Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
File: VChf_ulzEsUcOoBf-TQOvsM1JyA.mft (raw, json)
Hash identifier: evyrq3z5Ksp5Qa3x/zs+p6l4P5BoPgE8vPuET9U0uM4=
Subject key identifier: DB:14:84:E5:B0:7C:6D:3C:02:60:1D:33:38:A2:92:EA:2B:46:3D:6D
Authority key identifier: 54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
Certificate issuer: /CN=54285ffee97312c51c3a805ff9340ebec3352720
Certificate serial: 019512474D85D0BDA6CA504C39C6B33D8819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 05:00:17 +0000
Manifest this update: Mon 17 Feb 2025 05:00:17 +0000
Manifest next update: Tue 18 Feb 2025 05:00:17 +0000
Files and hashes: 1: Ca-8iz_zQCrKysmx5A1KTglY5iE.roa (hash: QQcsgeeci4CpJE1THj53EE0/b4qFL4RDwyCbpu7M9gI=)
2: VChf_ulzEsUcOoBf-TQOvsM1JyA.crl (hash: LobMHG0blOPl7Ek2sXyk85egQ8QtjiUhptYJdK+QVNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:4d:85:d0:bd:a6:ca:50:4c:39:c6:b3:3d:88:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54285ffee97312c51c3a805ff9340ebec3352720
Validity
Not Before: Feb 17 05:00:17 2025 GMT
Not After : Feb 18 05:00:17 2025 GMT
Subject: CN=db1484e5b07c6d3c02601d3338a292ea2b463d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d5:0b:23:05:0f:b7:49:88:bf:60:24:88:9e:
18:48:ce:4b:af:22:6f:fc:47:ab:eb:3f:28:6f:f1:
97:5b:6e:3b:ee:00:a7:3a:3f:8b:03:66:6e:6e:34:
f2:77:63:fe:2f:00:dc:0b:89:0a:7c:78:d1:2f:14:
71:df:92:a8:84:e4:cf:8e:1b:5d:b4:5b:dd:de:68:
12:33:b9:c4:fe:16:d9:37:e5:a1:1a:d2:74:9d:28:
4a:f8:95:30:7a:ce:8c:1b:93:a0:05:8e:b9:b6:08:
73:dd:d0:b3:38:0e:98:40:0f:ab:63:88:90:d0:18:
b6:03:10:36:2b:75:6d:1b:07:f0:59:e1:9d:b0:41:
38:de:aa:e7:21:58:cf:69:ce:50:bf:70:19:47:2c:
a3:3d:49:1c:c4:1e:40:83:d8:0e:42:26:be:15:43:
a7:3f:63:6c:2c:2d:85:39:68:d3:16:ae:18:12:c0:
c5:f5:97:2c:5d:1d:cf:f2:11:01:b4:a0:92:77:2b:
2b:f5:32:cb:ea:63:42:9a:41:19:b4:a3:4d:67:8c:
87:32:84:00:75:5c:a7:e3:e6:11:92:ac:0e:a9:80:
28:21:c2:00:50:2d:71:3d:03:d6:41:07:10:3f:de:
16:80:ed:8a:a9:a8:31:90:31:13:a5:ee:e1:e5:00:
fe:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:14:84:E5:B0:7C:6D:3C:02:60:1D:33:38:A2:92:EA:2B:46:3D:6D
X509v3 Authority Key Identifier:
keyid:54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:38:ec:0d:73:d5:ff:90:55:34:1f:37:b9:75:c4:f4:c8:38:
70:dd:9a:66:f5:50:8e:d5:5f:76:c9:a6:ad:a3:b9:2d:4a:cc:
e9:d1:0b:fc:97:4c:d5:a8:43:6b:83:0f:1b:e1:a0:09:4c:c8:
00:27:20:bc:b1:b3:f4:d8:cb:a6:d2:f4:f0:99:84:a4:db:48:
03:31:a7:7b:63:1c:a0:2e:68:c2:80:b1:a4:d9:ad:24:41:14:
cf:4a:78:ca:b9:02:35:cf:b3:fb:4c:e7:0c:6b:0e:51:57:97:
82:0e:b0:c5:12:d9:14:f2:eb:77:2c:96:cd:83:0a:69:30:f0:
8c:ae:97:e5:5e:11:f9:ec:42:b4:d4:68:0f:83:e9:68:6f:c7:
6d:76:52:c6:c5:70:f2:e7:31:60:d6:0f:4e:4f:37:0d:10:2e:
eb:06:e8:6c:2c:90:cd:d5:df:5b:de:8b:36:2b:99:0d:21:e0:
5a:ff:94:ff:35:be:c1:81:6f:f1:24:5d:26:28:20:d9:92:6c:
3b:0e:dd:4c:2c:f0:ef:92:c6:85:b2:fe:bf:52:9f:7d:d1:d3:
62:c7:c4:17:da:90:c6:d6:4c:ce:2d:ca:19:72:46:46:98:93:
bc:d7:60:d5:65:6f:41:17:f5:91:c2:3e:fe:a3:0f:8e:8a:9c:
19:2a:11:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:15 2025 by rpki-client