Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
File: vvZlBYLADbslkc7cKYwM08WWirA.mft (raw, json)
Hash identifier: iv7u+gmlX3g7BTpCRdfZFtOZa2/z3DPb7qMneYE9Li4=
Subject key identifier: 1B:A5:BA:15:F9:2F:E2:C0:7E:E3:8E:EB:8A:C9:B7:AD:41:F5:18:38
Authority key identifier: BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0
Certificate issuer: /CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0
Certificate serial: 019510FDD50052ED0CA043FC35A60C2B2804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
Manifest number: 1329
Signing time: Sun 16 Feb 2025 23:00:25 +0000
Manifest this update: Sun 16 Feb 2025 23:00:25 +0000
Manifest next update: Mon 17 Feb 2025 23:00:25 +0000
Files and hashes: 1: VJcY17IQh2BSqR-lhhdapfFR2Jg.roa (hash: 42V4cyYK1j/bnIgnYxXURiJulSqpvLBcVAwt2BGPORo=)
2: vvZlBYLADbslkc7cKYwM08WWirA.crl (hash: 8YB0ViKWNTIPnuENSuO3OI66/f0nZ9wHlMZULjwEf7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:d5:00:52:ed:0c:a0:43:fc:35:a6:0c:2b:28:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0
Validity
Not Before: Feb 16 23:00:25 2025 GMT
Not After : Feb 17 23:00:25 2025 GMT
Subject: CN=1ba5ba15f92fe2c07ee38eeb8ac9b7ad41f51838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fa:49:0b:79:45:77:34:15:eb:3b:2a:4e:fd:
f2:b1:e4:e3:42:d0:e7:5e:e8:6b:5c:6d:fd:76:18:
59:ff:fd:14:59:bd:b1:83:36:3b:21:a2:b8:4a:68:
b5:50:5f:08:8f:25:07:8b:97:ec:b4:1b:24:7e:1c:
d3:ad:a9:cd:0f:f6:4a:a4:87:3f:3d:17:a0:7e:88:
1a:ab:34:44:d8:ab:e7:ae:37:31:51:f2:29:91:c7:
63:6c:8a:21:93:13:7f:5f:40:44:fa:03:39:cd:a7:
4d:cb:2c:44:bc:8a:06:6b:d1:fd:85:9f:3f:69:33:
c0:37:6f:4d:54:7b:bd:30:57:23:33:35:f7:15:df:
f7:3f:49:75:3d:35:50:1c:a4:75:54:49:7f:2a:3b:
1c:58:2e:f7:37:39:52:af:64:a5:4c:ca:b8:ee:5a:
fb:91:74:23:0c:8e:26:32:c1:55:e2:2e:bf:96:34:
ca:58:9e:c0:44:2f:0d:9f:c1:11:e4:24:2e:98:25:
e5:42:e1:a7:4d:e8:1b:c7:06:03:8e:e9:91:d1:fa:
0d:e8:0b:10:2d:66:b0:e4:a2:95:c3:b3:de:cb:10:
7b:82:04:aa:4f:78:7a:1f:78:29:b2:7a:dd:49:0e:
4a:2d:da:cb:0e:9a:58:42:92:af:0f:f3:b9:c4:56:
08:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A5:BA:15:F9:2F:E2:C0:7E:E3:8E:EB:8A:C9:B7:AD:41:F5:18:38
X509v3 Authority Key Identifier:
keyid:BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:8f:96:45:13:8b:2d:1d:9e:0f:c5:cb:2b:ed:4d:50:b9:9c:
a6:4e:90:eb:d8:81:18:21:c7:a8:0d:57:74:f5:f2:3d:38:27:
d6:f3:e6:82:4f:2f:11:ca:82:1c:6c:6d:44:9b:d9:e4:42:e9:
6b:ae:1e:08:e7:9e:36:d3:3b:b8:0b:6a:bd:0e:42:97:88:ad:
85:ac:f2:6b:d6:d9:21:9d:30:f9:82:3c:7f:f9:ba:a7:f2:26:
6f:61:53:78:f6:f6:64:ba:a9:e9:d5:b5:06:b0:cd:a8:12:d8:
9b:d6:ec:3d:1f:ed:c7:79:4c:b3:bb:89:0e:a2:59:5d:54:8a:
0c:c9:7a:75:24:98:7e:d9:50:02:6f:1f:42:2f:19:d6:6a:5f:
9c:f9:4c:a0:8e:f7:0a:56:63:31:a9:eb:8d:8a:fd:8c:96:53:
91:9a:cc:de:5c:a2:51:33:d5:86:ba:f2:6a:1c:86:f6:ff:d6:
ef:91:9b:a8:a6:50:37:a4:d1:5f:ce:9f:fd:49:77:dc:19:32:
ed:ff:4e:50:46:83:9e:69:e0:4d:ec:b4:f0:ad:b8:04:c3:57:
48:e7:a4:a4:49:07:a0:8e:93:f2:d4:ec:83:ae:2b:ac:8d:51:
f2:95:ee:f3:78:f1:5a:4f:b3:68:b8:81:91:d3:d0:85:20:4f:
2f:a0:58:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:25 2025 by rpki-client