Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
File: VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft (raw, json)
Hash identifier: tSZ+T0Dh2nOJus1NqVokvroaty/CrHP4ky9XxyVf4qE=
Subject key identifier: BE:23:3F:F5:EA:03:B6:76:28:65:50:C1:35:2B:D1:EC:47:BD:F0:AB
Authority key identifier: 54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
Certificate issuer: /CN=540f4a1b92338b49ca63021219059ce570ff5964
Certificate serial: 019512105E14376D42C05CD9B05B9FF236A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
Manifest number: 028C
Signing time: Mon 17 Feb 2025 04:00:17 +0000
Manifest this update: Mon 17 Feb 2025 04:00:17 +0000
Manifest next update: Tue 18 Feb 2025 04:00:17 +0000
Files and hashes: 1: VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl (hash: RzvC40FqRH8vq7Xi87YyfTVef6bWYzrBneiA1bwAEaY=)
2: _WaDfELTBc_dUmy6Cu013iGAFy4.roa (hash: 4Ui783wG8atURB8iqdX/TxaJyYCKy9S+Gr0JJXsrTgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:5e:14:37:6d:42:c0:5c:d9:b0:5b:9f:f2:36:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540f4a1b92338b49ca63021219059ce570ff5964
Validity
Not Before: Feb 17 04:00:17 2025 GMT
Not After : Feb 18 04:00:17 2025 GMT
Subject: CN=be233ff5ea03b676286550c1352bd1ec47bdf0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ad:1b:03:c8:7b:ec:66:f6:73:aa:1c:fe:d2:
3b:8e:26:90:c3:f2:35:a2:81:9b:43:b8:05:c7:4b:
6c:fc:9d:ff:6b:7d:15:65:c5:77:ae:aa:57:0b:be:
d5:42:e0:2c:3e:7c:de:db:45:62:89:9a:15:93:d0:
36:d8:c6:2e:c5:77:ff:40:45:22:e7:ee:4f:57:54:
37:5d:e7:bf:bb:3e:59:bd:b6:af:de:c7:64:e7:42:
1b:55:1c:4b:45:1f:74:b0:0a:e9:4c:68:48:7f:55:
37:bd:74:a7:40:46:37:63:fe:87:78:df:22:35:11:
fb:27:bd:98:a7:f4:37:94:a4:be:1b:0f:d0:99:c7:
f7:83:66:1a:3c:a3:b5:f5:30:58:04:c0:94:3b:57:
b5:9a:62:df:27:65:2a:46:44:0e:75:b6:86:9a:e9:
50:dd:01:c6:30:f4:0c:86:76:d2:21:07:93:97:c6:
4b:0d:69:a2:86:3c:58:51:f2:4b:7a:d2:4d:14:70:
13:21:1a:f2:90:a7:55:ad:39:db:f1:76:c6:9f:ae:
7f:07:67:41:5d:41:97:66:75:1f:15:17:ad:e1:7d:
78:48:e9:eb:49:1e:b1:6d:51:fa:d2:54:57:cf:bd:
7f:a7:a5:55:d3:e3:c3:26:0c:1c:ae:55:b7:ae:ca:
c6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:23:3F:F5:EA:03:B6:76:28:65:50:C1:35:2B:D1:EC:47:BD:F0:AB
X509v3 Authority Key Identifier:
keyid:54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:e4:6d:06:e6:42:73:47:ce:b1:12:55:b4:76:a4:ae:77:28:
c8:84:b4:06:65:01:cd:b5:f2:b3:66:53:2d:e6:e6:9e:61:c3:
45:7a:cb:1b:9a:40:6e:06:36:0a:27:e1:b7:05:4a:77:57:10:
b9:18:68:4b:aa:71:f9:1a:5a:cf:51:2d:45:8e:67:b3:ee:eb:
82:cb:a1:74:95:f9:2a:a0:92:2f:6e:d0:63:89:29:88:15:d2:
e3:f9:4e:5d:17:ec:04:d2:d3:6d:5d:bf:53:1d:50:b1:f5:93:
46:fe:c4:2a:e2:d3:5d:19:26:de:35:51:7b:3c:2f:75:44:04:
7f:1b:1d:29:4f:31:c8:95:39:ef:5d:2f:83:c7:d4:91:6f:45:
df:53:d5:b9:6e:b6:93:7e:4e:2b:6b:ed:99:ad:10:13:4e:d3:
8e:fa:67:64:ca:21:e4:e0:cd:6f:52:3b:a0:e9:48:4f:de:8d:
d6:f1:34:35:24:e6:76:d4:fc:05:c8:46:b2:de:94:3c:e3:aa:
05:b5:80:59:4d:43:85:71:b2:82:92:49:fa:a8:f0:f2:79:a2:
e8:ae:43:8a:05:77:b6:29:fb:76:66:cd:13:ae:00:da:aa:f9:
20:f1:bc:cb:2c:3b:cb:92:b8:32:7b:00:59:9d:d5:63:ce:de:
a6:8d:5c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:36 2025 by rpki-client