Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
File: Vf5QzPzvDofMGfgswJK7m3mj468.mft (raw, json)
Hash identifier: m4HeFCK1mxJ10O+InwjQh5+Wql7B6OMehCjqIp3emSg=
Subject key identifier: A0:88:32:D9:55:BB:1D:07:48:11:1B:05:6F:12:6B:DE:F3:5D:F8:92
Authority key identifier: 55:FE:50:CC:FC:EF:0E:87:CC:19:F8:2C:C0:92:BB:9B:79:A3:E3:AF
Certificate issuer: /CN=55fe50ccfcef0e87cc19f82cc092bb9b79a3e3af
Certificate serial: 019510FDF1CECB964DCA8E31829FA7FE67DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
Manifest number: 0246
Signing time: Sun 16 Feb 2025 23:00:32 +0000
Manifest this update: Sun 16 Feb 2025 23:00:32 +0000
Manifest next update: Mon 17 Feb 2025 23:00:32 +0000
Files and hashes: 1: FzOWVnk6UyMtU7jUCjfT7xK7jUs.roa (hash: AAnWtLc0XNLDmh8MKuv5G+x9dydvMeajmyOK9NO07jQ=)
2: Vf5QzPzvDofMGfgswJK7m3mj468.crl (hash: SuyKnRbmMPZfrVNQX0LMobDngfa6/7UJeN+qOazfuCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:f1:ce:cb:96:4d:ca:8e:31:82:9f:a7:fe:67:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55fe50ccfcef0e87cc19f82cc092bb9b79a3e3af
Validity
Not Before: Feb 16 23:00:32 2025 GMT
Not After : Feb 17 23:00:32 2025 GMT
Subject: CN=a08832d955bb1d0748111b056f126bdef35df892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1e:84:c4:75:0f:13:bf:97:bc:96:6b:4c:51:
54:9d:be:ab:55:15:ab:11:6f:0b:4d:59:87:4e:4d:
51:87:eb:dc:f2:7d:03:83:8b:7a:ce:19:6e:f2:29:
75:73:f5:04:3a:69:fc:50:6f:37:f4:40:83:d8:f4:
71:ef:3d:2e:8b:1a:aa:18:e5:93:b1:0c:1a:d1:43:
d6:74:ab:e5:09:58:79:db:30:af:ad:52:85:ad:52:
cc:1d:5f:ff:22:1a:7d:ef:c1:7e:e1:d6:5d:51:d0:
10:c0:b4:eb:1d:ba:f7:7b:cb:99:d7:21:20:28:2d:
e6:59:bc:56:b3:5b:62:9f:a3:fe:68:59:a7:92:7f:
88:11:f9:c8:7e:4b:c6:d5:5e:0c:66:b1:fa:de:63:
c7:c9:82:6f:73:fc:28:37:cd:7e:2e:5a:60:3c:81:
e2:21:79:1c:12:52:66:5f:1b:65:36:9d:4d:96:41:
e6:b5:97:77:cf:75:36:1b:f2:a6:0a:b6:8c:54:bf:
9c:05:a8:5f:0f:aa:3f:b9:42:53:0f:d2:1b:a5:42:
dd:04:8e:a6:24:d2:67:ce:5f:03:28:cd:39:50:12:
af:be:75:d7:b1:02:ff:d4:1e:39:5e:62:24:ac:23:
50:9b:34:07:81:7a:88:73:3d:b7:1e:c9:0b:e8:8e:
a7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:88:32:D9:55:BB:1D:07:48:11:1B:05:6F:12:6B:DE:F3:5D:F8:92
X509v3 Authority Key Identifier:
keyid:55:FE:50:CC:FC:EF:0E:87:CC:19:F8:2C:C0:92:BB:9B:79:A3:E3:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:48:a2:5e:af:b4:36:6b:4a:ae:72:58:cd:70:49:42:36:7f:
fa:b1:ee:ba:2e:2e:2c:4a:b3:c3:c6:f8:c8:9c:f6:f8:6e:3f:
aa:35:6f:5a:31:79:ff:96:d7:be:d2:20:6e:52:d7:28:41:8f:
17:56:fb:3e:5f:92:8a:7f:75:1a:15:fa:a7:72:38:7a:b0:9f:
19:d7:95:73:c8:4f:e4:b3:f1:bd:34:e1:78:c3:0a:9b:2a:0b:
0a:a7:f8:db:b9:51:79:77:be:cc:a6:13:0a:05:5a:54:bc:56:
6c:f8:ac:28:e4:3c:97:96:35:93:e8:c9:b1:27:41:82:87:1b:
40:ab:6d:5f:29:48:c0:82:c7:8c:59:a8:3a:51:3d:47:93:4c:
e7:a5:53:8f:48:fd:7c:fd:20:b9:9d:79:d7:4a:ce:35:13:fa:
0c:47:c3:00:87:44:1a:d3:fa:56:07:f1:d3:4a:9a:30:fa:78:
35:75:ae:a9:8b:65:5b:08:cd:7f:92:e5:5b:43:ec:3e:ec:5b:
39:c4:7f:b4:3e:b6:bf:e8:c2:81:e8:d9:fa:97:ac:c3:73:2e:
de:0b:bf:79:3b:04:01:bb:27:38:9e:f0:f1:24:03:78:39:ec:
13:ee:1c:40:83:1a:2a:92:ea:6d:e1:f6:75:8e:c8:29:a7:7f:
24:84:fe:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:01 2025 by rpki-client