Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
File: VhxILbWscM1l8s5s5ffiW4929Gk.mft (raw, json)
Hash identifier: oueBBx35BTQIVKJfJsdnr7IzpLu/Jbt2ds2su0X5Sp8=
Subject key identifier: 4C:B5:B8:03:87:5D:72:04:E2:A9:34:FF:A5:92:87:3B:12:89:2B:1D
Authority key identifier: 56:1C:48:2D:B5:AC:70:CD:65:F2:CE:6C:E5:F7:E2:5B:8F:76:F4:69
Certificate issuer: /CN=561c482db5ac70cd65f2ce6ce5f7e25b8f76f469
Certificate serial: 0194C3873CB0F5BDEC8CF0F7833878ABF874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
Manifest number: 0803
Signing time: Sat 01 Feb 2025 22:00:07 +0000
Manifest this update: Sat 01 Feb 2025 22:00:07 +0000
Manifest next update: Sun 02 Feb 2025 22:00:07 +0000
Files and hashes: 1: VhxILbWscM1l8s5s5ffiW4929Gk.crl (hash: oLYjP4ZChMx1DQd+BJh998zLcy9aC1rhZIQEr80DOeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:3c:b0:f5:bd:ec:8c:f0:f7:83:38:78:ab:f8:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=561c482db5ac70cd65f2ce6ce5f7e25b8f76f469
Validity
Not Before: Feb 1 22:00:07 2025 GMT
Not After : Feb 2 22:00:07 2025 GMT
Subject: CN=4cb5b803875d7204e2a934ffa592873b12892b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e7:23:62:c9:bf:d6:fc:63:4a:f8:e4:49:7c:
c3:21:32:4b:09:25:02:31:1d:68:bd:05:07:65:b2:
c3:56:8e:11:4e:7b:b6:05:5c:2a:ba:3a:43:aa:96:
1d:a0:61:c8:d9:b6:5b:ea:81:e6:0d:6b:4c:04:d8:
dd:16:2a:09:4e:72:20:98:8c:c1:a1:ff:72:b4:cd:
8c:d4:69:8a:81:40:8f:ba:bc:ec:8b:a0:09:c1:8f:
ca:13:6b:05:62:20:12:5c:fc:e8:e4:98:68:b4:f5:
94:98:2e:2b:5d:6d:5a:47:d1:19:17:8b:ad:ed:90:
31:e0:b4:57:89:47:e9:6c:1b:be:f2:22:20:73:d7:
8d:e7:7e:93:84:4a:61:12:70:be:22:6e:78:23:37:
b2:60:d4:0c:ab:ca:12:6f:bc:02:09:96:91:c7:67:
e0:c2:ad:f1:32:3a:c0:50:4f:ad:9d:6c:f3:03:a3:
57:a1:8c:ab:48:54:f9:e4:f6:b4:c3:ee:95:72:cf:
32:3b:33:16:83:3c:17:98:d9:39:bb:95:53:9e:83:
17:4b:1f:46:b5:15:fa:0a:89:6f:7e:43:60:51:c4:
2a:07:c0:a1:40:51:e0:7f:61:58:5e:5b:4e:4e:e9:
15:6f:46:f0:03:67:47:60:08:7e:1c:df:9c:41:40:
75:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B5:B8:03:87:5D:72:04:E2:A9:34:FF:A5:92:87:3B:12:89:2B:1D
X509v3 Authority Key Identifier:
keyid:56:1C:48:2D:B5:AC:70:CD:65:F2:CE:6C:E5:F7:E2:5B:8F:76:F4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:68:8f:66:4e:f3:d6:d5:9a:14:c1:f2:49:15:f5:f6:96:ed:
2e:b0:a8:3a:ce:10:63:f1:18:17:26:63:51:cd:d2:b9:b6:ae:
0e:1f:2b:92:37:6a:2c:e4:9f:54:48:a1:36:03:17:86:33:21:
f8:c3:20:f2:b2:6f:2c:47:dc:f3:15:dd:d3:1c:82:e1:1b:fe:
8d:e3:bf:8d:6f:c5:bb:ba:29:4b:a9:7b:63:0a:af:a5:7b:22:
de:98:59:c5:54:d6:7e:d4:74:46:44:b4:d2:16:4f:35:14:2e:
e5:0f:ae:74:c9:cf:05:6a:16:b3:a9:5c:04:7f:38:22:52:4e:
46:aa:76:53:26:9f:0c:71:fd:e8:ff:a9:de:16:3b:71:63:02:
c0:e4:f9:48:db:06:43:e1:70:ef:57:46:1a:a1:2d:3e:1a:7a:
2c:16:b9:73:e3:db:f0:19:ff:ac:82:b5:45:b7:f8:3f:a4:ad:
90:b9:0a:ad:fb:5f:4b:b5:e3:f8:de:b1:3a:be:41:84:17:e8:
a7:ac:d0:89:0d:3e:5b:41:df:98:a6:cf:37:89:8b:18:05:8b:
a3:d4:bf:f4:85:fb:13:dc:64:84:bb:60:fa:cd:5d:ff:81:44:
cc:c5:ce:4d:97:4f:e3:54:b0:e9:6b:16:ee:fc:36:70:45:9b:
7e:25:d0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:48:56 2025 by rpki-client