Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
File: VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft (raw, json)
Hash identifier: yHYRbdeWOGkugoNWzxi3jwLeDw9LNxsqQQmmUxUVuZw=
Subject key identifier: CA:AF:AD:51:40:6C:51:74:32:C2:A1:D9:F2:F7:77:8D:7A:03:9B:54
Authority key identifier: 54:96:F2:E9:0D:B2:BD:35:D5:4C:6D:23:EE:D9:B0:F9:9F:96:63:A6
Certificate issuer: /CN=5496f2e90db2bd35d54c6d23eed9b0f99f9663a6
Certificate serial: 0194C3874104B95D6A588406EA4F36C45421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
Manifest number: 0BF5
Signing time: Sat 01 Feb 2025 22:00:08 +0000
Manifest this update: Sat 01 Feb 2025 22:00:08 +0000
Manifest next update: Sun 02 Feb 2025 22:00:08 +0000
Files and hashes: 1: VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl (hash: vul+fuvRqSi2JV9IuhLi/kwjmEBK5YqPgQcUw+MJfs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:41:04:b9:5d:6a:58:84:06:ea:4f:36:c4:54:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5496f2e90db2bd35d54c6d23eed9b0f99f9663a6
Validity
Not Before: Feb 1 22:00:08 2025 GMT
Not After : Feb 2 22:00:08 2025 GMT
Subject: CN=caafad51406c517432c2a1d9f2f7778d7a039b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:fd:23:93:cf:83:e1:a6:60:16:8c:b8:2d:77:
e6:88:d3:dc:50:64:c8:48:ee:f3:b9:af:13:70:3a:
ed:da:63:fc:8e:a7:ce:36:0a:c6:4a:7f:52:d3:e0:
ec:76:7e:f0:88:91:41:53:da:f3:2c:69:7d:11:a0:
00:64:f3:cb:c9:87:ca:d0:4b:1a:b6:48:c6:0b:3d:
9c:d6:ca:03:e7:f6:64:84:40:b4:61:59:c6:e3:5e:
26:a9:2a:a4:6e:33:1e:62:4e:95:28:6c:cf:3f:71:
e0:4c:24:08:57:7a:7d:41:a9:e7:bf:c4:3e:3f:3d:
f8:8d:06:34:51:47:4e:01:f6:f9:7e:bb:89:5a:f4:
2f:a6:f7:7e:ee:33:1b:7b:1d:b9:dc:b8:c9:82:ec:
93:dc:5f:f8:52:98:fa:5b:a5:95:65:5c:3e:4a:16:
a2:ea:83:1c:6c:05:5d:3e:4a:4f:77:3d:f8:d1:39:
c5:c7:97:83:e2:7a:15:6d:3b:18:c2:eb:9e:86:3e:
93:8a:4e:02:8b:0f:5d:38:ea:5c:07:bf:a6:7e:9c:
21:ea:9d:52:36:4b:bb:cd:58:ca:01:6a:dd:7c:ad:
65:37:63:3d:ca:26:fa:39:28:37:3c:5f:4a:2f:cf:
cc:e7:19:a1:e3:e0:a1:4f:cd:37:33:ad:fb:8e:60:
c5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AF:AD:51:40:6C:51:74:32:C2:A1:D9:F2:F7:77:8D:7A:03:9B:54
X509v3 Authority Key Identifier:
keyid:54:96:F2:E9:0D:B2:BD:35:D5:4C:6D:23:EE:D9:B0:F9:9F:96:63:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:82:c8:bb:37:3a:71:31:bd:29:f3:33:51:a3:b3:3c:47:b5:
c2:ff:b5:c7:ab:13:be:d3:ce:79:c6:20:f2:1e:51:8b:d5:ba:
ed:2b:7d:ea:f7:2a:7f:91:6d:08:2f:31:69:32:90:39:21:6a:
86:e5:1c:df:86:53:4e:5e:e2:95:5c:4f:6e:48:4a:f0:0e:56:
ea:5f:ba:6c:43:60:5d:70:ff:70:6b:44:1d:d4:0c:89:e2:42:
88:3f:ae:3c:db:33:49:22:2a:f3:01:c2:c1:f8:ce:f8:ee:28:
60:4e:3f:85:85:c2:56:23:bb:0d:88:e0:73:46:b4:64:b9:d2:
7d:11:94:4e:a5:e8:cc:11:de:6c:87:58:16:3a:53:cb:1e:eb:
97:72:bd:d9:5f:44:c6:e8:ea:8f:27:0f:09:e7:69:21:d1:8d:
1f:cf:1c:ed:9c:07:e2:ed:ca:a6:7f:08:75:b8:a5:d8:65:ad:
bb:18:23:3d:c4:96:e2:e0:b5:db:85:39:ae:f5:81:07:6e:78:
19:91:95:06:04:b6:69:19:20:65:22:2c:aa:b0:65:8f:5e:14:
62:14:3a:14:08:a8:f7:56:32:fb:aa:4b:62:7e:4b:ff:de:98:
7f:48:b8:ae:9a:92:09:0d:c8:cd:94:a0:77:cb:16:d6:0c:c7:
e1:ea:37:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:42:54 2025 by rpki-client