Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
File: VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft (raw, json)
Hash identifier: nL+sQzDJu/KA9RjCIFjSwfordybWZ7ioUhv1J6aGnnc=
Subject key identifier: 2F:CF:F0:D0:1B:D8:8A:B8:53:66:3A:9C:71:8A:A6:E3:D4:A4:20:14
Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
Certificate issuer: /CN=57130f799f8a8985502a2ea3356037674085cfca
Certificate serial: 0194BA848CE8F3A6D07A36E8CF1A6293CA51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 04:00:36 +0000
Manifest this update: Fri 31 Jan 2025 04:00:36 +0000
Manifest next update: Sat 01 Feb 2025 04:00:36 +0000
Files and hashes: 1: 0cSnkMJkJHeFaYdY1KT0ScO6smc.roa (hash: Gcz0UPXLhZmjDb4FihMibqoJMQnP847xcHc8Qvl5GWc=)
2: 10H4MUNhSSva047O9EEp6SPRBJE.roa (hash: JmvtAf/+biHEI+go7XB/O90LiW31KmrT39neQ8bWDTc=)
3: 78KScp2LVWw2hOVmr_h_Gkcv34A.roa (hash: Ptq/z1pA4OnP8t08S5vn7Az3pzr/nZN/5vkEHzVtW1s=)
4: GhEBs7fMOUU2KjePNnbULHKRHoA.roa (hash: Dow24ARSNfhxgpUv5NrsgvZFPFxhNN0Fkn5hgDvl4wg=)
5: H9Yj6XrfYViqOy5X6VeUZJTi5tI.roa (hash: 4orcq82HkX9/XUoOT4IA7nH/E15MI2gX+xqdM0ifFYg=)
6: VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl (hash: JL83jjsTUyb2/sZ8Xxr3h3myr6jV3UHgbf3g+lk/uLQ=)
7: tkuxtWzbusmwWQub2z4rjkdwXdc.roa (hash: JTVZbUmozTnvdMYKVuksSNIaPHfDAOZ4PEG/FbAO7wg=)
8: wPqYVNKJADvVgGucnETD7HuiSvs.roa (hash: 0eyTJy9gG8F8Xex/RtpsLoJCxS1EJ4y1hxoKVvkvOZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:8c:e8:f3:a6:d0:7a:36:e8:cf:1a:62:93:ca:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca
Validity
Not Before: Jan 31 04:00:36 2025 GMT
Not After : Feb 1 04:00:36 2025 GMT
Subject: CN=2fcff0d01bd88ab853663a9c718aa6e3d4a42014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:10:a9:1e:fb:16:1c:37:ef:ad:b6:c3:ed:3a:
dd:dc:be:14:d9:5d:dd:0a:24:70:c3:29:ea:09:59:
2c:c4:44:66:d9:91:f6:42:a9:24:1b:53:96:c9:30:
f0:e4:04:2d:fb:f0:0f:b1:1e:ab:33:bd:21:bc:3b:
b9:1e:7b:65:cf:a5:76:77:8b:92:8b:a5:05:d3:55:
78:18:81:ae:c2:f0:69:21:c9:2c:ff:f7:ba:45:90:
60:1a:99:c0:c3:86:81:df:34:0d:05:21:37:42:c8:
12:4e:d3:90:22:d7:f1:09:02:79:39:72:cb:a3:8a:
45:b0:49:fc:f8:eb:e9:cd:22:cd:08:a1:d3:a1:1b:
5a:80:4b:da:f3:78:22:98:aa:31:21:2b:17:1e:e6:
4d:50:80:93:9c:0d:a1:de:6d:6a:b9:0f:b5:a4:ac:
52:31:fe:85:1d:f6:ac:77:73:90:09:b3:8f:af:3d:
e1:58:23:fa:72:4a:60:36:5a:a6:02:6c:e9:6a:dc:
95:37:9b:b5:11:69:57:f4:45:48:c6:be:da:7c:f3:
4d:11:22:6b:60:77:dd:4c:38:fc:5e:98:08:6d:a4:
4a:5e:52:51:c3:92:1f:e9:26:81:d5:27:53:0a:5a:
86:bf:e4:9a:54:33:89:d8:10:09:04:3c:49:ce:b9:
d3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CF:F0:D0:1B:D8:8A:B8:53:66:3A:9C:71:8A:A6:E3:D4:A4:20:14
X509v3 Authority Key Identifier:
keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:95:85:ca:39:dd:03:39:2c:15:24:f2:3d:aa:da:40:0c:47:
90:a9:2d:f7:e7:66:63:b7:b3:d1:2d:a1:83:e5:10:2a:7f:22:
83:9b:72:5f:40:94:24:24:06:97:77:60:6f:51:57:3e:96:11:
54:04:20:7b:6c:82:b4:e2:dd:c0:c2:f8:dd:3f:20:72:86:d4:
75:bf:3f:16:a4:cc:39:26:f3:7d:a3:4e:26:f4:1c:51:94:26:
64:b9:0f:39:f7:00:26:c4:76:2a:02:5f:d3:32:c7:05:8a:29:
d4:0b:6a:2f:5c:7f:ac:58:2b:85:c0:24:3b:65:d2:1e:2c:0b:
3b:ff:f3:8a:6a:67:ff:02:5d:4e:4d:6a:f2:3b:ac:76:7d:12:
51:be:e2:3a:c1:c7:fa:49:b3:76:58:1e:a5:08:23:75:71:ae:
3f:f0:c6:14:c0:07:91:f6:c1:1c:57:18:3b:9e:4f:9c:26:5d:
0b:f9:a9:3c:8c:58:cb:e2:d3:45:b6:76:e8:71:04:8a:a0:0c:
0f:fd:55:99:6d:4a:5c:59:cb:79:0a:d2:b6:fa:4d:dd:f5:f0:
ca:4f:9f:42:e5:d8:82:fd:b4:9e:2d:38:7c:e6:61:c4:a6:af:
33:8c:f3:76:40:99:1f:85:01:3f:0c:cb:fd:f3:d7:7f:1c:90:
a1:d4:b9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:46 2025 by rpki-client on console-fra.rpki-client.org