Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
File: VVDgbuAsWjLlTciYU7SqN4-GBPc.mft (raw, json)
Hash identifier: NGyDj0zANtbLjIt6f8CeS/bZyPi03a99+wtV2H1V6SQ=
Subject key identifier: E2:FE:74:9A:49:73:F3:8F:AD:77:51:6A:C9:1B:7E:F9:EE:B1:26:74
Authority key identifier: 55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7
Certificate issuer: /CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7
Certificate serial: 019510FDD6CA79D3977307259FB442888B18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
Manifest number: 099C
Signing time: Sun 16 Feb 2025 23:00:25 +0000
Manifest this update: Sun 16 Feb 2025 23:00:25 +0000
Manifest next update: Mon 17 Feb 2025 23:00:25 +0000
Files and hashes: 1: 5SQUdjWeY9PdQ3b1GR4L3yx_VJ4.roa (hash: VQXaoCtg+0JbslSnqFe7W7gX+zMPO93yVdM1v7U3tJ8=)
2: MPnVMUDELwRT1_LHbrcJgd4NmwE.roa (hash: +uiYqzvO4MwwXvvIKhlCHsQt5+OwmIQB9Ijy/fYg7A8=)
3: VVDgbuAsWjLlTciYU7SqN4-GBPc.crl (hash: X7iLUgHBcKMJykLbht89hPl4JR/KftyClzQSXYi17Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:d6:ca:79:d3:97:73:07:25:9f:b4:42:88:8b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7
Validity
Not Before: Feb 16 23:00:25 2025 GMT
Not After : Feb 17 23:00:25 2025 GMT
Subject: CN=e2fe749a4973f38fad77516ac91b7ef9eeb12674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:84:fb:95:7a:9f:f3:26:1a:a3:97:b3:d9:b2:
44:58:37:a7:6b:45:40:98:3c:ed:1a:8e:54:8a:bf:
24:0b:ac:89:fd:98:9d:55:a6:79:57:27:d2:25:7b:
c1:98:e6:da:a7:9f:52:6a:d1:d7:f0:fb:50:5c:74:
83:58:cc:5e:aa:ab:78:24:ca:20:04:ef:3f:71:8f:
f3:d5:52:3f:10:76:0e:dc:8d:60:91:ce:8d:b6:93:
f6:51:a0:09:c9:b0:16:e6:aa:74:6c:2e:43:88:c3:
55:b2:d4:f7:d6:c8:63:84:7a:f7:d2:d1:f8:b0:a7:
60:57:14:90:e4:13:ee:74:5a:c7:6a:23:ba:2a:21:
1a:15:90:ab:12:e2:36:86:93:be:2c:90:9f:9d:59:
59:a7:de:fa:78:de:24:a6:b8:3c:96:b9:d0:aa:18:
2e:15:34:19:bb:8c:a4:8d:64:22:85:e6:36:dc:16:
c3:b9:5d:66:68:99:6e:3f:eb:26:d7:2f:19:cf:17:
85:d4:04:a8:48:dd:de:a1:be:04:60:3b:26:d2:04:
8a:c0:66:20:20:60:ef:d1:c5:b6:0b:1e:06:ea:4a:
5d:6e:d7:98:51:ab:f5:21:a2:b2:07:ed:94:99:26:
c1:4a:b9:ba:0a:4a:f2:be:f5:79:b0:49:13:20:c8:
3e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FE:74:9A:49:73:F3:8F:AD:77:51:6A:C9:1B:7E:F9:EE:B1:26:74
X509v3 Authority Key Identifier:
keyid:55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f7:e9:96:a4:88:d5:cd:de:84:66:26:0f:a2:c5:79:dd:c5:
4e:1e:5a:2f:27:32:22:0d:a6:87:31:a8:38:c4:4a:25:c2:09:
35:90:cf:3c:06:09:21:06:c6:e2:26:ad:db:82:22:23:c5:b1:
5b:4f:71:ca:ca:9f:bf:34:09:8a:4a:03:5d:6b:f8:b3:b1:e6:
4f:9a:3f:1a:09:62:5b:92:ba:70:ab:d5:f4:cf:09:f3:c0:e4:
df:32:3b:c4:eb:f2:a1:d5:5b:60:5b:37:6d:79:fe:a4:e9:ff:
5a:6b:2b:15:fb:be:7d:c7:cc:d7:96:64:0d:ad:39:a7:0a:ca:
a3:52:2d:0a:0d:88:c3:2a:3a:cf:c0:36:e7:6d:82:0c:de:aa:
eb:ea:df:b2:c4:3f:fb:cc:57:84:93:f7:68:5a:f8:c9:67:a9:
f7:84:ba:94:5c:82:44:02:81:a4:76:ac:35:1c:1c:d1:12:3b:
2a:df:05:10:c2:a6:84:ab:6a:0f:9b:63:02:c2:b9:91:97:13:
d9:c2:fd:79:5f:2b:02:b2:51:19:47:e3:85:38:83:00:13:f7:
d2:f6:c4:46:b3:5d:a8:41:91:dc:ae:d1:06:fc:65:b8:c8:1c:
62:47:d4:5f:bb:ce:2d:b8:dc:71:38:d2:0a:d7:2f:3a:76:8a:
51:57:fd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:56 2025 by rpki-client