Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
File: vgeJVzbtkoYPMTUAioWBP5i718E.mft (raw, json)
Hash identifier: vlTb65zyOe5IYOW0KKX4ZzN+42c9/KZy+vmhvAuK7cw=
Subject key identifier: 13:43:BE:85:4C:A7:BB:37:F6:14:82:FE:EF:14:5E:07:DD:9B:71:A1
Authority key identifier: BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1
Certificate issuer: /CN=be07895736ed92860f3135008a85813f98bbd7c1
Certificate serial: 0194BB600A70426E393189E7EEF10C77F8A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 08:00:20 +0000
Manifest this update: Fri 31 Jan 2025 08:00:20 +0000
Manifest next update: Sat 01 Feb 2025 08:00:20 +0000
Files and hashes: 1: vgeJVzbtkoYPMTUAioWBP5i718E.crl (hash: mZkovGXAgiZbXAx3mZeLyEW4DNAGX7l0G9fQGzUXqUY=)
2: z0Q3v_uWGQRHW3DWSvSjjl8qG2A.roa (hash: K7V12/jav6q6nJdIsu+PPDA7RxS4tktOMqpojP9r5X8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:0a:70:42:6e:39:31:89:e7:ee:f1:0c:77:f8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be07895736ed92860f3135008a85813f98bbd7c1
Validity
Not Before: Jan 31 08:00:20 2025 GMT
Not After : Feb 1 08:00:20 2025 GMT
Subject: CN=1343be854ca7bb37f61482feef145e07dd9b71a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3c:24:1e:a0:cc:84:24:0c:89:cc:97:52:4c:
2b:67:cd:9c:85:23:25:fc:7f:63:aa:36:9b:a7:ad:
cc:9e:32:4b:9e:c0:ee:8c:d6:b8:6d:ea:47:62:4a:
3c:7a:3a:10:08:67:a3:ef:83:d6:92:95:28:2d:55:
08:d5:6b:35:fe:e4:9a:1f:c4:b6:89:0a:39:19:ce:
ad:d7:40:e8:dc:e3:86:a3:7e:62:08:f4:fc:1a:cf:
87:c6:72:81:f8:95:d7:22:c9:37:bd:7b:4b:b3:d2:
7a:a6:66:c0:18:f1:7c:4a:4f:ca:c1:27:99:ec:9a:
71:a3:0d:19:b3:ff:af:f4:ef:40:b2:10:3f:fc:df:
38:4a:f7:d1:46:57:e1:20:22:78:76:42:af:f7:db:
7f:6b:9a:61:98:61:32:85:de:03:e7:9d:0e:45:59:
24:65:e1:b8:6b:25:cd:11:9a:92:b2:f9:bb:0d:30:
b5:96:6b:f3:5a:8c:9a:b7:bc:7d:15:00:07:3e:aa:
3d:c2:13:4f:d2:23:f0:ca:15:c6:28:a3:54:bf:bb:
6d:53:9b:49:d2:c9:51:c4:89:83:fa:41:9e:81:ad:
f5:1a:96:01:9c:bd:fb:8f:86:48:7f:fa:16:7e:04:
ca:9e:e3:9a:a0:06:26:74:e0:77:b5:5d:1b:5d:b1:
7e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:43:BE:85:4C:A7:BB:37:F6:14:82:FE:EF:14:5E:07:DD:9B:71:A1
X509v3 Authority Key Identifier:
keyid:BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ca:95:97:9c:e3:cf:99:cd:5d:5b:56:d8:a4:a8:28:bb:84:
77:59:df:e9:8e:a0:ff:e9:46:04:a9:f7:7c:45:bc:ec:db:0c:
d8:b3:54:02:78:68:3e:7d:be:23:82:6e:4b:f5:65:55:52:16:
9c:1f:b4:f4:05:d9:f8:ef:1c:64:e7:5d:bb:65:db:22:80:ee:
5a:de:3f:4e:8b:e4:b1:2b:89:8f:6f:4f:b2:db:5c:7d:5b:3a:
5a:4f:5b:2b:7a:df:ed:3f:74:e6:f6:08:62:a4:13:e2:94:f7:
f3:5c:80:81:f4:8a:4c:a1:d6:2a:a1:fc:48:61:20:4f:28:c8:
55:92:e0:e9:64:9c:70:d3:f7:9f:4a:df:8f:2a:bf:7c:cf:ae:
19:5a:51:5f:f3:c5:5c:65:f7:f2:cc:29:51:bc:5f:e2:5f:5b:
03:27:f6:51:d8:62:2d:0e:72:b3:21:2a:67:92:e9:cf:3a:a1:
bb:e7:a2:85:88:a5:73:5f:4b:ce:b9:7a:06:9a:03:4a:91:f0:
e4:de:0e:be:a2:ff:64:9e:44:1e:97:1c:36:74:af:d2:d2:83:
40:c5:df:2d:f4:d5:c9:d8:93:6c:ac:b0:28:4d:1f:96:68:01:
8b:14:18:1f:f8:40:bd:45:ee:6a:8f:a7:b7:a0:06:68:2e:5f:
a8:c7:a5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:14 2025 by rpki-client on console-fra.rpki-client.org