Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
File: VuhSHoDy8HGjE4W837wxpiHGj5Q.mft (raw, json)
Hash identifier: m//HOaGS5NME+45VKByKr2hjwlUurlunXjyOXfUtT0Q=
Subject key identifier: 5C:B4:53:EB:9D:FC:77:8B:88:36:DE:1D:F5:45:E5:AE:9A:5C:35:76
Authority key identifier: 56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94
Certificate issuer: /CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
Certificate serial: 0194C3BE9CE28C5B6CAAF99C8397E1FCBFEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
Manifest number: 43
Signing time: Sat 01 Feb 2025 23:00:36 +0000
Manifest this update: Sat 01 Feb 2025 23:00:36 +0000
Manifest next update: Sun 02 Feb 2025 23:00:36 +0000
Files and hashes: 1: KpiK1u-7oNlPqaGEOpva5tIqu80.roa (hash: vrDlG9Whj1tbq7/w82axxPtYLIGv7h9QKF7yo9wku/0=)
2: VuhSHoDy8HGjE4W837wxpiHGj5Q.crl (hash: UBrwQ+lGf/1hzJjiHFE/tycLadIsRzYDPQJhERt0o08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:9c:e2:8c:5b:6c:aa:f9:9c:83:97:e1:fc:bf:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
Validity
Not Before: Feb 1 23:00:36 2025 GMT
Not After : Feb 2 23:00:36 2025 GMT
Subject: CN=5cb453eb9dfc778b8836de1df545e5ae9a5c3576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6a:91:07:27:97:88:87:43:84:93:94:a5:e1:
a2:2f:f9:7a:2e:12:f1:a1:9a:ee:99:36:b5:10:b3:
4c:ca:92:85:86:97:bc:f2:cf:ec:04:18:10:26:39:
23:23:b4:35:65:f6:86:9a:d2:a5:82:0a:20:57:f2:
e0:c3:41:8f:34:b1:6e:0c:5c:2c:15:8f:69:11:36:
ae:b6:01:c0:c3:0e:04:a5:c4:42:99:bf:65:d2:23:
6f:b9:fc:81:e6:18:f3:2f:2e:2b:08:d2:e0:0e:1f:
82:a1:c3:53:7c:90:88:11:cc:17:a7:11:cd:32:ea:
71:a7:28:6f:fb:af:9f:48:bb:4c:42:1f:50:7b:e9:
d3:bb:47:fa:1b:c5:d9:30:ce:68:16:b0:07:9b:b9:
fe:7e:a4:97:3d:a4:24:b7:80:5b:f3:0c:32:87:0d:
88:96:09:b6:96:f0:37:95:ee:9f:5f:34:53:2d:f5:
8d:8b:51:84:b7:83:8a:ff:fd:e5:e4:05:84:17:ea:
c6:72:ca:e2:01:50:ca:de:e7:22:e0:9a:86:0c:9d:
f5:99:67:bd:16:d5:df:91:a5:64:f7:c7:86:5c:fc:
f1:6b:f8:16:d3:6f:d4:15:79:4e:6e:88:91:58:54:
85:ca:ee:75:5e:8c:5e:bf:a8:7c:ad:1d:cb:fa:13:
3a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B4:53:EB:9D:FC:77:8B:88:36:DE:1D:F5:45:E5:AE:9A:5C:35:76
X509v3 Authority Key Identifier:
keyid:56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f2:c9:bc:78:49:c5:d8:ab:d3:83:ea:e5:25:20:c0:e1:b8:
89:1f:84:6c:c2:1a:81:ab:e0:88:b9:00:eb:8d:97:3b:3b:75:
c4:9e:29:e0:df:f2:50:b7:6d:58:eb:56:e4:cc:45:6a:db:a3:
2f:9a:75:95:6a:30:07:7e:d7:4b:1d:50:13:c8:73:14:93:8d:
94:cc:1b:2c:eb:66:29:b6:36:93:7d:89:1e:48:99:1c:2b:2f:
a5:43:61:7e:ae:fb:8f:b7:6f:0f:65:d9:2d:bb:c0:26:1b:84:
32:54:e1:da:03:19:c2:c9:60:7f:d4:65:cc:22:32:61:6d:54:
10:e6:84:60:4f:27:a9:0d:9f:1b:82:93:20:2a:42:cd:c0:8a:
3a:1c:c1:0a:ab:45:04:e5:b2:dd:b7:49:d5:f9:a5:dd:ac:45:
40:99:21:38:20:96:fd:a4:a3:11:b8:46:b8:a1:cc:d4:6a:94:
16:b6:4e:b4:12:8b:fc:7e:84:7c:af:7f:8f:18:fc:74:c1:9d:
7d:d0:75:d0:28:85:48:7f:88:e9:a6:bd:39:e8:df:e3:ce:9c:
e7:48:b2:e6:04:1c:98:86:71:b8:f6:c3:8f:d9:64:78:ab:3d:
24:a9:26:58:45:73:d3:17:9a:90:8e:c3:c6:3c:16:66:ef:29:
d4:94:d5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:47:43 2025 by rpki-client