Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
File: vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft (raw, json)
Hash identifier: B9XQlMYnfv/o0YhpTadozo/ZUTg7haYOS2OpaQg0bZA=
Subject key identifier: 84:C3:4F:3B:58:C2:7E:92:A9:C2:8F:7E:0A:69:FA:6A:F6:62:BF:EB
Authority key identifier: BC:D8:84:E1:54:C2:1C:9F:45:9F:42:A8:36:AB:CB:C8:AC:0F:41:5A
Certificate issuer: /CN=bcd884e154c21c9f459f42a836abcbc8ac0f415a
Certificate serial: 01951135402454090C38C67016AA7C75592A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
Manifest number: 0B3B
Signing time: Mon 17 Feb 2025 00:00:57 +0000
Manifest this update: Mon 17 Feb 2025 00:00:57 +0000
Manifest next update: Tue 18 Feb 2025 00:00:57 +0000
Files and hashes: 1: vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl (hash: kARjApaC3LEQZheAzy7Li+vKesd4P0nDT2e8myPmkPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:40:24:54:09:0c:38:c6:70:16:aa:7c:75:59:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd884e154c21c9f459f42a836abcbc8ac0f415a
Validity
Not Before: Feb 17 00:00:57 2025 GMT
Not After : Feb 18 00:00:57 2025 GMT
Subject: CN=84c34f3b58c27e92a9c28f7e0a69fa6af662bfeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:da:ed:c1:50:49:25:3d:b6:89:cd:7e:f4:
f0:58:a3:27:60:cf:4c:0c:9a:71:98:05:14:f0:35:
7c:fd:89:53:7a:8b:46:d6:db:e1:b8:4a:c8:c0:af:
d7:8f:f5:4f:2c:d0:41:f7:d8:00:38:33:1c:2e:06:
47:f7:02:7d:b8:9c:a9:1b:77:23:27:e8:16:53:7a:
28:ee:4d:13:35:f4:e9:01:b8:95:cb:5d:4a:ec:ee:
ca:b4:a2:77:b6:90:f7:5d:4b:0b:a8:45:49:93:22:
5c:58:f7:10:dd:82:67:c1:1c:de:09:c5:43:54:4f:
cd:e5:3e:b8:1d:c6:3f:9a:87:76:7c:6b:ec:1c:13:
58:47:d4:1a:11:94:9b:ef:42:89:a5:bb:12:f2:c4:
6b:37:86:b9:83:76:3e:50:f8:14:c7:50:3b:91:e9:
7a:dd:99:00:e1:58:60:da:c3:5f:73:4e:fc:5f:fa:
02:d7:d4:59:e7:18:f0:7a:a9:2c:ab:5f:0e:38:5f:
21:ba:5c:af:98:8c:73:5b:ae:cb:e2:25:c2:17:09:
c8:0e:2e:ff:55:d1:46:ae:03:7e:c3:c1:64:04:6c:
79:c5:3d:04:af:ef:34:d0:20:2e:8e:de:83:98:8b:
61:fd:ca:01:62:2b:de:9c:58:5f:43:51:a1:b1:65:
42:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C3:4F:3B:58:C2:7E:92:A9:C2:8F:7E:0A:69:FA:6A:F6:62:BF:EB
X509v3 Authority Key Identifier:
keyid:BC:D8:84:E1:54:C2:1C:9F:45:9F:42:A8:36:AB:CB:C8:AC:0F:41:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:53:8e:5a:2e:8f:33:80:3d:ae:17:82:2b:c9:b0:7c:94:8f:
fb:b2:61:d9:d4:fd:1f:1f:a7:15:89:e7:0f:3e:07:54:e7:4f:
f2:63:d0:10:2d:c3:07:33:2e:6d:27:57:f0:52:25:89:df:85:
d5:da:1b:c3:72:fe:c9:54:bb:5d:dd:b2:40:69:49:f3:ed:d0:
40:52:8f:f4:8f:b3:d8:99:99:cb:7c:f8:ad:fc:df:17:bd:de:
16:28:12:c1:68:fd:06:f8:6f:dc:d9:f1:c2:14:e0:66:74:de:
13:98:5f:48:03:03:e5:a7:38:ff:c1:a6:fe:7d:c5:8a:f1:91:
3b:f5:b7:f5:7e:1c:7c:85:e2:3d:43:b0:b3:b6:1d:ec:05:91:
64:69:c4:6a:a5:4d:01:23:80:8b:b4:ba:c6:06:cd:0c:a3:13:
9e:f6:8d:b6:11:37:55:bf:4b:ff:f4:35:a6:ec:b6:7a:64:e2:
0b:7f:9d:ae:09:e6:70:ff:e6:51:a8:23:06:19:d8:09:db:ad:
0e:d0:38:df:15:04:fe:9b:98:4c:87:30:86:f7:cf:ee:ac:1c:
cc:b4:f3:04:b4:75:08:dc:57:d7:3c:52:18:3d:94:a9:de:2b:
0a:64:a7:c1:c5:a5:87:6b:d7:bb:72:67:42:c9:c1:2e:c5:1e:
6a:99:2a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:32 2025 by rpki-client