Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
File: VxRWZJaS5gVm3gCOEmu90dLr7UU.mft (raw, json)
Hash identifier: CS0usfmFzgoBdHPPsakHJjnHAB0YE/V6q//AjH7nqg8=
Subject key identifier: EC:35:A3:94:1A:F6:EC:28:A2:42:48:1D:ED:57:74:F6:A0:0E:CA:7A
Authority key identifier: 57:14:56:64:96:92:E6:05:66:DE:00:8E:12:6B:BD:D1:D2:EB:ED:45
Certificate issuer: /CN=571456649692e60566de008e126bbdd1d2ebed45
Certificate serial: 019510C6BD9989BF7F7E6354AB24A9500008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
Manifest number: 0CD1
Signing time: Sun 16 Feb 2025 22:00:14 +0000
Manifest this update: Sun 16 Feb 2025 22:00:14 +0000
Manifest next update: Mon 17 Feb 2025 22:00:14 +0000
Files and hashes: 1: VxRWZJaS5gVm3gCOEmu90dLr7UU.crl (hash: k+l8aHppcPd5HPMFLkXyMpmWl7hCe7BhTIA0GoEEQK8=)
2: t0KxoFR4-v-aF7ApZp5a51UCPdE.roa (hash: wDmBNX7FNw1Byb+j/pduuukElypr1eZvZiRjB9AwIB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:bd:99:89:bf:7f:7e:63:54:ab:24:a9:50:00:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571456649692e60566de008e126bbdd1d2ebed45
Validity
Not Before: Feb 16 22:00:14 2025 GMT
Not After : Feb 17 22:00:14 2025 GMT
Subject: CN=ec35a3941af6ec28a242481ded5774f6a00eca7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:89:81:7c:a6:75:20:ca:f8:75:94:32:33:de:
92:15:df:14:76:11:04:71:d6:f3:88:a8:eb:e9:1a:
1f:b8:b5:76:dc:8d:db:6e:ef:ac:0f:e1:f0:b8:bb:
49:13:64:56:38:b9:92:43:1a:b8:bb:50:9e:a2:44:
31:9b:d2:16:26:b0:b4:b2:c1:2a:ec:3b:ba:5f:05:
7d:0b:b1:63:bc:27:3c:a7:a1:81:e8:dd:d5:0e:d9:
8a:7c:5a:ca:4c:4f:0e:67:9f:d8:9c:d2:ca:b0:de:
6a:15:b7:94:a5:ef:e9:ae:45:78:dc:9a:7e:b8:9c:
73:9a:64:f0:60:3e:28:e2:13:a1:87:bd:78:4d:9e:
95:5b:dc:10:8f:3c:74:c8:78:fb:ca:f1:1b:02:ae:
a2:65:39:44:99:10:20:3d:e7:3e:5f:c7:05:57:93:
fa:b8:0c:f7:fc:b2:40:0b:e4:79:68:f6:55:76:8c:
85:75:bc:0d:4e:9b:e6:91:4e:3a:87:0f:ce:ff:db:
d2:8e:a1:4f:a4:50:41:00:64:5e:cc:66:39:1e:e0:
7c:b7:cf:47:f6:33:f6:33:d8:c0:cf:8a:a5:76:43:
4e:28:53:10:63:49:7d:18:af:e9:a1:24:b9:52:98:
91:37:24:00:43:0f:6d:ce:7f:68:13:f6:63:c7:be:
f5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:35:A3:94:1A:F6:EC:28:A2:42:48:1D:ED:57:74:F6:A0:0E:CA:7A
X509v3 Authority Key Identifier:
keyid:57:14:56:64:96:92:E6:05:66:DE:00:8E:12:6B:BD:D1:D2:EB:ED:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:aa:ac:92:16:8f:64:a0:43:98:ad:7d:be:e0:4e:39:41:c1:
07:d5:7d:58:ed:0a:a1:38:ae:30:00:39:cb:fb:23:16:03:b4:
89:cb:27:25:21:4c:91:f7:26:68:5d:d1:3d:6f:b6:67:31:5f:
49:54:b8:a3:38:96:da:74:31:66:a0:4e:d6:dd:0d:35:82:a6:
72:3c:c4:7f:2f:f7:bf:92:21:15:48:e4:fa:7d:39:4b:80:27:
2b:07:44:e9:53:33:e7:4a:14:bd:4f:50:c9:e6:43:e8:01:3a:
f3:0a:22:ec:d1:22:12:eb:7b:3c:82:c4:f5:81:de:b5:b1:8e:
79:e3:5d:bb:fa:35:58:ab:a6:a3:3c:99:9c:38:31:b9:cb:ca:
c9:b1:ea:d2:e5:bb:2b:57:7d:e4:7d:ab:b1:a6:05:c7:2a:36:
d0:22:29:0e:42:ef:bc:a5:e4:cf:6f:e7:bd:42:a7:02:34:a0:
2e:34:a5:0a:aa:a1:c9:fe:14:8b:1e:30:c8:74:90:13:a5:7e:
29:0a:c2:a7:f6:68:91:84:3d:08:35:65:31:70:01:c0:19:18:
14:f1:79:dd:3a:15:43:b0:8f:87:e1:c8:5c:e1:b8:e6:c4:09:
ce:75:a8:c2:62:39:94:ca:14:7e:bf:07:dc:59:56:2c:47:6d:
b3:64:9c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:09 2025 by rpki-client