Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
File: VEBNpgLasGJb5yI9CTILHNeq_O0.mft (raw, json)
Hash identifier: m1IRmZZ0sjSrwZ+7eQ9xIgxRD8gztaWDfMZPfVSZ/AM=
Subject key identifier: 31:32:0E:DA:26:28:87:6F:AE:DE:53:58:3C:28:A8:90:36:EA:D0:2D
Authority key identifier: 54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED
Certificate issuer: /CN=54404da602dab0625be7223d09320b1cd7aafced
Certificate serial: 0195127E5F72FE3DDE70CA986BE19F082B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
Manifest number: 145A
Signing time: Mon 17 Feb 2025 06:00:26 +0000
Manifest this update: Mon 17 Feb 2025 06:00:26 +0000
Manifest next update: Tue 18 Feb 2025 06:00:26 +0000
Files and hashes: 1: AVXIwLCLhIME5EnzGQR1npjdBLE.roa (hash: 1umjvWLRSMzW2RXwAqjP/wPqEKQLsMIeWrHdQp5MSFI=)
2: VEBNpgLasGJb5yI9CTILHNeq_O0.crl (hash: dOnxpY+y+ksoMuyKGBSEPLwpWGeuQoXG8Xebkpf0jkM=)
3: alBKH0o_4kzhleiX69soFknJKkc.roa (hash: 0xl3ZFg/7Sno8/QF5nbiqzzuYWBqhpcMDwGXyIlAUiw=)
4: kVbSHrAHHzDssRXONUlwJ1GWoHU.roa (hash: mu0OOdtXupXjhLysliKeG+XZYEBhpCYVNN9APqeB6iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:5f:72:fe:3d:de:70:ca:98:6b:e1:9f:08:2b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54404da602dab0625be7223d09320b1cd7aafced
Validity
Not Before: Feb 17 06:00:26 2025 GMT
Not After : Feb 18 06:00:26 2025 GMT
Subject: CN=31320eda2628876faede53583c28a89036ead02d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:78:3e:3f:5f:2e:97:fd:c5:42:20:ff:45:c1:
f8:c6:10:0f:5a:af:74:90:a7:f7:ca:83:47:fe:aa:
4b:19:94:f8:27:ce:fb:89:e1:bb:63:4d:68:b0:31:
3a:93:97:8d:d8:ca:58:69:8c:1c:c0:90:a6:d8:2b:
59:36:ea:d9:17:41:3a:6f:c1:20:c9:eb:3c:55:e5:
8d:82:df:5a:33:09:76:66:af:d5:ec:c9:f8:4d:6d:
31:43:ef:9e:8e:97:ef:99:d0:d5:50:2b:6d:48:07:
c2:48:b2:9c:3a:96:51:73:d5:38:00:0f:77:0c:6d:
86:fe:17:13:ed:9f:b0:77:10:ab:cb:8d:dc:ff:f4:
ff:55:27:5e:a3:6c:e9:f3:7a:27:2c:1e:e6:b0:d2:
72:0e:c8:f9:8a:23:c3:70:d3:b9:c6:f0:84:7b:f0:
6d:3d:3f:4d:f9:21:62:c9:9a:13:96:f6:55:1b:b5:
91:c0:0d:b0:f0:f3:29:b0:9a:c1:91:c8:4f:c3:36:
62:62:07:ad:70:76:a4:3a:3d:f6:49:3a:df:c7:b2:
fc:b7:05:3b:d9:55:f5:7a:da:fe:c7:0f:f2:6c:6e:
65:33:03:07:ec:bb:d9:ff:94:d9:12:ed:66:71:d8:
18:f5:b0:ff:c7:9d:0d:31:c7:78:20:93:bf:1a:e7:
13:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:32:0E:DA:26:28:87:6F:AE:DE:53:58:3C:28:A8:90:36:EA:D0:2D
X509v3 Authority Key Identifier:
keyid:54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ca:50:a3:d6:4b:85:9c:f8:39:58:bf:81:16:4e:a8:9d:7f:
6e:75:83:20:a1:da:c4:90:70:57:3b:71:61:89:47:ed:cc:cd:
de:13:c0:e2:e4:32:95:cc:ea:5c:ee:b6:54:77:0d:32:47:7f:
10:91:88:25:02:5b:15:c6:e4:4e:5c:fb:5d:78:27:ea:87:10:
09:b5:28:2f:f7:29:69:ce:ed:c2:40:1e:ee:81:50:ab:78:1b:
00:13:fc:5f:fa:f6:59:8d:1a:5e:19:a7:3e:39:6f:8e:8e:93:
dc:60:38:df:f4:28:d6:a2:66:40:3f:0b:75:65:59:11:c5:cb:
89:a6:00:d0:43:15:86:9a:2f:c0:e3:fd:16:4c:85:c1:dd:cf:
fc:e8:a1:22:02:2a:d8:6d:13:bc:62:43:de:08:e6:46:b2:46:
00:42:53:14:9a:ff:49:f7:48:14:56:32:3f:14:7d:9a:2f:da:
75:3a:2e:0d:5c:64:54:a5:dc:fd:82:c7:47:04:0b:6d:c4:f3:
5a:f5:b5:8d:c6:80:ab:83:20:c2:61:fb:8c:6c:0f:e5:3b:c0:
53:5b:85:ff:29:c5:bc:44:1c:a1:ea:79:24:fb:97:29:f7:ae:
20:1f:01:f4:59:75:e7:b4:94:53:7e:17:70:86:ab:80:81:9c:
21:39:a4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:51 2025 by rpki-client