Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
File: VKMasDPP0t7mhS-p2L9aSg41JBQ.mft (raw, json)
Hash identifier: PHQ8trG9Ru7EWAYhkKZ+dwKLw/Vgf69GuFtNA+DNHYY=
Subject key identifier: B9:32:27:BB:8E:84:A2:5D:A3:09:AD:78:DA:9F:74:A5:B3:66:84:58
Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Certificate serial: 0194C507D8484D5A335999CD3E978CE9B9C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
Manifest number: 12CB
Signing time: Sun 02 Feb 2025 05:00:13 +0000
Manifest this update: Sun 02 Feb 2025 05:00:13 +0000
Manifest next update: Mon 03 Feb 2025 05:00:13 +0000
Files and hashes: 1: 3K2zhAcdKtLzb7_Jnbk2BtRstac.roa (hash: Nhwyd3BNcUeHDaZYJor5anwz5rb2CFfZTtP7ROQybhk=)
2: 6q_G_Z0qExivoFkdxz0SlPRdfWc.roa (hash: 4SryP0DdQLuQOQZ+IBOlNc/zDAm8n4lQ1lbM4SRDA1Y=)
3: VKMasDPP0t7mhS-p2L9aSg41JBQ.crl (hash: eeP1/At5jNWlOWwbXvpxYmMEYOXVlJIPEMNWMwWWEGA=)
4: ifGxlDc1irW7Eg9g-9ztDuocTCk.roa (hash: ZhfDpWXnZEi0EZr5I/ly231LZJr36arOyCqZMKGb1rE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:d8:48:4d:5a:33:59:99:cd:3e:97:8c:e9:b9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Validity
Not Before: Feb 2 05:00:13 2025 GMT
Not After : Feb 3 05:00:13 2025 GMT
Subject: CN=b93227bb8e84a25da309ad78da9f74a5b3668458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:31:07:4b:ea:9b:5f:4e:2a:9b:56:04:c8:f8:
26:ee:fd:09:dd:37:b4:8c:7d:93:2a:b1:45:71:c3:
dd:39:29:c4:5a:81:87:dd:a1:cf:43:74:35:54:3b:
aa:82:ce:54:cc:8c:0c:3b:38:5d:c7:cf:ee:43:67:
0c:93:48:3b:df:f2:22:cf:2e:20:b9:3f:a2:33:1c:
b4:13:7b:0c:b0:cc:64:20:ab:b5:82:05:0d:3f:46:
b1:ef:70:cb:af:14:a9:a0:b4:0e:ae:35:99:3b:b5:
b6:4a:a4:44:4b:22:78:ea:38:b1:12:23:5f:3d:6b:
94:29:2b:ee:a1:41:d6:2f:c8:42:90:3f:ad:6c:85:
8f:44:6d:a0:87:59:d1:ea:95:69:12:fb:2b:84:64:
9c:d3:15:a0:98:1a:c4:0c:29:89:fd:db:1a:aa:e6:
fc:4b:28:a4:66:a6:0b:b8:84:21:88:c4:11:8d:c3:
fc:b9:65:47:40:c7:ba:fb:61:86:9e:ff:12:8f:74:
17:e3:7a:67:d4:e5:cc:14:d0:d6:d5:b8:d0:37:f8:
b5:1b:9a:45:f6:9e:67:0f:a3:36:dd:75:46:2c:ce:
c9:ee:6b:17:6e:76:aa:6c:7d:28:bc:ab:ec:1c:3b:
b0:08:55:f4:ea:a5:da:b2:75:70:ec:2d:17:2d:84:
cc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:32:27:BB:8E:84:A2:5D:A3:09:AD:78:DA:9F:74:A5:B3:66:84:58
X509v3 Authority Key Identifier:
keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:03:3f:7a:99:22:9c:5b:77:1c:27:26:67:32:95:87:d0:4e:
4d:05:8b:16:14:e6:35:15:6f:b4:20:ee:19:a4:94:da:2a:7b:
bf:63:28:d5:39:a6:c6:3a:02:36:1b:9d:cc:59:17:a8:73:94:
5f:c3:29:c8:6d:a4:8f:3f:f5:e4:a2:5e:51:70:16:33:c5:a4:
69:57:cd:52:85:73:99:13:52:23:bd:9b:ad:5a:7b:0b:28:61:
00:5e:b1:12:73:31:31:b3:4f:c7:69:df:21:59:e9:cb:53:d8:
e3:b3:4e:93:96:48:95:d4:58:07:97:d7:ea:c9:7a:2c:24:bf:
f2:41:d9:f9:50:2e:ba:c1:29:a0:a8:89:cd:9a:8e:c7:de:8e:
92:ab:f6:08:1e:cc:a0:14:75:d6:8c:5f:7a:dc:13:e6:b1:40:
c7:44:1d:78:c0:fd:86:82:9a:31:68:91:2f:6c:e4:6c:fb:12:
8e:25:d8:38:9e:b9:61:d6:a4:52:7e:63:54:fa:78:44:e8:f7:
96:91:61:2c:ac:c6:45:6a:68:26:70:99:19:14:f1:1b:95:de:
0e:54:16:77:ce:86:1d:f8:ed:c7:f6:c3:ef:ea:f9:0c:0c:35:
f3:47:16:74:53:88:4e:2c:47:48:67:1f:45:7c:bc:12:84:e1:
10:f9:99:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:27 2025 by rpki-client