Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft
File: VHKdSdKy4Au8soU6dMvA6UZz8BI.mft (raw, json)
Hash identifier: V35yTRLZq2oSKiuzNDECAwrd+AKtgGYD7Eut2MGo8XA=
Subject key identifier: 85:11:CC:0B:AC:B5:3B:58:4E:4E:F8:5A:66:2D:74:FA:13:7F:09:64
Authority key identifier: 54:72:9D:49:D2:B2:E0:0B:BC:B2:85:3A:74:CB:C0:E9:46:73:F0:12
Certificate issuer: /CN=54729d49d2b2e00bbcb2853a74cbc0e94673f012
Certificate serial: 0194BB28FB31DD0DB1A794F4FBA7972256A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHKdSdKy4Au8soU6dMvA6UZz8BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft
Manifest number: 1406
Signing time: Fri 31 Jan 2025 07:00:12 +0000
Manifest this update: Fri 31 Jan 2025 07:00:12 +0000
Manifest next update: Sat 01 Feb 2025 07:00:12 +0000
Files and hashes: 1: VHKdSdKy4Au8soU6dMvA6UZz8BI.crl (hash: n+kFnv4JDQJiclrUmZmyFUipTFK/lsd4EmdnSILRil0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHKdSdKy4Au8soU6dMvA6UZz8BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:28:fb:31:dd:0d:b1:a7:94:f4:fb:a7:97:22:56:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54729d49d2b2e00bbcb2853a74cbc0e94673f012
Validity
Not Before: Jan 31 07:00:12 2025 GMT
Not After : Feb 1 07:00:12 2025 GMT
Subject: CN=8511cc0bacb53b584e4ef85a662d74fa137f0964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:3c:f5:2f:4b:46:2e:e5:1f:77:a8:4a:ed:
56:9d:c6:e8:65:80:5e:c8:45:fc:c7:63:67:ed:d4:
3a:1b:27:18:66:2d:cf:8b:30:9a:72:ec:9d:24:92:
47:fb:37:32:84:3d:67:22:b4:fa:27:03:f0:47:88:
be:f2:ab:68:71:d0:87:6a:b2:e3:aa:eb:e7:97:08:
e8:68:e8:40:d3:77:e3:94:f8:b3:1d:3b:93:3c:2f:
fc:50:a7:1b:9e:0e:f4:bb:a4:be:a7:98:db:4e:62:
32:24:de:8f:31:4a:2d:5b:a6:5f:d5:ca:0b:af:94:
d7:c5:d2:78:24:36:23:4a:a3:b5:bb:31:fc:34:1b:
f9:f9:7b:4e:b5:d0:59:19:ad:ce:ed:66:ff:59:a9:
91:14:77:4c:f0:cb:c0:df:4b:26:c1:48:f3:c7:97:
33:6b:9b:ca:64:6c:1d:b4:ba:5f:ff:c0:fe:4b:35:
13:04:c7:9c:01:54:23:d6:c5:4c:14:c4:c1:de:f9:
66:23:ff:d2:1b:cd:32:bd:6a:c6:c4:ce:3c:e6:4e:
30:08:b8:28:2d:48:96:3c:3c:98:fe:45:b2:71:bc:
6a:06:6a:91:30:80:a2:ac:bf:d0:90:7a:be:11:5d:
70:5c:12:81:48:6f:f0:c1:79:99:81:33:e1:90:f3:
45:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:11:CC:0B:AC:B5:3B:58:4E:4E:F8:5A:66:2D:74:FA:13:7F:09:64
X509v3 Authority Key Identifier:
keyid:54:72:9D:49:D2:B2:E0:0B:BC:B2:85:3A:74:CB:C0:E9:46:73:F0:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHKdSdKy4Au8soU6dMvA6UZz8BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:89:7f:54:0f:91:51:4d:92:14:04:37:04:ac:06:e1:b0:69:
ab:5a:34:d8:48:2d:cb:fd:74:b6:fc:2d:e0:86:67:8d:b0:d8:
0d:f3:41:5e:0d:d9:34:a3:5c:1d:e3:3e:15:d8:d4:f3:8c:85:
d3:e8:0b:25:b7:45:c0:d4:9b:48:7f:4a:69:c1:85:99:16:19:
aa:65:ae:cf:d0:15:a4:c2:1b:6f:07:86:86:f2:fc:1c:eb:b9:
3f:ff:00:46:be:66:31:8e:2c:37:4c:2b:5a:b8:d9:2b:6e:74:
09:01:a0:85:25:0c:60:cc:f7:ad:4d:dc:01:13:25:03:9e:6b:
f7:ef:f0:c0:31:f7:07:2c:74:e5:ff:4b:7d:ec:e5:da:b8:2f:
0c:55:e8:54:f6:49:ef:5e:28:e2:a6:bc:89:31:d6:0e:68:22:
29:94:13:9b:e7:64:48:97:59:fc:dd:62:e1:0d:f1:9c:27:dd:
c4:a2:02:d2:8d:4f:8a:10:91:f8:dc:9b:5d:eb:6e:2f:64:fb:
02:ab:0d:2e:63:62:40:29:52:71:4a:73:65:46:5c:ae:6a:94:
be:20:f5:cf:5d:b4:c9:fe:26:01:5c:b5:5b:63:05:51:21:61:
25:fe:74:b5:a7:05:8d:5d:75:ba:bd:36:65:f0:25:0e:25:53:
69:2f:ae:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:50 2025 by rpki-client on console-fra.rpki-client.org