Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0184bd-b5d2-4b9c-916b-d0456f729873/1/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.mft
File: vdZBBaGdzVxnXAo_mO6MYE6Ajxs.mft (raw, json)
Hash identifier: aga9VBWwimxhlpWiENOBDdnIzTzWm0NCePEHi5T+RD8=
Subject key identifier: A9:76:B8:46:3D:F2:99:4C:20:FC:C3:76:9E:7F:F4:23:8F:3C:10:90
Authority key identifier: BD:D6:41:05:A1:9D:CD:5C:67:5C:0A:3F:98:EE:8C:60:4E:80:8F:1B
Certificate issuer: /CN=bdd64105a19dcd5c675c0a3f98ee8c604e808f1b
Certificate serial: 019510C70FEEABA489F0C829AC7F7D039B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0184bd-b5d2-4b9c-916b-d0456f729873/1/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.mft
Manifest number: 0930
Signing time: Sun 16 Feb 2025 22:00:35 +0000
Manifest this update: Sun 16 Feb 2025 22:00:35 +0000
Manifest next update: Mon 17 Feb 2025 22:00:35 +0000
Files and hashes: 1: vdZBBaGdzVxnXAo_mO6MYE6Ajxs.crl (hash: 1kyUIIaGYCFdwvisoX7CvQkHKo39YcxI3Ul4HGcDDg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0184bd-b5d2-4b9c-916b-d0456f729873/1/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0184bd-b5d2-4b9c-916b-d0456f729873/1/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:0f:ee:ab:a4:89:f0:c8:29:ac:7f:7d:03:9b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd64105a19dcd5c675c0a3f98ee8c604e808f1b
Validity
Not Before: Feb 16 22:00:35 2025 GMT
Not After : Feb 17 22:00:35 2025 GMT
Subject: CN=a976b8463df2994c20fcc3769e7ff4238f3c1090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c4:c3:bd:cb:0b:27:bd:b7:8e:04:64:c1:61:
40:6c:2d:fd:e5:70:4b:ab:98:1d:91:a1:3e:a0:9a:
31:2e:df:8d:87:fd:d7:18:b0:7a:6f:44:f1:55:27:
c5:24:4f:02:2a:44:ff:fa:8a:05:a1:f2:ca:d6:15:
ea:48:1b:ec:aa:fa:ad:c1:63:cc:0f:37:3c:2d:bc:
57:b0:a2:c4:db:b8:54:5c:f4:02:9e:63:d3:38:81:
e5:a4:5e:69:95:4f:be:5a:e0:11:0a:6c:3c:c5:84:
c6:23:d7:75:94:f7:dc:45:88:97:ac:20:5a:85:a0:
18:a0:dd:10:21:5c:75:57:75:2e:ef:91:73:26:e5:
f3:ca:83:da:c3:fd:5f:2f:c6:60:e1:a2:99:67:71:
73:68:a1:c4:89:b4:ab:75:16:12:71:48:e3:59:02:
2d:07:2c:d0:5d:12:7f:a3:19:87:fa:74:77:d4:82:
69:ab:83:16:46:a5:b6:34:17:3a:55:53:14:25:4c:
61:13:8b:97:ad:46:5a:d3:db:7d:0a:52:47:e1:94:
fa:2b:1d:e0:e7:ea:fd:7f:cf:09:3a:8e:33:22:9f:
ac:0a:b1:32:7d:52:1f:2b:84:de:24:e4:3d:65:60:
53:09:26:e0:73:56:75:a7:cc:d5:62:f6:08:a2:b2:
ad:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:76:B8:46:3D:F2:99:4C:20:FC:C3:76:9E:7F:F4:23:8F:3C:10:90
X509v3 Authority Key Identifier:
keyid:BD:D6:41:05:A1:9D:CD:5C:67:5C:0A:3F:98:EE:8C:60:4E:80:8F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0184bd-b5d2-4b9c-916b-d0456f729873/1/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0184bd-b5d2-4b9c-916b-d0456f729873/1/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:cb:5b:ba:f7:95:8e:52:15:6d:d8:39:53:ef:28:4e:73:3c:
42:a5:b5:69:26:fa:dd:8b:22:83:38:89:fb:22:1a:dd:fa:54:
c8:42:ab:84:1b:7f:f1:23:2c:ce:90:c4:bd:da:db:b3:42:bc:
79:38:6b:cc:8c:13:74:3c:fd:c6:77:8c:90:fd:28:0a:f8:a1:
f9:bc:7a:db:0d:d5:b9:74:fb:e6:a1:01:d8:a3:34:bf:87:c8:
c3:96:4d:ed:b7:0c:5f:8c:82:64:2b:0c:47:29:6c:be:e1:0f:
1c:fd:18:ce:3b:75:a9:f9:44:e8:27:36:cd:0a:a1:2f:62:1f:
2b:e9:44:80:d2:69:62:d5:1d:9b:44:20:7e:f4:d6:9f:0c:65:
fd:94:e9:17:03:28:58:89:77:d6:68:b9:80:69:09:55:70:90:
61:96:f7:ca:a9:db:ef:17:8e:65:ec:6c:b3:ca:78:56:82:bd:
bc:3e:38:16:50:c7:64:c5:0f:a6:37:bc:92:64:e2:19:3c:ae:
c0:a8:8d:66:9e:d2:22:ee:e9:ce:04:d5:be:f1:97:d8:bb:64:
a4:22:26:8d:ab:3b:b2:74:13:af:ef:ce:52:71:c4:18:31:41:
85:8b:13:92:05:12:23:d4:e9:d4:06:7d:e1:ec:d1:cc:13:5a:
d3:a5:99:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:39 2025 by rpki-client