Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
File: VZhirROQ5Nv4grUie8kzUPLYBxM.mft (raw, json)
Hash identifier: W7csziXU6MlRDL4qDpR3sy7T1HH3RLVj/keZdkcY540=
Subject key identifier: A1:F4:DA:6D:48:DB:F1:3B:39:98:3E:BE:F7:40:D5:3C:5F:60:4E:98
Authority key identifier: 55:98:62:AD:13:90:E4:DB:F8:82:B5:22:7B:C9:33:50:F2:D8:07:13
Certificate issuer: /CN=559862ad1390e4dbf882b5227bc93350f2d80713
Certificate serial: 0194C42C07594C811DFEDFA0B02C824C4B8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
Manifest number: 055D
Signing time: Sun 02 Feb 2025 01:00:07 +0000
Manifest this update: Sun 02 Feb 2025 01:00:07 +0000
Manifest next update: Mon 03 Feb 2025 01:00:07 +0000
Files and hashes: 1: VZhirROQ5Nv4grUie8kzUPLYBxM.crl (hash: a0iXLiT9u72eY4dEObNi4pFwPDROsYpiIhcoMMHYpaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:07:59:4c:81:1d:fe:df:a0:b0:2c:82:4c:4b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559862ad1390e4dbf882b5227bc93350f2d80713
Validity
Not Before: Feb 2 01:00:07 2025 GMT
Not After : Feb 3 01:00:07 2025 GMT
Subject: CN=a1f4da6d48dbf13b39983ebef740d53c5f604e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9d:5a:b4:0f:98:f0:d3:eb:a9:f6:fa:f0:2d:
03:fa:a6:d3:20:cc:5e:70:24:f6:d2:19:94:5c:8c:
47:80:3f:81:44:62:af:71:3b:77:9e:6a:79:dd:1d:
e5:13:ca:3b:fb:d3:2c:cc:f8:32:d0:ad:a1:b4:f1:
3e:c1:dd:2d:d0:47:31:fa:2d:0c:4e:67:1c:c4:59:
38:0c:28:28:c0:d6:91:34:9e:f7:22:b2:fb:6b:51:
3e:03:11:ce:95:66:4d:a6:a0:6d:2b:35:49:19:9e:
2d:8b:16:73:cb:01:56:7f:3c:3e:dc:8d:37:97:7c:
f1:b8:c3:7a:01:85:00:58:34:cf:b0:26:5d:e4:e8:
8f:06:87:e6:30:7f:65:83:67:ce:37:29:71:b4:92:
3e:90:c3:d1:2b:96:fc:0f:e6:a6:16:ca:ff:d8:d0:
56:53:55:91:b1:0c:80:53:7e:92:72:4c:ae:31:75:
74:4f:34:b1:03:b4:3f:0a:ec:ae:73:e3:ba:1e:60:
ff:52:50:5d:b6:3b:8c:f0:39:57:8b:a0:6e:2b:dc:
94:5c:fe:d4:b3:fa:f0:59:b7:db:4f:fd:c5:f0:94:
d3:0a:3e:18:b9:cb:27:4a:55:f8:db:6b:bf:e6:ff:
5d:f9:dd:6c:97:a9:1f:2a:ba:15:4f:6b:d2:2b:0a:
58:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F4:DA:6D:48:DB:F1:3B:39:98:3E:BE:F7:40:D5:3C:5F:60:4E:98
X509v3 Authority Key Identifier:
keyid:55:98:62:AD:13:90:E4:DB:F8:82:B5:22:7B:C9:33:50:F2:D8:07:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:9b:d6:f1:56:5d:8b:33:db:18:0d:f9:6a:d8:6c:49:21:60:
27:66:ce:f0:c8:b5:b1:a8:2f:75:d4:d7:c6:c5:c8:0b:d6:9a:
ae:f3:03:df:e2:12:db:9c:24:95:3f:de:dc:d0:e0:58:32:0c:
b0:d8:73:dc:83:63:f6:2b:64:3b:f0:9f:4e:e7:64:fd:a3:c6:
fc:04:17:b7:ce:1e:28:46:cf:81:2a:82:a8:e6:1d:52:7b:1a:
d2:07:27:48:27:8e:54:b8:12:48:f9:33:cd:5c:5c:94:3e:7a:
7d:74:4d:d4:e6:8c:85:76:45:f3:98:d4:c4:c7:dc:ed:86:b4:
9e:f2:f2:54:bb:7d:01:1b:40:80:62:b9:f0:c3:f8:ad:10:ba:
14:c0:be:f8:31:38:c5:09:4f:96:d0:10:fa:0d:59:0d:d4:85:
f5:89:95:4a:2d:79:df:fd:d0:19:a1:20:49:93:41:72:50:3b:
19:cf:30:73:c9:a5:79:9d:2c:d6:0f:78:ba:56:b9:a9:bf:7d:
4a:33:58:bf:de:be:df:79:7f:c9:15:3f:d1:86:df:a9:a0:f3:
95:fc:07:a9:59:0a:a4:be:d8:f8:6d:f1:cd:39:03:b1:f4:13:
c7:9c:23:e4:dd:0c:a0:7e:92:fc:ca:70:a8:15:74:3e:5c:e5:
8f:82:54:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:00:25 2025 by rpki-client