Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
File: VSV3WnBqwAyC-ikzniLkMQgJnnk.mft (raw, json)
Hash identifier: SoZXtu/sr9w1gt1Ecg931EaRe9N9N5gaqfRjqwCiAmg=
Subject key identifier: B3:29:A1:09:E1:DF:17:D6:26:59:24:6B:FB:AE:E0:3F:32:4C:30:BE
Authority key identifier: 55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79
Certificate issuer: /CN=5525775a706ac00c82fa29339e22e43108099e79
Certificate serial: 019511348FE5B800F83F35042C18B47A1FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
Manifest number: 0F2C
Signing time: Mon 17 Feb 2025 00:00:11 +0000
Manifest this update: Mon 17 Feb 2025 00:00:11 +0000
Manifest next update: Tue 18 Feb 2025 00:00:11 +0000
Files and hashes: 1: 7Hysv3h3cIK_WddtBkhV4eeOKec.roa (hash: vqkbaBvGL81dJNu1I/whqip6EIOAqXAyhwvf9zKaCBc=)
2: VSV3WnBqwAyC-ikzniLkMQgJnnk.crl (hash: X++9VJZc/Je305FrI0v/1MJhozpjqv6iaHclNglBhG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:8f:e5:b8:00:f8:3f:35:04:2c:18:b4:7a:1f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5525775a706ac00c82fa29339e22e43108099e79
Validity
Not Before: Feb 17 00:00:11 2025 GMT
Not After : Feb 18 00:00:11 2025 GMT
Subject: CN=b329a109e1df17d62659246bfbaee03f324c30be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ac:75:b8:c5:be:2a:b3:3d:63:19:c6:af:0a:
65:67:87:d7:51:c5:c0:9d:23:c2:09:f7:4a:8b:df:
f7:51:ab:79:f2:f1:6b:79:26:3e:52:fe:be:10:46:
fb:2e:4e:46:31:cb:8e:a6:bf:54:83:f5:d7:b1:da:
fc:38:af:ec:8c:1d:d3:fd:4b:65:cb:9c:52:8c:5c:
75:96:f2:54:4f:43:93:00:4a:be:c7:3a:5d:cd:4a:
2a:a6:d7:60:ea:d2:ba:63:c8:fa:0b:51:ec:79:b5:
f5:18:2a:a2:10:76:a8:83:08:57:aa:c8:20:21:84:
1b:3d:7a:1c:75:7f:33:d2:a8:14:96:31:57:32:86:
1e:ad:40:27:fb:2f:24:90:53:65:c2:18:ad:0c:60:
36:c5:60:bb:20:15:a8:20:47:de:35:ba:4e:bc:57:
2a:54:f9:49:02:4a:39:5c:98:a5:2d:5a:0c:dd:9a:
e6:69:41:1f:4c:14:32:64:f7:53:58:1b:dd:cb:b6:
03:d9:27:d5:d1:fd:a6:19:f0:50:41:b3:a2:d2:a8:
bd:41:72:ae:43:a7:06:4e:68:f1:9a:ab:9b:65:1f:
bf:f8:0d:02:21:a4:81:83:96:b0:b7:46:32:f4:8c:
99:5a:b9:5f:c6:a5:58:39:d0:be:4d:c8:7c:b1:5b:
98:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:29:A1:09:E1:DF:17:D6:26:59:24:6B:FB:AE:E0:3F:32:4C:30:BE
X509v3 Authority Key Identifier:
keyid:55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4b:08:11:44:7e:75:b5:6a:ed:7f:25:aa:9b:83:7c:8c:3e:
96:17:8c:9f:5b:b4:f4:2e:19:70:04:3f:2d:84:95:be:e2:82:
ce:01:37:5b:d2:5d:54:3c:21:28:f4:d3:b7:a3:91:63:ef:05:
97:d8:65:b9:0d:bd:01:88:9e:4e:6e:5f:b6:29:b7:df:2b:b4:
1f:e3:42:b0:36:ca:1e:37:36:f6:96:6e:3f:e3:15:bc:b5:5a:
cb:16:09:f8:b7:4a:19:56:7b:86:9c:41:1f:54:59:31:4c:76:
1c:c1:50:fa:0d:bd:d0:25:5f:09:60:01:d4:b0:d9:a3:c0:08:
73:86:51:1c:5a:ce:38:20:b8:38:44:9a:94:ba:76:05:c9:59:
06:fb:d7:29:18:17:1e:b0:4a:4c:74:39:d2:49:25:c4:e1:29:
b5:b0:b4:a0:26:fb:03:47:4b:e1:53:78:ab:c6:d3:23:b8:a2:
0d:88:97:bb:d3:93:1a:99:69:47:fa:a0:98:51:4d:3b:7a:e1:
44:e9:32:9e:13:25:34:b8:f2:a3:bc:b7:61:54:3e:7b:9a:ff:
6a:84:66:95:7e:09:5f:4a:b3:7f:56:70:1b:6b:59:f1:38:b8:
09:91:67:38:f8:51:82:b1:89:c9:30:b1:f7:73:93:cd:1d:4b:
34:09:fb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:44 2025 by rpki-client