Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
File: Vr1_at_sbUTRbT4_eY4_K9INo_8.mft (raw, json)
Hash identifier: TQVHuXzr0HCpwKmdx7ERAgDJcJiSgeeEXOhHbUuRbuc=
Subject key identifier: 14:60:23:A2:08:6E:23:FF:CF:40:F9:6A:61:71:A1:B6:A0:69:4E:EC
Authority key identifier: 56:BD:7F:6A:DF:EC:6D:44:D1:6D:3E:3F:79:8E:3F:2B:D2:0D:A3:FF
Certificate issuer: /CN=56bd7f6adfec6d44d16d3e3f798e3f2bd20da3ff
Certificate serial: 019510FDB4DD003A9420D1968E9A5B571997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 23:00:17 +0000
Manifest this update: Sun 16 Feb 2025 23:00:17 +0000
Manifest next update: Mon 17 Feb 2025 23:00:17 +0000
Files and hashes: 1: 1-uUqLBRi2l8Qom0YXKGFyiE_52s.roa (hash: 6O0uoZsxwqn/ZRSGGUR/YkC5bDCXgCwLU9wV4dkd6Ng=)
2: Vr1_at_sbUTRbT4_eY4_K9INo_8.crl (hash: 1+XljlxhtIsTqN4F+yQ8Q4rCi/mGTb9TCSfCl9mfasw=)
3: Yhyd6_3--40XbUHLiYyj2qr-Yoc.roa (hash: 1oOXBnBBaEwXQlaBh7+MdVkKyYQvik1W61cIDXTDdBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:b4:dd:00:3a:94:20:d1:96:8e:9a:5b:57:19:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56bd7f6adfec6d44d16d3e3f798e3f2bd20da3ff
Validity
Not Before: Feb 16 23:00:17 2025 GMT
Not After : Feb 17 23:00:17 2025 GMT
Subject: CN=146023a2086e23ffcf40f96a6171a1b6a0694eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1a:cc:37:b8:31:95:3a:e8:df:c8:b5:3a:1a:
ed:eb:42:8b:27:34:d3:44:a3:4f:ef:e3:99:e7:4c:
fc:85:70:30:ab:aa:ac:df:ec:38:c7:9f:11:15:f2:
e6:14:7d:22:24:af:05:ba:78:cf:30:3b:aa:23:c9:
9e:f5:a1:07:83:24:94:39:00:de:b3:bd:35:8e:09:
2b:94:6e:37:b8:2b:ca:10:e3:9f:83:9f:1b:ef:21:
7a:e4:d8:f0:f5:07:7d:3f:b8:67:74:b2:2e:f7:82:
9a:b8:8d:65:67:27:ad:f7:4f:13:d3:41:f6:43:8e:
83:f1:08:15:c4:2a:76:d5:e1:05:cd:d6:bc:38:c9:
f2:4b:f5:7b:89:11:b9:fe:dc:81:0a:88:a2:f8:f0:
28:1b:38:95:2d:8f:f0:8f:59:e1:84:87:ee:f4:d8:
98:7b:7f:a9:a0:ee:ce:3f:93:e1:6f:e4:d7:d7:37:
32:1f:26:3e:9b:29:22:78:a7:b2:25:5e:88:ca:6b:
86:b8:c0:f7:f3:85:bd:58:8e:5e:71:ec:47:e6:6b:
e5:9b:28:f2:31:4a:ad:5c:6d:eb:4a:d2:2d:30:2d:
56:01:4d:10:10:7a:97:48:71:38:a6:80:67:68:f6:
02:26:f0:18:cd:03:ca:46:b8:29:ce:c4:fb:7e:47:
11:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:60:23:A2:08:6E:23:FF:CF:40:F9:6A:61:71:A1:B6:A0:69:4E:EC
X509v3 Authority Key Identifier:
keyid:56:BD:7F:6A:DF:EC:6D:44:D1:6D:3E:3F:79:8E:3F:2B:D2:0D:A3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:71:ef:ea:85:da:d9:22:9b:6d:16:05:d5:a5:55:7d:a7:83:
b0:86:f2:a8:e0:8a:42:5e:c1:39:91:23:cb:c2:7a:d8:1d:cc:
50:b2:57:99:85:c0:0b:b3:52:37:f8:c6:df:10:e1:e6:c5:cf:
d6:e2:dd:c4:85:72:5e:1a:f1:90:89:38:28:46:c0:af:86:e9:
b2:f8:4c:4d:44:3c:8b:07:ce:21:5d:0f:a6:98:13:78:26:ab:
89:dc:1c:e7:35:c1:f4:a9:4b:ca:ed:d3:41:72:e3:19:f5:b7:
91:c7:cf:d6:1a:61:eb:e0:d2:41:66:a1:ef:ae:e6:44:36:b3:
2e:24:a3:a4:a4:b1:42:3d:1e:e8:b8:3d:50:6e:71:a3:9d:29:
25:6c:27:08:b2:2e:b0:9e:9f:4e:e4:88:ae:56:37:de:dd:76:
03:5c:b6:30:bf:45:2d:9e:c2:33:3f:6a:c7:83:29:26:d6:de:
c7:6c:5d:d1:88:fd:e6:38:66:4c:7a:66:68:89:14:ec:99:49:
a6:95:05:47:f5:16:57:39:9a:aa:49:eb:ce:6a:3b:c9:ff:34:
ba:c5:7a:08:3d:b0:af:9f:e8:1d:6c:0d:95:da:6b:fb:3d:ff:
a4:d4:5f:32:58:d6:fb:0d:5c:24:da:09:f2:08:c8:af:66:71:
93:8f:dd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:48 2025 by rpki-client