Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
File: Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft (raw, json)
Hash identifier: QaQPvl9XGJi61fB8lBoZdeP2WanYnlj1naAYbCpwbps=
Subject key identifier: B0:A9:AB:EB:98:A6:58:AB:57:12:66:FD:77:09:19:D1:BA:CF:AA:B6
Authority key identifier: 55:C9:A1:83:EE:3F:C0:A3:57:6C:1F:0C:A3:CC:99:77:30:9E:45:83
Certificate issuer: /CN=55c9a183ee3fc0a3576c1f0ca3cc9977309e4583
Certificate serial: 0194C42C3391245A4330CD740F629B9C3570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
Manifest number: 0797
Signing time: Sun 02 Feb 2025 01:00:18 +0000
Manifest this update: Sun 02 Feb 2025 01:00:18 +0000
Manifest next update: Mon 03 Feb 2025 01:00:18 +0000
Files and hashes: 1: Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl (hash: Z+wZlmsDuGGsUFlFORNoWPYCQiII+TNU3nhikxBMe0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:33:91:24:5a:43:30:cd:74:0f:62:9b:9c:35:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9a183ee3fc0a3576c1f0ca3cc9977309e4583
Validity
Not Before: Feb 2 01:00:18 2025 GMT
Not After : Feb 3 01:00:18 2025 GMT
Subject: CN=b0a9abeb98a658ab571266fd770919d1bacfaab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:45:56:69:7c:5e:7b:e0:28:86:6f:b0:60:
28:1c:cd:27:f7:67:f5:23:bb:22:c5:6e:0c:7f:3b:
85:d4:ef:33:98:2e:4f:a8:97:e4:75:cd:11:9e:2a:
e0:68:84:ce:1b:52:ec:b4:1d:3f:52:0c:9b:dc:32:
85:43:0d:3e:62:d3:57:fd:4b:0b:38:69:71:f3:29:
13:a4:40:79:fe:d3:7b:33:8d:a5:05:84:40:85:01:
36:6f:25:20:6a:bc:d9:4c:48:1b:5b:f3:df:60:71:
ce:de:32:f8:d7:10:81:92:66:f7:33:78:9a:18:cb:
69:1c:c1:67:c0:83:a8:d1:1f:6f:a0:84:f5:29:1c:
43:29:d6:fd:a6:4c:f5:23:6f:1a:b4:91:08:ff:7f:
0b:7e:f7:9f:22:1a:09:14:b1:99:90:14:61:ed:d4:
d7:8b:60:54:d4:5c:7f:03:8e:32:cb:3c:9c:a9:02:
89:6e:16:47:b6:2e:c6:88:ef:09:33:08:cc:1e:19:
74:1f:46:fa:0e:62:ab:ef:c7:21:4a:49:c1:4c:6e:
a2:6a:75:98:77:b0:17:00:85:64:24:5b:0b:67:2f:
b9:74:3f:37:dc:a9:ae:5c:c6:fd:62:35:74:b4:47:
2a:78:a7:2a:26:f7:4a:ec:86:bc:11:f6:c9:0d:bf:
18:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A9:AB:EB:98:A6:58:AB:57:12:66:FD:77:09:19:D1:BA:CF:AA:B6
X509v3 Authority Key Identifier:
keyid:55:C9:A1:83:EE:3F:C0:A3:57:6C:1F:0C:A3:CC:99:77:30:9E:45:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4c:e2:d3:78:ae:ad:36:18:2c:73:ec:38:df:63:8d:9f:4e:
36:f6:91:59:7a:63:e4:29:21:06:76:a7:22:53:0b:62:12:9c:
ba:40:19:f2:b1:27:53:2e:5c:9d:86:32:48:f5:46:a7:27:d0:
c6:2d:4d:bd:bb:51:76:78:2a:c6:d6:92:2c:64:55:5d:d3:1f:
64:de:f6:ad:f6:ee:4a:d5:78:7a:46:4b:6d:01:65:b8:b8:72:
64:5e:76:99:0b:a6:fb:d4:c3:44:61:8d:25:20:1b:6f:a9:86:
86:5b:4e:a5:5e:3b:55:5e:63:30:6c:e5:e8:10:6c:12:6f:06:
33:77:83:c5:13:a7:59:36:a2:6d:ea:f2:a4:5d:ec:ad:d6:82:
51:ef:8c:19:d1:60:b6:d1:10:36:2c:10:86:79:96:c6:b4:0d:
41:c8:14:cb:e3:e8:ae:aa:05:e3:3f:68:78:47:8a:a6:e3:5d:
63:bc:10:9e:a2:54:ef:32:99:a5:06:59:22:1d:fb:58:1d:17:
9d:43:a1:11:2a:22:e8:51:69:fb:02:63:f0:dd:72:e2:4e:76:
16:35:d6:51:67:f3:1d:ef:e7:5a:c2:c2:80:97:0f:e1:70:cf:
ce:1c:d1:59:e9:cb:a6:de:52:23:06:fa:ba:40:ce:50:47:3d:
57:70:73:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:52:44 2025 by rpki-client