Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
File: VZxkpqxMSXatNiFBKhN0WeZJq54.mft (raw, json)
Hash identifier: rVebaqM6U/RPyLyHVe4Pu3VcqkFPnKHOH+TkNLsg8Bo=
Subject key identifier: D2:E4:65:CD:45:49:67:4B:56:89:D8:8C:51:CB:65:52:69:FC:4B:BF
Authority key identifier: 55:9C:64:A6:AC:4C:49:76:AD:36:21:41:2A:13:74:59:E6:49:AB:9E
Certificate issuer: /CN=559c64a6ac4c4976ad3621412a137459e649ab9e
Certificate serial: 019511A2797B14F625B5CDA21E6CF8325299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
Manifest number: 0FEE
Signing time: Mon 17 Feb 2025 02:00:15 +0000
Manifest this update: Mon 17 Feb 2025 02:00:15 +0000
Manifest next update: Tue 18 Feb 2025 02:00:15 +0000
Files and hashes: 1: VS9hlIblCqjoV7wOGER9HcFzw5g.roa (hash: ldQ9iAybiLA+phWuzQvG2tTPk8+fTFZlm2NUmijp+Ac=)
2: VZxkpqxMSXatNiFBKhN0WeZJq54.crl (hash: aR+yuLNU4ojY3shKvxIOGdK+OtK7EH8Z6d1TupCMFrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:79:7b:14:f6:25:b5:cd:a2:1e:6c:f8:32:52:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559c64a6ac4c4976ad3621412a137459e649ab9e
Validity
Not Before: Feb 17 02:00:15 2025 GMT
Not After : Feb 18 02:00:15 2025 GMT
Subject: CN=d2e465cd4549674b5689d88c51cb655269fc4bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9c:09:99:cf:23:a4:55:5e:c0:f7:37:54:c5:
7c:c5:94:a2:30:a1:50:87:b8:77:47:ac:59:1d:84:
11:00:85:cd:6e:2b:68:37:c6:fc:a5:ea:b1:d8:f5:
57:16:2c:e9:2a:95:95:cd:c6:32:e1:10:a8:b1:01:
a9:cf:f5:27:2c:bc:07:77:ee:ab:26:06:ab:19:66:
e1:2e:1a:27:57:51:44:84:01:1f:1f:a2:49:b3:64:
c9:4d:bb:e8:55:02:60:9b:36:0c:00:a5:04:77:47:
50:4e:07:f6:53:bc:05:38:54:1b:2c:49:9d:85:07:
15:ea:35:cf:cf:58:dd:fb:84:a2:b4:10:21:b9:bf:
a0:c9:d7:47:95:46:67:ce:96:21:d3:4c:26:1f:97:
54:63:ee:fa:1d:93:65:4a:9d:2f:24:c2:ac:84:08:
3b:83:7d:76:43:03:e9:34:44:88:5e:3e:34:30:52:
76:e0:b1:37:0d:b1:4a:80:3f:24:70:ee:64:8e:01:
b1:ae:f7:97:e8:4b:73:d3:8c:5e:67:8f:1e:a7:cd:
a5:8c:62:8b:8c:8f:d2:3b:fb:06:45:0c:0e:1b:52:
b3:d5:71:72:a2:32:1c:18:07:06:e7:2c:2b:ca:7c:
04:98:48:57:f9:ca:d1:db:8f:a6:50:e8:70:08:22:
27:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E4:65:CD:45:49:67:4B:56:89:D8:8C:51:CB:65:52:69:FC:4B:BF
X509v3 Authority Key Identifier:
keyid:55:9C:64:A6:AC:4C:49:76:AD:36:21:41:2A:13:74:59:E6:49:AB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:4d:22:89:8b:68:50:ff:78:eb:69:57:b2:ab:0d:33:7b:63:
41:15:8d:56:3b:82:63:60:06:7b:dc:14:46:b2:bc:39:87:0a:
10:92:4e:dd:b1:b1:34:96:9d:3e:56:1c:0a:fe:76:7b:7d:67:
bc:42:c7:34:33:b0:db:b8:44:4c:34:08:8c:d2:5a:43:d5:c9:
63:18:e7:a7:4e:23:c5:77:b0:4d:bd:b1:f9:d4:7f:da:0e:c2:
d7:92:42:7c:cc:98:93:dd:46:5c:64:6b:71:cf:69:2d:1f:c8:
ea:bf:21:d1:6d:ca:89:a3:0d:62:03:87:0d:3b:89:54:dc:11:
30:fa:48:2d:16:d0:68:43:c7:8b:b6:b9:eb:16:d9:ee:00:ba:
65:4d:d5:51:06:65:a8:02:6a:09:a8:e8:49:08:51:61:10:d2:
9c:71:b3:5b:7d:fe:37:8c:6c:13:f2:41:96:7f:a9:89:6c:1e:
93:e1:98:2c:e4:53:5e:b7:0d:3d:f1:cb:80:28:73:cd:eb:a6:
9d:42:ce:79:2d:af:85:d9:5d:6f:58:d4:aa:b0:ae:a9:8e:03:
03:3f:27:59:c8:51:6e:8e:cb:b3:35:98:8d:68:ce:93:1e:4b:
47:96:e0:70:a4:2d:f0:b1:99:1a:16:9f:41:1f:b6:e5:97:48:
cf:c9:8f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:14 2025 by rpki-client