Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
File: vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft (raw, json)
Hash identifier: KxnppvhVPXrJpjl4xptiNFGqLRqhKbz+zRE9NdAq5KI=
Subject key identifier: 44:37:CA:C0:F0:16:96:24:34:3B:1F:A7:5C:0A:64:43:5E:A5:29:30
Authority key identifier: BE:ED:14:BF:4E:46:B1:35:79:58:3F:97:FF:85:91:0D:10:3A:53:F8
Certificate issuer: /CN=beed14bf4e46b13579583f97ff85910d103a53f8
Certificate serial: 019512473249169B62ACDA02158C8CD31404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
Manifest number: 13EA
Signing time: Mon 17 Feb 2025 05:00:10 +0000
Manifest this update: Mon 17 Feb 2025 05:00:10 +0000
Manifest next update: Tue 18 Feb 2025 05:00:10 +0000
Files and hashes: 1: YWfBB1A6AsyoVHWPYh_PG8Oqc7Y.roa (hash: 5j8p5mvaO4of1g1DTD7WjWWwx2W9IRdFQlgp9hnSnts=)
2: vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl (hash: yegSwyfJbErhMnXfGx0N0tASnIQlMOWa9mv8Zk1wC5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:32:49:16:9b:62:ac:da:02:15:8c:8c:d3:14:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beed14bf4e46b13579583f97ff85910d103a53f8
Validity
Not Before: Feb 17 05:00:10 2025 GMT
Not After : Feb 18 05:00:10 2025 GMT
Subject: CN=4437cac0f0169624343b1fa75c0a64435ea52930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:30:0b:7b:c7:65:0a:1c:0b:ca:72:48:6f:
71:fd:6c:2a:bf:d2:bc:87:66:d0:bd:65:02:c7:ce:
89:44:ed:f9:54:10:10:0c:4e:7b:c1:42:30:11:d4:
9a:39:af:0a:5c:70:23:fd:a2:2b:1f:65:3f:cb:9d:
10:1c:34:e5:40:8a:b5:6b:c6:61:28:b4:9e:3b:7a:
5c:47:b7:39:a4:53:2d:10:83:ce:81:81:f9:b6:42:
e9:4b:82:ba:3d:e4:ff:80:b0:d3:c2:4d:c7:1e:90:
64:07:25:8b:83:9b:01:6e:68:44:02:e8:3c:e5:f2:
a1:d8:99:6f:79:8a:91:fb:66:68:1c:7a:38:b5:39:
fc:16:00:18:98:01:70:f5:03:92:cf:67:1e:98:2d:
12:a1:d9:a2:2a:71:a9:41:56:60:2e:03:0e:e5:67:
bf:43:6b:7b:9b:1f:1e:95:fb:f8:4a:f0:53:b2:e3:
7f:52:4a:79:5d:88:7c:27:7e:c8:b3:d6:76:62:25:
fe:e8:b9:ee:2a:32:39:8a:bd:09:2f:68:a6:ea:70:
a5:1b:9e:6d:71:d6:3b:07:ba:3e:1d:0c:52:61:96:
38:ca:0d:bb:52:57:c9:7c:f7:83:21:7c:6c:55:ed:
0a:e5:48:c1:30:6b:c9:3f:64:de:27:d3:17:d0:63:
8d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:37:CA:C0:F0:16:96:24:34:3B:1F:A7:5C:0A:64:43:5E:A5:29:30
X509v3 Authority Key Identifier:
keyid:BE:ED:14:BF:4E:46:B1:35:79:58:3F:97:FF:85:91:0D:10:3A:53:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:06:25:bb:86:c3:fb:d5:d1:f9:fd:da:a2:9d:45:ad:cc:8e:
de:69:81:f9:74:2d:f6:47:af:76:4e:36:18:86:13:1a:06:1c:
39:81:40:51:30:57:07:60:d0:12:7e:4f:eb:ed:0a:fa:81:cb:
d4:7b:1e:50:8a:67:a9:9f:5e:16:4c:cd:cd:ad:9d:68:06:20:
19:f0:18:24:c3:1c:a2:e7:14:3f:65:92:5a:d8:70:8a:b7:23:
09:af:c1:12:87:b8:fd:8f:6a:30:3c:07:81:46:8b:e6:76:e0:
d2:12:57:f7:ce:24:3c:04:6f:f2:2b:e5:3b:08:01:7e:77:66:
3c:42:fa:dc:aa:b5:64:c7:ba:f4:ee:8c:51:fb:74:81:f0:c7:
0b:a4:41:9b:1e:ba:73:f0:35:74:07:fb:0e:4e:f1:d1:f8:44:
97:86:6b:ef:b1:09:22:4e:c2:31:02:ce:d8:8c:b6:49:c5:97:
a9:9e:cb:7d:20:82:5c:40:da:1e:2a:b9:a1:13:97:42:2b:45:
92:e4:1b:65:d0:b6:d6:39:cd:79:ae:ea:dc:89:1e:b5:47:bc:
73:bb:50:83:70:04:7f:97:ca:25:e9:c3:11:28:e6:53:26:32:
29:be:64:80:0b:b9:91:e0:8a:25:1d:7d:e3:b3:95:48:fb:d3:
29:31:7d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:58 2025 by rpki-client