Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
File: vgeJVzbtkoYPMTUAioWBP5i718E.mft (raw, json)
Hash identifier: 3njIBKhuPz8gqQrGDNb54qkBwR3rHHSDAuzQZzq+QtA=
Subject key identifier: 33:8F:85:41:51:87:C6:96:1C:30:13:CC:D6:AE:BC:D0:A7:06:9C:3E
Authority key identifier: BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1
Certificate issuer: /CN=be07895736ed92860f3135008a85813f98bbd7c1
Certificate serial: 019512472CA0BC3F234282D532E323580794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 05:00:08 +0000
Manifest this update: Mon 17 Feb 2025 05:00:08 +0000
Manifest next update: Tue 18 Feb 2025 05:00:08 +0000
Files and hashes: 1: vgeJVzbtkoYPMTUAioWBP5i718E.crl (hash: UrNVSdIvz1gu++GI121BHK04cAfHxZZ7J0+JbvBrgUg=)
2: z0Q3v_uWGQRHW3DWSvSjjl8qG2A.roa (hash: K7V12/jav6q6nJdIsu+PPDA7RxS4tktOMqpojP9r5X8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:2c:a0:bc:3f:23:42:82:d5:32:e3:23:58:07:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be07895736ed92860f3135008a85813f98bbd7c1
Validity
Not Before: Feb 17 05:00:08 2025 GMT
Not After : Feb 18 05:00:08 2025 GMT
Subject: CN=338f85415187c6961c3013ccd6aebcd0a7069c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5e:35:c0:d4:ce:47:dd:64:7d:80:4e:c3:d8:
2b:78:19:15:92:21:fd:08:07:73:ff:c6:3d:12:ce:
d5:b9:8f:dd:18:a0:b0:c7:22:f2:3e:34:52:10:ef:
bd:85:98:f1:0c:a4:4d:f9:2e:2b:f2:5f:f3:ba:70:
20:38:66:34:e4:02:d5:f5:15:6a:6c:eb:a6:c9:93:
97:52:d4:2f:e4:91:d4:5a:ef:58:a6:fd:f6:ea:3f:
27:bd:2d:d7:1f:d8:a5:30:8a:f2:8d:41:aa:84:31:
ac:1c:30:5f:29:7a:67:5d:ba:a0:8b:f1:ee:a2:f8:
51:83:5c:80:21:0d:bd:14:30:02:ec:29:97:dc:2a:
b5:16:63:72:5f:18:74:74:ff:ff:74:b1:51:87:90:
6f:1c:8a:0c:f7:4c:2c:58:e6:cc:34:02:69:d6:e8:
04:7e:fc:a3:17:38:47:0f:e9:e7:18:37:42:24:3a:
5f:12:55:6d:13:45:11:c8:87:86:2e:05:5d:30:0e:
29:44:f3:64:7c:d8:8c:c3:91:79:21:4a:15:b3:7f:
57:f9:4d:ee:17:47:86:b3:28:65:85:73:a1:ea:be:
e6:ea:71:78:a5:fb:08:38:69:62:bb:12:c7:87:4b:
ad:d9:18:84:dd:17:98:d3:73:0e:a8:cb:17:0a:bb:
56:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8F:85:41:51:87:C6:96:1C:30:13:CC:D6:AE:BC:D0:A7:06:9C:3E
X509v3 Authority Key Identifier:
keyid:BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:93:3f:64:60:a3:64:64:d1:fa:ff:c3:d7:33:94:75:eb:fb:
02:43:8e:00:93:80:01:5c:cb:27:f4:04:a1:92:ec:c6:c7:25:
bb:1e:5f:77:64:88:47:a3:a4:ee:90:4b:88:03:f9:1a:74:15:
4b:17:05:69:50:a0:bf:19:fa:ed:26:3b:ce:29:f7:c7:dc:f7:
75:bc:2e:d2:f5:fd:26:92:01:cf:9e:fd:9a:a3:64:03:4b:16:
f9:40:37:68:50:4d:2d:ef:3d:64:50:e9:55:57:b7:8c:2d:e9:
a5:f7:62:d5:6d:85:90:0b:40:82:06:9c:24:99:29:27:be:b3:
27:ee:85:80:42:39:07:30:72:34:9b:df:56:d2:09:33:f0:bf:
09:7f:97:ed:a1:c9:4e:e6:d2:fb:c8:a0:0e:89:79:c8:3a:16:
28:c7:a7:24:d9:87:72:2b:08:81:d7:cf:18:85:df:14:1d:67:
2d:07:39:7a:d2:91:dd:b7:b3:55:07:0c:bd:f2:46:14:3b:85:
1b:c5:0b:a6:5a:cf:9f:25:5b:61:30:77:3e:83:4c:bf:10:62:
0d:12:cb:98:aa:ad:09:58:58:2b:63:d1:de:a4:c1:03:ac:e3:
ee:1b:3b:d1:2e:cb:b4:7e:90:90:7c:f8:b7:30:d8:9c:2f:c3:
7a:f7:ff:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:43 2025 by rpki-client