Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
File: VAavgE71pjb0ZOcajUHo1AGn9pc.mft (raw, json)
Hash identifier: 06mEiQKkU4XUFXruHEnsfRp3DoqMDAesUNKLFhRHXbw=
Subject key identifier: B9:84:8D:2B:08:58:59:FF:FB:23:02:74:9F:43:B6:A2:75:C2:C5:F6
Authority key identifier: 54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
Certificate issuer: /CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Certificate serial: 0194BA8432987B68ABD91F3884A1F23A158B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 04:00:13 +0000
Manifest this update: Fri 31 Jan 2025 04:00:13 +0000
Manifest next update: Sat 01 Feb 2025 04:00:13 +0000
Files and hashes: 1: IxyW73OMckCNett38gRruShmhsE.roa (hash: kwXxrh4BlKqwqWrrFQAbZ+7ZY9nBQf7G/9/mLoszBNE=)
2: VAavgE71pjb0ZOcajUHo1AGn9pc.crl (hash: 2hOPjwLZNgu1foYSupFdVr51egKLpUSEJG0EgeSqJrM=)
3: _FNz_oG2zcFLeFpovQJ_R2vg-vc.roa (hash: SUqY4ZQvD6jvXvZ8JF1d/vGljIMHXNiGDX2pW4O5ywc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:32:98:7b:68:ab:d9:1f:38:84:a1:f2:3a:15:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Validity
Not Before: Jan 31 04:00:13 2025 GMT
Not After : Feb 1 04:00:13 2025 GMT
Subject: CN=b9848d2b085859fffb2302749f43b6a275c2c5f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6b:7b:be:a2:b5:66:93:19:c8:ad:98:f9:8c:
dc:7a:c3:5e:4b:b1:a3:5c:87:de:57:8a:a9:ae:8d:
69:40:e5:e1:f1:7c:c9:fe:de:65:ba:28:34:80:54:
81:ba:34:dc:8e:78:07:58:38:8f:18:be:99:e7:f2:
d2:8c:f3:f2:74:f1:6a:4b:2a:dc:56:f5:b0:d9:46:
c4:22:54:c4:5c:4c:50:c5:be:5d:57:2b:2b:f8:87:
a4:e3:f3:5a:bb:b2:8f:b9:6c:fc:96:cd:d9:38:3f:
08:0f:d4:9a:d3:5d:46:5f:f4:0b:0c:a3:3a:9f:89:
1b:78:87:f0:a2:65:41:60:66:c9:3f:11:b2:5c:99:
95:35:ff:d3:cb:fd:f0:7f:cf:9e:a0:d5:44:81:47:
dc:a0:93:37:3e:b2:7e:d5:2b:ca:fc:87:d9:00:50:
00:18:2a:c1:49:1e:8a:64:7a:07:23:1d:1e:79:9b:
48:ed:96:d2:00:8f:c7:a7:42:6d:db:8e:86:cd:be:
bf:7e:e4:19:98:90:b9:ed:8b:50:45:24:60:57:1a:
8e:e1:03:94:e6:59:3c:04:86:fe:42:05:34:1d:81:
d2:ef:7d:9a:ae:62:55:0c:23:36:35:c8:c7:58:3a:
45:21:7c:16:27:b1:0f:d6:19:1d:76:ab:34:85:2c:
83:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:84:8D:2B:08:58:59:FF:FB:23:02:74:9F:43:B6:A2:75:C2:C5:F6
X509v3 Authority Key Identifier:
keyid:54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:fa:86:f2:9a:76:b9:1b:b6:70:5c:52:84:1d:36:e6:7c:f1:
bb:d3:78:96:a2:44:53:00:95:1b:52:02:0a:ff:b4:17:29:44:
f8:4d:d2:d1:e4:00:f6:d7:0f:c4:83:91:6c:f8:4a:c6:c1:67:
7b:e5:17:e5:a2:7a:d6:1c:d1:7e:12:64:b4:f1:46:52:f4:53:
83:00:6b:f2:c7:32:75:39:fb:39:8f:7e:c9:eb:83:be:c7:e8:
0a:f7:68:71:88:2d:35:8b:18:98:8f:c7:e9:9c:12:98:9e:71:
e9:b8:6f:9f:66:f3:99:a5:dd:0f:5f:e3:f1:24:4f:6c:5d:a0:
35:42:71:ea:4a:8d:63:15:bf:24:5c:ab:2b:ca:28:91:1f:95:
aa:8b:82:fa:d8:ab:41:50:6f:9f:3f:26:62:15:07:f2:94:0b:
92:01:15:d4:e9:fe:08:34:fe:10:05:30:6f:47:22:41:55:23:
31:c3:6e:12:bd:a2:0c:94:a6:4f:0f:ad:27:72:a1:58:5d:2d:
dc:06:37:c7:c6:f2:b3:bd:8a:28:fc:ee:31:38:e8:cc:cb:a8:
0b:b6:53:fa:ee:dd:d4:17:28:22:2e:c3:2a:5d:c8:55:fb:40:
00:70:53:bb:c7:62:ce:45:68:01:2d:30:e3:f7:6a:e3:1b:9b:
49:b7:0e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:20 2025 by rpki-client on console-fra.rpki-client.org