Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
File: Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft (raw, json)
Hash identifier: IfWohPTroDEdEpI3Yjo2BrgVwyxj+kBtCuePduxtQZI=
Subject key identifier: 51:FA:92:26:A3:F8:F5:C0:11:7C:CE:73:33:B1:DB:6F:3E:C8:45:BD
Authority key identifier: 56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
Certificate issuer: /CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Certificate serial: 019510FDAA730064CB171543F38842261631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
Manifest number: 0911
Signing time: Sun 16 Feb 2025 23:00:14 +0000
Manifest this update: Sun 16 Feb 2025 23:00:14 +0000
Manifest next update: Mon 17 Feb 2025 23:00:14 +0000
Files and hashes: 1: Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl (hash: CvYSee0KHIjPQiU5BGzS32UtAyARk7zIyh/MfkygvCE=)
2: Vz7t1xxZS7Y8mi76AGQLhqb1ZQs.roa (hash: f5Op16EAB77dhVLhwIcxz3vKwaJVulfI7NYLkrJ/rQU=)
3: reLkqggetUctFOKXfyoXX7VB7AA.roa (hash: mWj2m9BfD30uCVlB2O3NlLuI0ufXtR+chyS8T5aSe4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:aa:73:00:64:cb:17:15:43:f3:88:42:26:16:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Validity
Not Before: Feb 16 23:00:14 2025 GMT
Not After : Feb 17 23:00:14 2025 GMT
Subject: CN=51fa9226a3f8f5c0117cce7333b1db6f3ec845bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:df:6a:36:69:ab:91:d7:c9:5d:2b:2c:cb:66:
1e:2e:ab:ba:4a:05:8b:81:38:17:91:11:e2:ff:51:
65:ab:d1:3c:88:12:36:e2:87:e6:76:0f:63:ed:38:
7e:56:9c:81:9f:4c:34:c2:56:e9:16:d3:56:88:70:
de:8e:99:c4:fa:c5:2f:7a:e0:bb:c7:69:5e:9f:d8:
3f:dd:ed:83:73:03:19:47:f2:d3:45:53:5d:56:15:
9e:c1:76:02:52:24:1a:97:76:0d:84:c5:8f:09:b6:
b1:82:d1:26:56:5d:a1:03:f8:66:42:87:6d:04:ab:
a9:f0:8a:f9:45:00:27:ca:f4:17:0a:cf:71:31:13:
6e:07:f7:34:d2:88:94:c5:7e:a1:1a:c9:97:cb:c0:
e8:d6:50:be:a2:3c:3e:9c:fd:34:21:c3:06:b0:2d:
03:6f:d4:ed:8f:84:fd:35:cf:59:02:1b:29:cc:73:
ba:24:ff:10:19:af:b8:26:d0:84:61:66:ed:51:fd:
4b:9d:49:ad:22:56:c8:54:fa:cd:02:5f:3d:29:ce:
ea:2f:2a:86:d5:0e:97:1a:a9:cc:ec:e8:2b:bc:02:
56:44:bb:3b:56:32:18:e8:1b:d4:ca:56:c2:14:2c:
cc:06:ae:e1:59:cc:e2:3a:c1:93:52:56:85:31:3c:
ed:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FA:92:26:A3:F8:F5:C0:11:7C:CE:73:33:B1:DB:6F:3E:C8:45:BD
X509v3 Authority Key Identifier:
keyid:56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:76:c0:e6:21:48:90:9f:af:e6:1b:9a:29:03:b2:c0:46:9e:
3f:4a:c8:07:6b:1c:25:1c:50:92:07:b4:39:be:47:01:ec:bd:
1e:17:b4:e2:3d:e7:e8:db:77:3c:8f:33:ac:10:b8:85:bc:ca:
25:90:64:a8:53:84:58:0c:bb:39:ee:b0:50:15:9e:cd:4c:ec:
64:82:84:d4:19:21:56:45:39:76:1c:3d:fa:aa:9b:31:31:69:
a9:60:1b:01:86:9e:2e:4b:04:5f:52:43:4b:5e:a1:38:b9:af:
64:95:cf:37:e2:23:bf:ac:25:7e:2a:e0:f4:2c:3c:ec:96:39:
22:b5:46:9c:c1:a5:a5:0f:6d:6d:d5:aa:c4:a0:39:9e:1c:37:
fb:a5:f6:a8:83:67:d5:de:1e:62:84:06:b5:d0:0c:d1:20:42:
4b:0e:3f:a2:74:b6:d8:aa:ce:5b:a9:3e:2b:87:87:b7:4e:3e:
55:a0:c3:6b:d2:b6:24:b1:c4:b8:db:51:13:3a:0e:b8:9c:dc:
74:dc:27:f1:50:65:1c:08:28:15:b8:e4:b2:55:68:d2:94:e4:
48:0d:65:51:31:d5:2f:73:5d:96:a5:8d:67:27:c8:42:a7:0a:
13:8e:ca:ff:50:84:1e:a5:fe:b0:5d:71:ca:4d:bd:66:34:83:
c8:b1:a3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:29 2025 by rpki-client