Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
File: VAxPdC_TKaNvzSnE65hOX0lRXZk.mft (raw, json)
Hash identifier: 09n9/uJk7QaCcD5pAaUAzYo6hLLjCJnOi8y/Crl5moI=
Subject key identifier: 87:B9:DD:CD:7C:4C:0E:7D:73:FA:8A:D2:40:48:86:B9:4D:22:90:48
Authority key identifier: 54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
Certificate issuer: /CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Certificate serial: 0195116C16B884F2FA05C026D3DA3EB89D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
Manifest number: 0E4A
Signing time: Mon 17 Feb 2025 01:00:51 +0000
Manifest this update: Mon 17 Feb 2025 01:00:51 +0000
Manifest next update: Tue 18 Feb 2025 01:00:51 +0000
Files and hashes: 1: 6hSnRR0poSKLkgYbDLBwSreCHXw.roa (hash: 2LSwLZwlqMozkmvNpXnEPuZJylqRvk5GNtgnCAWWf9Y=)
2: VAxPdC_TKaNvzSnE65hOX0lRXZk.crl (hash: dOvLgKCYVa0gn4MQ07YQyzCrTPB6gCYJ1al+UFjNh54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:16:b8:84:f2:fa:05:c0:26:d3:da:3e:b8:9d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Validity
Not Before: Feb 17 01:00:51 2025 GMT
Not After : Feb 18 01:00:51 2025 GMT
Subject: CN=87b9ddcd7c4c0e7d73fa8ad2404886b94d229048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:86:32:62:03:0a:ad:3a:b9:be:8a:47:76:78:
52:0c:f3:1c:a2:06:39:a5:e4:eb:27:58:f4:df:75:
77:ce:c5:6c:bb:46:bf:99:69:51:31:56:68:1d:a3:
cf:4c:ec:76:7b:74:49:09:1b:82:21:5e:7b:0e:fd:
30:86:53:b5:44:6c:d0:17:03:47:91:18:00:d4:48:
d1:2c:ea:e2:8e:3f:06:c5:95:5c:b2:77:a4:11:64:
ad:c1:91:6c:b5:fd:85:d1:25:0e:42:1a:aa:bd:de:
2f:8f:62:d7:91:a8:63:d2:9d:30:76:d5:0c:e2:8d:
ae:e1:b0:53:b2:66:74:9d:fd:32:b3:b6:b8:60:05:
d9:a3:63:8b:30:6d:99:4e:d8:95:0b:82:29:9d:d2:
66:2b:7a:1e:4c:eb:71:be:35:a8:dc:98:70:c3:fa:
01:ad:fb:40:4a:3b:db:e4:cb:63:42:88:3e:5b:4a:
9f:13:4a:3c:21:bb:ce:9e:3f:ce:e5:4b:d4:92:91:
02:92:de:11:75:99:aa:75:4c:5a:d6:65:37:d4:f4:
18:c2:ee:28:f7:46:40:c0:bf:23:41:1a:c9:a4:6f:
bc:14:36:b7:08:e1:57:92:ab:d1:31:2a:5c:7b:5c:
61:5f:55:2e:82:98:8e:81:95:e4:96:fa:d6:32:e5:
e1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B9:DD:CD:7C:4C:0E:7D:73:FA:8A:D2:40:48:86:B9:4D:22:90:48
X509v3 Authority Key Identifier:
keyid:54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:6b:08:59:74:6f:63:a0:c1:29:0a:6a:0b:cc:82:6f:cc:10:
35:36:1e:97:fe:d0:8e:d2:34:29:fa:a6:32:77:71:70:e0:0d:
ed:4d:db:80:06:2b:8e:72:e9:0e:36:50:04:24:a9:f1:e3:06:
6b:0e:8e:46:19:6a:07:f7:8b:1b:0e:dc:17:43:a6:a4:33:b2:
a0:e2:24:4c:c7:76:5b:42:d4:60:53:d8:5b:7b:e8:1f:05:a9:
19:4a:56:f5:2b:03:db:aa:05:71:75:2f:27:00:55:9b:be:8c:
60:17:ec:3e:80:c2:1e:83:5c:da:1e:e6:2d:3d:42:9e:1c:f1:
39:e0:90:5c:e5:e3:88:53:1f:fe:41:b1:dc:4f:01:57:96:72:
71:48:33:3f:87:98:7a:14:91:26:bb:b8:d1:29:f9:d3:31:37:
1f:b4:8d:de:1e:cc:d8:26:df:a6:3b:4d:5e:08:bb:c9:bf:fe:
02:34:36:14:52:42:ec:d0:ef:fa:92:30:98:e9:2a:fd:77:10:
cd:04:64:bb:37:aa:1b:df:69:33:98:29:81:06:7e:69:72:a1:
3b:fc:44:a9:3e:78:3c:99:9f:bb:a7:05:5b:5e:ad:e5:2f:14:
3b:be:b7:af:be:71:0f:a9:ec:12:07:94:8f:e5:9f:32:60:8b:
7f:e8:76:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:51 2025 by rpki-client