Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
File: VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft (raw, json)
Hash identifier: RL8BwoNLJ5ZJ+D+c14hVZkuTosIpQhzleTMw3foIuAY=
Subject key identifier: CC:09:4C:A6:87:B5:C9:BC:EA:97:BB:EC:69:FF:E2:1B:3B:74:5E:FB
Authority key identifier: 54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
Certificate issuer: /CN=540f4a1b92338b49ca63021219059ce570ff5964
Certificate serial: 01958F98751AE2FE9D5B4277842C108668F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
Manifest number: 02CD
Signing time: Thu 13 Mar 2025 13:01:28 +0000
Manifest this update: Thu 13 Mar 2025 13:01:28 +0000
Manifest next update: Fri 14 Mar 2025 13:01:28 +0000
Files and hashes: 1: VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl (hash: c6W/YzXNUfSPIsVaowV4Pz+S2063ussoaNxymJLpQkc=)
2: _WaDfELTBc_dUmy6Cu013iGAFy4.roa (hash: 4Ui783wG8atURB8iqdX/TxaJyYCKy9S+Gr0JJXsrTgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:98:75:1a:e2:fe:9d:5b:42:77:84:2c:10:86:68:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540f4a1b92338b49ca63021219059ce570ff5964
Validity
Not Before: Mar 13 13:01:28 2025 GMT
Not After : Mar 14 13:01:28 2025 GMT
Subject: CN=cc094ca687b5c9bcea97bbec69ffe21b3b745efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7f:ca:30:7e:9c:14:65:52:68:76:b7:66:ce:
12:2f:ea:26:8b:b5:21:5c:29:e5:80:df:c8:61:c8:
65:15:61:08:d4:8d:4d:ca:51:3d:3b:29:6b:6e:6c:
a5:76:d8:df:40:79:83:fb:52:95:b8:4b:15:2c:a3:
e4:63:fa:c2:d3:f2:90:09:3a:5c:42:66:e6:0e:b4:
9d:03:ec:49:0f:af:1d:6d:fe:3b:3a:ab:3e:a0:40:
d3:4f:72:0f:36:90:b8:61:48:f8:4e:96:77:a6:7c:
63:83:6d:c5:08:c4:74:3d:31:5c:e5:06:5c:b3:c4:
33:47:26:ec:30:9f:3a:60:3e:6e:97:4c:61:7d:26:
2c:64:e7:89:13:4e:57:12:12:32:78:c4:a1:66:fc:
cc:3f:4e:0d:0c:2b:6a:c4:b6:e1:ac:a6:90:8f:e0:
1b:53:59:0d:da:68:45:c4:2b:ef:76:0b:6d:0f:58:
4e:d6:dd:cd:11:04:5a:e4:87:e0:ef:1e:77:08:3f:
c8:d1:42:11:e7:62:8c:8a:e3:2b:e8:ed:eb:85:65:
36:e3:07:65:8a:05:4a:a7:4f:36:68:cb:fe:e2:44:
17:0a:bf:72:72:de:14:e7:fd:aa:e3:05:a5:c2:5f:
4d:00:a7:a2:29:81:59:84:b0:5a:4f:46:a3:43:32:
90:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:09:4C:A6:87:B5:C9:BC:EA:97:BB:EC:69:FF:E2:1B:3B:74:5E:FB
X509v3 Authority Key Identifier:
keyid:54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8f:67:59:30:56:06:dd:c3:29:9c:ea:4b:cb:06:5c:32:39:
bd:a8:d1:f1:48:6d:cc:df:ff:c5:04:d0:59:7b:2b:44:d9:15:
94:49:08:5d:43:92:f9:fe:a9:d0:ca:1c:ca:2f:ab:e6:6f:89:
a9:86:68:a8:de:38:46:d4:72:09:5f:15:b3:72:85:18:8d:6b:
6e:59:e8:da:90:f5:b7:a6:79:9c:90:0b:6b:57:be:12:02:6f:
24:c9:9a:a5:fc:e9:4f:25:65:c2:bc:73:f4:5b:71:a8:67:6c:
7c:42:4c:a7:3c:bf:fe:d0:c7:f6:a7:d7:08:1b:1a:a7:c0:de:
a1:e9:08:f5:a6:12:ec:5d:b4:f7:a9:b8:36:ef:a9:f0:b1:69:
77:df:35:cf:29:d6:7b:0d:ab:3d:61:79:0b:ea:61:f9:83:e8:
ce:f2:69:24:2a:7c:27:c2:e6:9f:9f:a9:98:76:7a:3e:24:0f:
71:02:fb:f1:30:5d:96:b5:d3:bd:3c:2c:ac:84:a1:e2:59:87:
26:c9:50:00:81:f3:94:ae:ee:20:0b:be:b6:0a:52:53:81:3e:
3a:de:6c:db:96:c0:a8:9b:b5:55:b7:6f:25:ed:9d:1b:85:de:
a9:b9:33:b1:1a:57:45:b0:03:60:44:d0:7c:0b:f6:b6:20:e1:
d4:63:27:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:35:35 2025 by rpki-client