Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
File: VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft (raw, json)
Hash identifier: 2ZLoLUhDCZ5kzXOw5K+c5i+q9dFFX1wuyrw+gnAfdAQ=
Subject key identifier: 70:C4:1E:4C:9F:77:B5:B6:2A:DA:79:97:5E:60:3C:17:AC:EC:DC:8D
Authority key identifier: 57:06:01:06:B4:16:79:2B:2A:2E:9A:7E:B4:02:A2:38:57:01:68:BD
Certificate issuer: /CN=57060106b416792b2a2e9a7eb402a238570168bd
Certificate serial: 0194BA8478C49FC202BAC94D7A0140276A46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
Manifest number: 118E
Signing time: Fri 31 Jan 2025 04:00:31 +0000
Manifest this update: Fri 31 Jan 2025 04:00:31 +0000
Manifest next update: Sat 01 Feb 2025 04:00:31 +0000
Files and hashes: 1: VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl (hash: y5Z5D2vBGXo/Ua4ndw43C+epjvlMD84lLra6iEuk1kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:78:c4:9f:c2:02:ba:c9:4d:7a:01:40:27:6a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57060106b416792b2a2e9a7eb402a238570168bd
Validity
Not Before: Jan 31 04:00:31 2025 GMT
Not After : Feb 1 04:00:31 2025 GMT
Subject: CN=70c41e4c9f77b5b62ada79975e603c17acecdc8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3d:61:cb:f1:e9:8c:03:ce:3d:27:ed:75:23:
e2:08:7c:17:3c:9e:ff:23:2a:1f:99:e0:d0:1e:45:
6b:1c:74:4a:ea:a1:5e:0d:7a:48:b8:16:d6:6f:82:
d1:87:f7:89:d3:31:2c:ea:7f:1f:f6:82:dc:bd:ad:
74:d4:06:d7:f3:40:d8:c2:12:60:e1:e7:ca:2b:ee:
e7:d0:cc:fb:78:36:5e:ea:0d:e1:b3:b0:d5:2b:88:
56:22:f0:4b:c4:0e:43:1c:9b:79:ff:0b:f8:41:9c:
88:4c:cd:28:8c:3e:ff:e7:6a:3b:41:3b:2f:10:44:
5f:b0:7f:4a:78:0b:0d:58:6c:2b:9e:9c:ab:b1:dd:
76:06:90:0a:86:60:20:78:bc:f7:f2:39:e8:91:d7:
ed:0c:de:c4:18:86:c0:3d:c7:a5:3d:80:86:a8:3b:
7b:bf:66:ca:5b:00:a3:22:5b:22:c7:c5:a4:ba:02:
4b:90:5a:a8:6d:38:83:23:f9:d9:a2:0a:37:65:28:
7d:51:3a:69:34:a8:0f:18:92:64:9e:ce:9b:4a:f7:
7b:1c:7a:be:dd:98:d2:8b:b7:5c:01:93:4b:00:72:
a3:36:5c:b2:a8:79:64:97:01:5b:7f:b8:6d:c7:90:
50:ab:38:90:e5:85:40:19:d9:89:4f:56:a0:13:90:
6a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C4:1E:4C:9F:77:B5:B6:2A:DA:79:97:5E:60:3C:17:AC:EC:DC:8D
X509v3 Authority Key Identifier:
keyid:57:06:01:06:B4:16:79:2B:2A:2E:9A:7E:B4:02:A2:38:57:01:68:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:05:1d:36:83:e6:15:a8:f2:25:1c:40:d8:0b:5d:17:e0:60:
95:12:dc:ef:eb:9e:45:18:1a:ce:1e:b7:1f:2a:2b:17:bd:d3:
bd:4f:a7:3f:44:34:99:9d:4f:3b:9b:20:81:0f:ee:7c:ee:8d:
25:5a:81:59:3a:a2:6d:8a:75:31:23:ef:6d:08:8e:6f:a3:54:
df:6e:d9:06:bf:50:07:c2:b7:72:6f:7a:fc:89:69:29:65:80:
4d:a9:7e:7c:2b:0a:0b:73:29:7a:67:30:24:a0:fa:f3:e5:af:
a7:8c:39:cf:38:e9:b1:3a:9a:97:5e:6d:07:11:51:0e:f6:f7:
04:3a:a2:20:b4:5c:19:11:ea:5c:e0:80:73:25:cd:c3:b2:35:
91:b6:2e:dd:17:63:61:23:c1:87:66:43:ad:3f:b7:80:f6:ec:
57:4e:ed:84:fe:90:4a:3d:f4:52:13:b8:1c:ce:78:05:66:9f:
6f:2e:28:63:27:28:a1:9d:d5:65:66:6b:09:02:90:6a:f3:3d:
41:74:e7:b2:b6:6e:bc:22:73:45:26:0b:83:41:b0:c9:86:a2:
0e:a6:0b:75:52:b3:16:f5:59:4a:8c:6f:31:38:6a:46:d4:51:
6c:2d:3f:a9:44:5f:95:15:e4:c6:11:d4:fc:ae:c7:b6:8a:51:
45:46:5b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:53 2025 by rpki-client on console-fra.rpki-client.org