Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
File: vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft (raw, json)
Hash identifier: PBGHcZ0c1Ws+jDHZNtEPCRasaKCW10xlyHiBbEzZasQ=
Subject key identifier: E5:40:79:96:03:49:2B:4F:92:DF:9B:81:03:60:9C:A1:78:F0:31:26
Authority key identifier: BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0
Certificate issuer: /CN=bc5380d742bef2423fcfd6d303d73a67917aaec0
Certificate serial: 0194C42C5551BF260E89C9D8E4378B73D405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
Manifest number: 28
Signing time: Sun 02 Feb 2025 01:00:27 +0000
Manifest this update: Sun 02 Feb 2025 01:00:27 +0000
Manifest next update: Mon 03 Feb 2025 01:00:27 +0000
Files and hashes: 1: 0o1bM1bnalnsnCEwY7EHqA2DYwI.roa (hash: a6Jlm8q4bTHKkL4jo13ydzErm8S6w7SEyDYkJ1x4MuQ=)
2: vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl (hash: 5Nw9IpHl1IYuSDQlWbWN3c3aWIBODme7SXK02l4ZIIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:55:51:bf:26:0e:89:c9:d8:e4:37:8b:73:d4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc5380d742bef2423fcfd6d303d73a67917aaec0
Validity
Not Before: Feb 2 01:00:27 2025 GMT
Not After : Feb 3 01:00:27 2025 GMT
Subject: CN=e540799603492b4f92df9b8103609ca178f03126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6d:f2:c4:22:4f:0b:83:93:7b:1e:5b:99:13:
93:75:37:af:20:b9:fe:27:3e:78:d2:47:d2:fb:7f:
b7:2b:99:1c:f1:a0:bf:77:29:21:da:e8:1e:c8:1a:
4f:93:e0:86:09:1b:1b:0e:05:ce:f4:64:87:7f:1e:
78:a2:1b:8f:96:3c:c2:b2:a6:90:5b:6f:33:8e:eb:
4d:cd:bb:da:cf:61:98:82:17:90:c3:ad:01:f1:90:
8b:56:ef:dc:f2:ad:cb:eb:ab:68:89:41:96:c9:8a:
30:0e:9e:12:0a:43:27:2b:04:67:1e:ba:40:f4:9c:
7d:13:b1:cd:c7:d5:0a:a5:f0:26:0e:bf:39:ea:bb:
ba:fd:d9:58:a9:ce:ee:6c:29:db:bc:fe:0c:92:39:
e7:bd:2e:2e:65:be:a2:9e:2d:a3:33:ed:e4:04:72:
db:5a:a6:15:38:a1:03:e6:3a:9e:cc:50:55:90:c6:
85:79:ff:4a:2c:1d:e3:71:9d:b6:77:34:50:b6:96:
57:65:82:26:4f:fd:34:b4:14:73:52:07:c8:61:1a:
aa:21:98:ca:d3:6f:bd:e8:31:a9:e0:e9:c6:25:6a:
f2:9d:e0:9f:81:ff:2b:b4:09:19:e7:52:95:56:69:
89:9c:73:1e:19:b7:0a:68:10:1c:6f:34:1c:e6:0c:
7c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:40:79:96:03:49:2B:4F:92:DF:9B:81:03:60:9C:A1:78:F0:31:26
X509v3 Authority Key Identifier:
keyid:BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b3:b9:80:5b:6f:7b:ef:5a:18:52:f7:2d:4f:b4:7f:c4:38:
52:73:48:4a:52:b5:f8:33:f8:55:71:20:5f:30:54:24:b0:7b:
