Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
File: vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft (raw, json)
Hash identifier: Aa4RSLGwfYTtT2ySyFmAOnyzFp89FIndfNcA0/RbDRc=
Subject key identifier: 20:84:66:1E:C0:79:71:BD:CB:EE:AF:3A:DC:A8:10:3A:28:DD:7B:7A
Authority key identifier: BD:A3:D0:BB:42:2B:0B:CA:70:67:16:C2:0F:7A:D5:8D:D2:76:54:71
Certificate issuer: /CN=bda3d0bb422b0bca706716c20f7ad58dd2765471
Certificate serial: 0195116BC8B6ABDA3DC0E4954D67D2C2C5A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
Manifest number: 13AC
Signing time: Mon 17 Feb 2025 01:00:31 +0000
Manifest this update: Mon 17 Feb 2025 01:00:31 +0000
Manifest next update: Tue 18 Feb 2025 01:00:31 +0000
Files and hashes: 1: 2NhKjFbuAMp_doRz4AUPYRbSyEU.roa (hash: IgIsz5WqF9AXjPzeVD1tKo5xC9L3dTvcfnef5uQtbKI=)
2: vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl (hash: N9+Avc4xvsZ9JxVfZAjJsjcde2kDlOELRzt0x97RUWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:c8:b6:ab:da:3d:c0:e4:95:4d:67:d2:c2:c5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda3d0bb422b0bca706716c20f7ad58dd2765471
Validity
Not Before: Feb 17 01:00:31 2025 GMT
Not After : Feb 18 01:00:31 2025 GMT
Subject: CN=2084661ec07971bdcbeeaf3adca8103a28dd7b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:03:ac:c8:4c:27:a6:4d:12:2d:11:3d:40:
62:dd:a8:7e:65:0d:c8:b4:9f:4a:33:28:e8:7b:ed:
d0:dc:85:69:02:6d:14:96:61:7e:4d:8d:16:a6:3b:
ac:bf:77:e3:95:ab:cb:2a:48:c8:94:3b:bc:5a:fa:
b4:c8:a8:2c:f4:6f:65:35:55:d2:17:50:b6:71:63:
8c:17:bb:87:45:3e:4c:1b:7e:f8:b7:26:10:1c:10:
03:a8:11:76:99:01:f3:2e:1b:d6:11:0b:f4:4b:c4:
14:94:28:b0:19:97:a8:98:68:e0:a6:19:ce:39:34:
fe:08:d6:25:de:4f:2f:f3:b5:c2:78:c2:c0:ed:8b:
ab:9a:78:02:81:7f:91:41:37:d4:59:a4:d6:e8:b3:
a2:30:45:f5:69:16:de:da:32:cd:96:43:20:1d:8c:
01:db:c6:bc:b7:32:13:0a:33:ca:01:51:0a:91:1a:
29:45:cb:37:14:f6:d9:f1:8c:b9:1d:26:4a:b6:d2:
aa:9b:27:77:37:38:b0:91:50:1b:be:81:15:98:a5:
95:22:70:94:ff:4c:59:5f:82:8f:bf:aa:a9:28:86:
5d:3f:a1:cc:1e:25:6f:5d:06:25:2e:77:fc:bb:98:
e0:57:f5:da:12:cb:77:ba:07:30:a4:a2:d2:dc:3d:
fe:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:84:66:1E:C0:79:71:BD:CB:EE:AF:3A:DC:A8:10:3A:28:DD:7B:7A
X509v3 Authority Key Identifier:
keyid:BD:A3:D0:BB:42:2B:0B:CA:70:67:16:C2:0F:7A:D5:8D:D2:76:54:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:a3:67:89:bc:45:34:4e:e2:bc:6e:a7:dd:a8:b7:a0:81:fb:
77:ed:39:de:f2:30:b9:a3:fc:66:7f:f7:d5:b0:66:6e:55:fd:
bf:73:86:2a:1b:1d:f7:9b:84:a0:d3:44:13:3c:39:4a:fa:5a:
78:8c:d6:ea:2e:10:0f:97:5f:03:20:5f:a5:86:98:c8:fe:e1:
fa:1e:3b:ec:bb:40:a3:fc:32:0d:80:b8:02:a9:64:54:72:a6:
ec:91:cc:db:46:d8:bd:ab:32:16:d3:35:d4:e7:cc:09:bb:1d:
fe:12:2a:d8:36:22:8d:32:1a:fa:cf:74:af:d8:4e:f4:1a:8d:
43:6c:b1:2a:7e:17:a0:7e:cb:c3:5a:eb:52:b5:08:b1:aa:4e:
46:c5:6b:d4:3f:76:02:48:f5:64:6f:f2:98:87:45:28:e2:3e:
ee:19:2a:19:87:10:bd:03:35:fa:93:3d:76:e5:8b:7c:1a:09:
f0:38:74:57:59:ed:1b:53:77:6e:25:38:cc:f2:c3:9b:07:81:
f9:61:3b:19:ee:ce:f9:ee:59:27:f3:26:75:fb:11:f2:5a:1f:
32:cd:ff:3c:f5:3b:b9:5e:c8:29:9a:7a:1f:de:2c:37:7b:30:
fe:cf:51:56:c3:54:e4:78:04:b5:58:cd:f4:1c:d2:d3:e1:47:
91:96:56:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:47 2025 by rpki-client