Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
File: vQM98D7VHOeSSkgBg7z_208EJTc.mft (raw, json)
Hash identifier: HWn3v1wB9DX0juwipfGtesRU4rKpTQsG9Ob9o5kNUwg=
Subject key identifier: 60:E1:62:8B:CD:15:BF:A6:05:B5:93:86:57:F3:24:BB:E4:BA:47:C2
Authority key identifier: BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37
Certificate issuer: /CN=bd033df03ed51ce7924a480183bcffdb4f042537
Certificate serial: 0194C3BE77416E9608E6C54EC86AB29BD89C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
Manifest number: 22
Signing time: Sat 01 Feb 2025 23:00:26 +0000
Manifest this update: Sat 01 Feb 2025 23:00:26 +0000
Manifest next update: Sun 02 Feb 2025 23:00:26 +0000
Files and hashes: 1: vQM98D7VHOeSSkgBg7z_208EJTc.crl (hash: ECFYNiGHLsRBg6PLWjYBihVmp90qRIn0/bKZD3IkCIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:77:41:6e:96:08:e6:c5:4e:c8:6a:b2:9b:d8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd033df03ed51ce7924a480183bcffdb4f042537
Validity
Not Before: Feb 1 23:00:26 2025 GMT
Not After : Feb 2 23:00:26 2025 GMT
Subject: CN=60e1628bcd15bfa605b5938657f324bbe4ba47c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:28:4f:86:a5:66:32:86:14:0a:aa:6f:e9:13:
a0:3e:74:41:0a:4c:2c:c1:34:7a:c9:c0:28:72:bf:
b8:8a:c0:c4:2b:9d:e6:8f:8e:c9:8c:79:a0:cb:dc:
fc:14:b4:ff:26:9b:ad:4d:c8:95:64:41:a5:8c:94:
a8:5f:f9:75:67:93:45:57:8d:50:b2:cf:11:df:97:
6e:86:0c:68:79:ec:14:68:66:71:60:4a:bb:80:01:
54:dc:cf:39:53:2e:2e:46:cd:d9:b0:ad:90:17:d4:
35:dd:09:dc:0b:02:e2:d9:27:01:e1:2b:72:42:6e:
df:95:71:06:99:2f:40:31:83:49:c9:12:81:02:9b:
67:47:8c:20:98:70:f4:dd:e7:52:e1:2c:6b:e2:1e:
0e:9d:3d:06:b8:77:11:27:bf:e2:00:93:30:13:fb:
bc:cc:83:46:0a:de:a9:14:9c:47:42:36:9c:d8:15:
d7:11:6e:85:17:69:4b:d3:56:36:3b:6c:37:51:fb:
c0:7e:03:da:49:11:2a:be:cf:cb:be:50:92:7c:2b:
52:3c:0e:f5:20:e6:a9:04:7d:19:1d:53:80:e1:5c:
00:be:24:e3:78:b3:2b:b2:19:b0:cd:e8:59:f9:2c:
d0:e2:c4:da:33:64:27:30:9f:02:b8:8e:de:c7:b2:
1b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E1:62:8B:CD:15:BF:A6:05:B5:93:86:57:F3:24:BB:E4:BA:47:C2
X509v3 Authority Key Identifier:
keyid:BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:94:2e:e6:4c:de:74:a8:2e:68:f0:d6:26:f2:90:3a:91:33:
58:e9:e0:a8:4d:ed:36:13:c4:46:80:ab:42:a6:7d:c8:f6:0d:
78:dd:fb:20:e3:be:01:a9:73:87:40:d3:88:bf:75:9e:c3:02:
17:ea:11:50:59:64:88:35:ea:dc:3f:de:50:8e:ea:a6:80:64:
b5:fd:83:c2:39:21:87:f2:24:ef:fd:5a:34:19:88:23:f2:24:
78:71:82:86:70:cc:9d:2c:9d:5f:43:f3:7f:5f:6a:13:c2:fe:
0a:5c:af:cc:6b:83:06:a1:c6:d9:f8:bd:d0:9c:bb:c3:80:f1:
b1:69:8f:f4:f2:ab:9c:0c:9e:77:68:8c:4d:43:2e:e6:5e:3e:
4b:5c:e0:4e:5d:b8:83:03:50:af:48:e5:e9:c6:33:cd:58:f7:
09:81:90:5a:f5:13:26:e6:49:40:cc:c4:fc:3c:2f:96:2c:ae:
2b:17:1c:64:b4:ae:41:68:9e:ac:0e:2e:1c:7f:50:03:95:0e:
c6:29:39:fa:a4:8d:19:b4:7d:e3:5a:ea:4e:1c:f2:ce:db:20:
eb:e9:b9:8e:02:48:d5:42:51:59:c3:9b:45:fb:20:f6:35:ad:
c5:62:0c:44:ce:ed:d7:c5:bb:48:02:85:89:c3:1c:47:1a:00:
80:c2:7c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:53:04 2025 by rpki-client