e1:74:96:6d:60:e4:7d:14:26:7e:9b:5f:e0:09:22:ad:0e:c3:
22:0f:90:8c:dd:be:84:72:ea:e4:de:dd:47:54:ea:d0:e3:30:
20:96:63:94:92:1c:b6:bf:88:86:17:df:e8:5c:b9:b9:e5:53:
d4:a7:4c:74:5b:90:01:38:27:e9:35:d5:9a:84:29:db:23:5f:
17:1e:51:58:af:3b:e5:74:17:a1:3b:d2:e6:d1:45:e6:66:77:
0e:9f:a2:59:15:0a:70:05:03:4d:be:1b:cb:b3:09:43:0d:e5:
de:6f:84:1d:96:72:5b:0f:03:c8:ae:b1:c7:74:b4:d4:69:5a:
ca:c0:29:1f:bf:7e:ae:a8:57:cb:b8:18:b2:49:74:88:32:ad:
dd:8b:69:ad:58:c7:2b:25:f3:e6:54:60:fe:fc:78:5c:b4:b5:
bc:d6:b6:49:e2:f4:11:59:71:0f:30:b9:f0:e2:da:2c:02:04:
11:8f:d9:17:ff:fc:32:67:cf:e6:4a:a0:ba:28:5c:20:b9:bf:
41:aa:7a:2a:24:ec:e3:be:08:a2:66:ea:55:aa:71:ac:be:21:
7c:78:4a:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTELFVRvyYOicnY5DeLc9QFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNTM4MGQ3NDJiZWYyNDIzZmNmZDZkMzAzZDczYTY3OTE3
YWFlYzAwHhcNMjUwMjAyMDEwMDI3WhcNMjUwMjAzMDEwMDI3WjAzMTEwLwYDVQQD
EyhlNTQwNzk5NjAzNDkyYjRmOTJkZjliODEwMzYwOWNhMTc4ZjAzMTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG3yxCJPC4OTex5bmROTdTevILn+
Jz540kfS+3+3K5kc8aC/dykh2ugeyBpPk+CGCRsbDgXO9GSHfx54ohuPljzCsqaQ
W28zjutNzbvaz2GYgheQw60B8ZCLVu/c8q3L66toiUGWyYowDp4SCkMnKwRnHrpA
9Jx9E7HNx9UKpfAmDr856ru6/dlYqc7ubCnbvP4MkjnnvS4uZb6ini2jM+3kBHLb
WqYVOKED5jqezFBVkMaFef9KLB3jcZ22dzRQtpZXZYImT/00tBRzUgfIYRqqIZjK
02+96DGp4OnGJWryneCfgf8rtAkZ51KVVmmJnHMeGbcKaBAcbzQc5gx8vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVAeZYDSStPkt+bgQNgnKF48DEmMB8GA1UdIwQY
MBaAFLxTgNdCvvJCP8/W0wPXOmeReq7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkZPQTEwSy04a0lfejliVEE5YzZaNUY2cnNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy82ODZkZTYtYjEzYy00ZGFjLWFhYWUt
ZDhmZTJjMDg1ODEwLzEvdkZPQTEwSy04a0lfejliVEE5YzZaNUY2cnNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy82ODZkZTYtYjEzYy00ZGFjLWFhYWUtZDhmZTJjMDg1ODEw
LzEvdkZPQTEwSy04a0lfejliVEE5YzZaNUY2cnNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqbO5gFtv
e+9aGFL3LU+0f8Q4UnNISlK1+DP4VXEgXzBUJLB74XSWbWDkfRQmfptf4AkirQ7D
Ig+QjN2+hHLq5N7dR1Tq0OMwIJZjlJIctr+Ihhff6Fy5ueVT1KdMdFuQATgn6TXV
moQp2yNfFx5RWK875XQXoTvS5tFF5mZ3Dp+iWRUKcAUDTb4by7MJQw3l3m+EHZZy
Ww8DyK6xx3S01GlaysApH79+rqhXy7gYskl0iDKt3YtprVjHKyXz5lRg/vx4XLS1
vNa2SeL0EVlxDzC58OLaLAIEEY/ZF//8MmfP5kqguihcILm/Qap6KiTs474Iombq
VapxrL4hfHhKLQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:03:28 2025 by rpki-client