:23:e1:4a:16:ed:1f:68:25:fd:
16:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:81:94:D5:C3:45:9B:13:77:22:E0:AB:59:CF:57:2A:09:98:09:34
X509v3 Authority Key Identifier:
keyid:54:58:DD:A6:FA:D9:36:DA:89:52:00:01:AA:28:2B:FA:CC:8B:82:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:8d:c6:9e:b3:19:21:cd:fc:c7:17:9e:b2:11:e9:bc:89:08:
70:6f:1d:42:3b:b6:35:cd:b4:7b:04:a6:b4:26:96:95:de:4c:
30:1b:9c:fd:d6:ee:59:8a:b4:5a:11:13:1e:dd:96:f5:2b:af:
19:b0:2d:77:6c:88:17:b7:98:2a:97:9c:09:cd:73:d4:07:e8:
88:d5:71:e7:ad:4a:ca:fa:b1:05:2d:25:c8:2b:75:60:1a:e2:
ac:58:4d:89:94:7d:f2:99:98:56:3c:8b:c9:85:09:a8:86:0c:
89:71:5f:b8:3b:91:d9:b2:3a:4b:28:18:19:9b:69:40:05:b5:
9c:30:18:45:3b:56:0a:49:35:61:cf:a6:e0:a9:17:75:a2:7b:
11:61:36:5c:82:ea:5b:2a:96:3e:03:64:cd:d9:51:c6:df:4b:
2c:cd:c7:1d:10:a1:6e:ec:c2:a2:d0:54:bd:a9:7a:95:fc:03:
e1:50:40:27:27:6b:3e:0f:fa:5f:f7:c8:9d:95:89:f5:de:e2:
07:c5:b9:e2:e7:ce:d0:68:47:72:61:ac:5a:13:54:0b:e9:0a:
35:7d:87:fe:1b:56:08:e3:ad:f5:e4:eb:be:3c:12:3c:1d:21:
ce:ce:70:85:00:7c:e9:88:a1:f2:b5:9d:3b:d8:9e:a2:8a:b5:
1e:64:33:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:53:25 2025 by rpki-client