Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
File: vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft (raw, json)
Hash identifier: sgYDXpM2ULvKVPrV5Yf1CXZQB7XCuQsNm8ndYF8qFY0=
Subject key identifier: F5:15:ED:EA:20:EA:B3:FA:72:1E:71:8A:52:F5:96:F1:36:45:DB:37
Authority key identifier: BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94
Certificate issuer: /CN=beb3e44095f38ca388836bf665b6f9f098dc5794
Certificate serial: 0194C3882F52EB577254E56D8F3EDFBADED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
Manifest number: 10FE
Signing time: Sat 01 Feb 2025 22:01:09 +0000
Manifest this update: Sat 01 Feb 2025 22:01:09 +0000
Manifest next update: Sun 02 Feb 2025 22:01:09 +0000
Files and hashes: 1: vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl (hash: lN8lL1GJFn4uXhLrhoDSTYUB+bnxXG27j4GK8cFWfsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:2f:52:eb:57:72:54:e5:6d:8f:3e:df:ba:de:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb3e44095f38ca388836bf665b6f9f098dc5794
Validity
Not Before: Feb 1 22:01:09 2025 GMT
Not After : Feb 2 22:01:09 2025 GMT
Subject: CN=f515edea20eab3fa721e718a52f596f13645db37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a6:a7:6e:fc:72:dc:85:ab:30:58:50:27:e5:
7d:24:f5:39:8c:25:7f:6a:f4:f6:d3:61:3e:7a:5f:
65:6a:9b:51:da:a5:1c:db:f8:aa:45:a1:61:66:85:
d0:68:d7:6f:16:09:5f:a0:72:ee:2b:fe:d6:81:48:
19:17:58:55:cf:d5:06:96:70:ea:f2:ff:f5:9c:f9:
12:37:1f:9c:17:da:36:81:66:43:fa:fc:0a:b7:df:
60:9a:f8:28:b4:27:fb:7e:3d:fa:06:6a:ef:56:0e:
30:45:e0:72:7a:0a:c0:e2:c5:29:c6:ac:7f:47:df:
30:27:d1:21:8c:15:ff:c6:38:6a:fd:ea:c4:e0:e7:
13:2e:32:1d:ed:65:e2:20:3d:16:57:45:64:cf:c0:
63:d6:86:7b:c5:1a:5c:5d:f3:dc:03:dd:5a:72:dd:
85:6a:15:67:c3:d2:ba:a8:7d:88:93:b3:3c:80:0c:
f0:de:a8:a0:87:76:fd:71:c4:27:f4:de:87:8b:e7:
b0:c6:b1:ad:82:dc:0d:83:3d:90:b3:8f:63:d0:ea:
32:34:e7:d2:ed:77:62:de:f0:11:63:75:5e:fa:45:
b6:b0:e4:95:e0:8d:42:2e:44:0b:39:13:4a:7a:de:
d5:e2:4c:36:c6:ed:6e:18:43:5e:bb:cf:3c:03:da:
c6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:15:ED:EA:20:EA:B3:FA:72:1E:71:8A:52:F5:96:F1:36:45:DB:37
X509v3 Authority Key Identifier:
keyid:BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:01:a4:16:62:81:c8:26:0b:f5:78:39:e3:88:b4:08:f6:89:
e6:d2:64:f1:e6:67:08:98:20:be:10:82:f2:e7:8b:b9:14:bd:
af:84:63:35:01:93:e4:9a:6a:27:87:c7:86:a7:48:4f:00:a4:
db:05:ba:da:1e:fb:68:a9:9b:25:f7:41:5e:f2:05:5d:4f:76:
ef:88:69:64:c6:03:ee:e0:27:24:0b:ca:e4:a4:61:3e:1d:b9:
65:81:50:26:8d:2e:10:48:86:d5:7e:13:44:75:dd:13:90:cd:
c1:f5:f9:2b:20:7d:c8:92:da:89:7f:d8:74:79:7e:85:31:bf:
ec:90:1f:e5:de:d9:da:23:4d:39:6b:39:09:b1:e6:eb:53:d4:
46:ef:b8:6a:8a:e8:ff:8f:c8:4e:f5:b5:f2:fe:ff:cb:f4:2e:
7c:e0:dd:6d:cc:c9:1e:d6:a6:36:04:93:d6:10:32:fe:92:f6:
db:f2:a0:65:89:69:1a:b5:36:c7:a1:aa:cc:b1:f2:75:c6:63:
0f:00:39:b2:9b:8a:c9:c7:ff:27:7a:ee:0e:23:42:9d:da:3d:
9c:8b:c1:8e:91:3a:2a:fe:dc:1f:3b:23:21:71:7a:6c:40:76:
a1:2c:4d:19:b8:d5:e9:4d:50:f5:0e:0f:29:70:35:68:5e:36:
1b:56:75:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:42:33 2025 by rpki-client