Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
File: VChf_ulzEsUcOoBf-TQOvsM1JyA.mft (raw, json)
Hash identifier: 1GUrRRypWJqjEp1JUXKrTEzOZxtUckR0Iu+pfDDx/os=
Subject key identifier: A0:0C:F0:4C:7F:37:AD:B7:02:63:FC:62:AE:B5:79:79:A2:11:8A:3F
Authority key identifier: 54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
Certificate issuer: /CN=54285ffee97312c51c3a805ff9340ebec3352720
Certificate serial: 01958BF2264D3123F315AE78EB542AA55732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
Manifest number: 1496
Signing time: Wed 12 Mar 2025 20:00:57 +0000
Manifest this update: Wed 12 Mar 2025 20:00:57 +0000
Manifest next update: Thu 13 Mar 2025 20:00:57 +0000
Files and hashes: 1: Ca-8iz_zQCrKysmx5A1KTglY5iE.roa (hash: QQcsgeeci4CpJE1THj53EE0/b4qFL4RDwyCbpu7M9gI=)
2: VChf_ulzEsUcOoBf-TQOvsM1JyA.crl (hash: O1HYmvcnoQTZ7cGlheq3X6DvmIaXpj+njjTvCTbJtKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:26:4d:31:23:f3:15:ae:78:eb:54:2a:a5:57:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54285ffee97312c51c3a805ff9340ebec3352720
Validity
Not Before: Mar 12 20:00:57 2025 GMT
Not After : Mar 13 20:00:57 2025 GMT
Subject: CN=a00cf04c7f37adb70263fc62aeb57979a2118a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1e:3d:4d:43:60:59:91:23:04:0f:5f:10:80:
fd:16:34:e6:6e:c5:4d:cb:d8:09:f4:15:e6:f0:6f:
b8:3a:88:c2:f2:6d:8a:25:2c:e5:33:b2:c5:ee:dd:
9c:a1:03:7a:54:46:04:b1:c2:76:c9:16:e0:b5:7d:
97:2d:4d:5b:1f:db:8e:f1:39:bb:d6:41:9b:5d:e8:
90:10:43:6d:b5:12:ca:d1:d0:4f:b7:77:af:c6:d4:
48:32:e1:65:51:ec:df:76:58:94:3e:4f:62:ca:3d:
18:95:f9:c4:41:cb:1a:37:f4:06:35:8d:de:f6:bd:
fd:44:8e:0d:4c:16:6c:5f:0e:dd:d3:8a:e5:68:03:
0f:d7:cd:70:50:e8:eb:3a:93:57:80:18:68:e9:8c:
b3:f1:8d:b5:23:17:2c:99:4c:45:83:c8:9c:c3:50:
35:e3:ae:6a:ce:cf:81:f2:3f:59:a7:f6:95:2f:2e:
4c:c4:fd:1f:69:89:4a:d4:34:19:79:e0:ea:2c:bb:
90:54:36:a6:28:93:3b:30:13:99:83:3d:7b:af:6f:
2d:5a:eb:94:20:bf:76:88:d2:2d:2b:b8:17:f6:29:
bd:06:62:ab:f8:b7:99:54:65:66:79:73:e3:52:fd:
0c:0e:cb:04:c9:ff:e1:f6:f7:65:c3:e3:b1:25:fb:
03:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0C:F0:4C:7F:37:AD:B7:02:63:FC:62:AE:B5:79:79:A2:11:8A:3F
X509v3 Authority Key Identifier:
keyid:54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d1:59:da:04:73:cb:72:d6:29:49:40:b2:95:9f:1d:66:92:
c1:36:85:e0:6a:77:a4:68:ed:7d:e1:37:f7:fe:fc:91:db:a3:
be:a3:0e:94:45:38:a4:c5:ef:d0:93:c7:2e:83:f6:d6:ce:32:
68:ae:22:5a:c0:aa:1a:26:06:ca:8f:b7:ae:cd:2e:53:d9:a7:
45:3c:14:d8:88:e0:32:0c:10:87:41:24:9a:bd:9b:a3:89:1d:
02:f3:dc:b9:22:a3:3e:f9:f7:e2:a8:f4:59:6d:62:d6:54:00:
54:f7:96:ab:f1:90:29:28:39:90:07:91:03:ce:fb:4d:3e:af:
a8:51:42:a2:14:9b:4d:d3:67:20:2e:99:f1:b8:cf:5a:e5:48:
c6:c0:8e:e8:64:5d:53:31:70:13:75:a0:32:e3:be:39:05:3a:
90:d5:1c:a3:da:2e:29:67:32:f2:c6:2a:10:1a:69:2a:a2:2a:
e2:c0:bf:ff:e4:91:d8:50:79:ca:82:16:ad:e1:4c:9a:6f:b7:
08:e9:17:27:57:ba:4c:4d:37:b6:b1:23:1b:92:c8:8b:20:11:
7e:a8:e4:c7:04:4f:c2:43:44:09:82:21:75:6d:0b:68:dc:21:
bc:03:ee:73:21:c4:8a:d1:3c:ba:a2:12:70:9c:e0:ec:f7:03:
99:4b:cf:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:18 2025 by rpki-client