Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
File: VvAaHpnqXU85lNMzCdCUMS3IVCc.mft (raw, json)
Hash identifier: JqSZwqYiACqN8tCrPP+UR7KV5bwRv1pG0+GFu/lNzqg=
Subject key identifier: 45:9B:BD:5B:0E:1A:86:98:59:45:71:1D:F0:5A:6D:B4:E8:8C:F5:BA
Authority key identifier: 56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27
Certificate issuer: /CN=56f01a1e99ea5d4f3994d33309d094312dc85427
Certificate serial: 019511D95049ADFAB1906130D2EBDC3800ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
Manifest number: E9
Signing time: Mon 17 Feb 2025 03:00:09 +0000
Manifest this update: Mon 17 Feb 2025 03:00:09 +0000
Manifest next update: Tue 18 Feb 2025 03:00:09 +0000
Files and hashes: 1: VvAaHpnqXU85lNMzCdCUMS3IVCc.crl (hash: QhNmG9NT340+nhzHHbtNPjkdjZWFfukQwaDcyU3SJp0=)
2: v_KzQYlvsCBO_i8yYO8HLxZWeDc.roa (hash: +uoQdMzOaHRMGuVFuouzf8EBLpuGaYxtN4+0W2dukzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:50:49:ad:fa:b1:90:61:30:d2:eb:dc:38:00:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56f01a1e99ea5d4f3994d33309d094312dc85427
Validity
Not Before: Feb 17 03:00:09 2025 GMT
Not After : Feb 18 03:00:09 2025 GMT
Subject: CN=459bbd5b0e1a86985945711df05a6db4e88cf5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:90:ad:1f:5e:d1:87:36:30:89:c6:40:98:99:
24:34:6a:f7:70:88:d8:fa:7a:20:4c:6d:c0:28:02:
cc:bd:aa:8e:5e:44:8d:17:05:47:fe:da:c7:21:01:
68:3e:df:ec:ec:f8:c8:57:91:09:fd:72:f9:85:6c:
57:90:32:79:65:91:d6:05:b5:69:2a:0e:5c:2b:53:
4c:62:93:8a:de:3e:e0:af:eb:a5:6f:b2:4b:50:e2:
34:c0:8e:00:7a:53:f2:a2:bc:77:98:a1:63:96:70:
9a:73:ee:0c:33:16:5a:a4:3e:0d:52:1b:e8:75:49:
51:d9:fc:79:6c:70:4e:70:62:e3:3c:e6:6f:05:3e:
dd:d9:1c:4e:5c:47:40:ff:b0:5e:14:b1:a9:a1:b7:
9f:9b:b3:ce:8f:4c:d2:c5:9d:55:d2:87:7c:1e:ae:
7f:c3:87:75:9e:88:17:a0:19:49:66:95:49:14:0e:
27:22:21:d1:6b:68:89:c1:81:b9:6f:d2:ea:e9:b6:
15:52:62:b8:ff:86:4e:1e:84:4f:ae:c1:67:41:2e:
d4:fd:0e:42:ce:29:0f:1a:d1:9c:a4:4b:b4:d7:cf:
7d:a9:fc:d6:e8:6f:46:0c:52:53:03:07:42:84:f2:
69:19:37:ed:9b:56:15:10:5e:a9:36:17:a3:ae:77:
53:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9B:BD:5B:0E:1A:86:98:59:45:71:1D:F0:5A:6D:B4:E8:8C:F5:BA
X509v3 Authority Key Identifier:
keyid:56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:da:22:09:a0:c3:bd:51:6a:f8:0a:78:fe:c9:a3:8c:95:82:
a9:67:b9:5a:c1:7f:79:93:d2:1f:22:98:2e:6f:0e:ca:1c:e3:
9b:ad:54:2b:05:95:d2:c8:ef:cf:f6:77:49:c3:79:d5:81:d6:
23:f7:45:3b:5a:dc:fd:6f:04:12:05:3c:ee:f0:c3:c1:f9:a5:
c5:d3:7b:c0:32:a8:33:88:6f:70:54:ed:ff:b0:a8:4a:88:cc:
3c:00:61:f3:b8:dc:29:77:03:dd:e3:a5:1c:eb:db:d0:a0:f8:
0d:aa:20:ef:ae:de:00:99:d5:0a:4d:23:ea:94:51:9e:13:3c:
30:e4:67:3a:74:ca:ea:af:9a:e7:ed:0c:ad:57:5b:8f:c5:fd:
67:c2:dd:a4:a4:2e:97:bb:3a:c5:3b:3c:16:ba:01:71:c1:64:
19:b1:32:02:ab:ae:5e:dd:40:0d:f4:e1:31:10:ff:74:85:c1:
0a:ea:b0:07:aa:0d:b8:35:40:40:52:ce:da:f1:ba:71:5a:e8:
bb:0e:02:db:e5:91:b6:88:89:1e:0c:d6:32:3d:53:b6:93:f8:
d5:12:7f:2c:34:ff:fe:83:82:4f:4b:35:1b:16:e8:ec:29:9b:
9c:02:ab:76:34:01:76:16:20:0f:11:b8:24:1f:30:37:d0:e0:
cf:10:8d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:26 2025 by rpki-client