Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
File: VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft (raw, json)
Hash identifier: gbJOP75/SSbuIrBry7ydxU2ASnaP/i5buCV1uBEj7Fw=
Subject key identifier: ED:C1:90:7C:48:8F:EE:81:55:2E:45:F3:35:66:FC:BB:93:BE:BF:C7
Authority key identifier: 54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
Certificate issuer: /CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Certificate serial: 019511D9440EC36B08AAE5028114729EA28F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
Manifest number: 0F34
Signing time: Mon 17 Feb 2025 03:00:06 +0000
Manifest this update: Mon 17 Feb 2025 03:00:06 +0000
Manifest next update: Tue 18 Feb 2025 03:00:06 +0000
Files and hashes: 1: 8ywt7YsrRBMREchgHLgyKhwPgx4.roa (hash: aCuMcxrQC+7OXrTGuhaVav/hwtQSKlgeWzdcYZWQMpw=)
2: VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl (hash: kPY3/hkdwHz8iApKBy+wmUM+jq5p7h64rCBII+EQntI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:44:0e:c3:6b:08:aa:e5:02:81:14:72:9e:a2:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Validity
Not Before: Feb 17 03:00:06 2025 GMT
Not After : Feb 18 03:00:06 2025 GMT
Subject: CN=edc1907c488fee81552e45f33566fcbb93bebfc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ae:57:79:83:b8:16:3e:c6:ec:54:b4:0d:26:
ff:e0:c5:b2:2a:5b:03:05:e1:12:c8:e9:15:ed:6c:
1b:5e:fd:e7:4f:f7:9a:97:ce:49:b0:7d:d2:73:ac:
2f:77:4f:c0:1c:a9:55:6c:0d:f4:7d:92:c5:06:92:
8d:ed:17:7d:b6:fc:ba:fa:9c:22:9f:94:69:16:ee:
69:e0:3e:aa:0e:75:d1:3d:1e:d3:4c:a5:72:ee:ce:
3c:71:d6:0c:21:f6:7a:a9:2d:d1:a6:4a:e6:16:87:
3a:56:eb:27:c2:4c:17:3b:4a:6b:be:04:08:6c:0f:
af:71:99:4a:09:af:5c:12:80:a1:84:c2:dd:b2:17:
c9:a0:e0:4f:b6:30:da:da:02:50:18:26:d6:f3:85:
33:27:0a:57:e7:8c:f8:38:f8:56:a5:67:22:b0:cb:
36:f4:78:72:2f:f2:2d:32:53:d1:96:83:51:ff:71:
a2:c6:c7:a1:6e:c7:2d:e5:6b:82:cb:1a:4d:72:35:
0f:74:ad:3d:24:c7:94:e3:d2:a8:26:40:b3:ce:5b:
ef:76:0d:3c:ff:ef:ec:3b:0d:86:0c:e5:64:3e:a5:
76:6c:d8:3e:af:da:49:5c:02:76:37:4c:67:58:0f:
63:70:c8:7d:7a:59:2a:3c:29:c5:8f:90:82:84:be:
dc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C1:90:7C:48:8F:EE:81:55:2E:45:F3:35:66:FC:BB:93:BE:BF:C7
X509v3 Authority Key Identifier:
keyid:54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:03:67:9f:83:00:24:7c:90:7c:1d:9e:36:df:a8:59:e3:51:
7c:1f:4f:e7:e1:fa:50:e2:d8:3c:51:50:1b:b3:44:86:2e:0a:
ad:a9:12:57:df:19:bf:81:e4:8a:69:03:a8:7d:8b:2e:fe:c8:
43:45:28:a0:0c:bd:97:b3:f7:ce:ff:e6:4b:8e:49:a6:33:2e:
1d:9e:61:f4:ed:ab:b3:25:0f:bb:43:c8:62:54:6f:6c:4d:bc:
37:26:da:81:86:35:78:39:8e:85:b4:bf:ba:87:65:c2:9c:4b:
48:9b:68:9c:98:bf:c8:e3:58:20:0d:96:c6:f4:ed:ff:13:03:
ec:d0:b8:35:64:a6:7b:f2:5f:f3:66:47:fe:23:0b:43:60:60:
31:3a:c9:f4:0c:ba:8d:43:ad:5a:af:25:61:4f:ae:c4:db:a7:
59:a6:09:ed:d8:2c:f7:7f:44:d6:5a:07:c8:c4:6d:f0:17:fc:
3f:43:06:fc:1c:a7:43:97:a9:6b:ed:ad:9f:a8:5c:5f:02:2f:
94:9c:ac:97:3a:4f:c8:14:be:08:c2:7b:8d:f4:f5:1d:25:66:
e3:5f:b5:4e:9a:b5:30:22:b9:08:6a:73:ef:35:5c:b4:0b:6a:
15:4b:79:85:6d:98:97:49:04:71:d3:f0:88:c0:a9:a2:2f:3c:
ed:f6:af:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:42 2025 by rpki-client