Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
File: vK-LpZ96PF0A_grUVk2AUk33-pA.mft (raw, json)
Hash identifier: dn1Uc2M/RRM9dzfFoMsZ87hC253IIETIrqXoem3X11g=
Subject key identifier: AB:8D:3C:68:D0:37:C3:7B:00:8B:E9:74:66:0F:6A:52:D8:ED:6F:E4
Authority key identifier: BC:AF:8B:A5:9F:7A:3C:5D:00:FE:0A:D4:56:4D:80:52:4D:F7:FA:90
Certificate issuer: /CN=bcaf8ba59f7a3c5d00fe0ad4564d80524df7fa90
Certificate serial: 0194C3BE8A6623443281C34ECDC34E4EF3EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
Manifest number: 142B
Signing time: Sat 01 Feb 2025 23:00:31 +0000
Manifest this update: Sat 01 Feb 2025 23:00:31 +0000
Manifest next update: Sun 02 Feb 2025 23:00:31 +0000
Files and hashes: 1: A27u4uaTW6Wfn1YJN7sriqWyvlY.roa (hash: eRUT0mnKKp1D1eZhZRZxpjyCM3yHa+jgOt2PMVH/I+o=)
2: vK-LpZ96PF0A_grUVk2AUk33-pA.crl (hash: tHch0/CwyzetVCNBewdFkAVw6tjR1+idRcISeHcPjUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:8a:66:23:44:32:81:c3:4e:cd:c3:4e:4e:f3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcaf8ba59f7a3c5d00fe0ad4564d80524df7fa90
Validity
Not Before: Feb 1 23:00:31 2025 GMT
Not After : Feb 2 23:00:31 2025 GMT
Subject: CN=ab8d3c68d037c37b008be974660f6a52d8ed6fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b9:6f:2e:8b:1a:fa:75:32:63:34:94:ce:12:
27:d5:64:86:e4:81:d4:65:f5:d2:34:0c:7d:40:e0:
40:6c:ad:1a:73:70:eb:e4:dc:2f:e1:17:4d:82:bb:
fc:d2:5f:b8:21:a6:11:f9:12:35:c8:9c:c8:36:0e:
5a:26:42:40:3b:40:22:d9:e7:f5:99:ed:96:67:cd:
25:a6:f4:7b:2d:d2:73:e4:28:d2:1c:a9:87:fd:8d:
a1:87:fe:7c:01:9e:02:7e:cf:ba:31:72:28:c0:88:
db:41:20:3b:a2:b8:11:64:94:45:45:50:b8:2a:50:
48:e4:ba:c4:37:a8:f9:23:e7:fa:5e:cd:74:d6:cf:
82:c2:99:74:4f:c4:e5:23:ee:1f:e1:48:ef:54:bb:
5c:74:44:ff:5d:3b:cb:69:0c:ff:f9:89:85:7d:2c:
4e:09:33:0b:b8:e5:ff:5d:55:8b:56:07:85:23:38:
6d:44:82:78:ff:d9:2a:63:1a:79:36:a3:e3:69:b0:
fa:2b:39:c7:c4:3e:d3:68:7c:21:a3:9a:52:e4:ac:
ca:19:eb:70:69:ec:a3:8c:16:36:24:fd:18:e0:54:
11:d7:72:0c:6a:1a:13:2e:de:43:dc:cf:4a:51:1f:
b2:2c:23:76:2b:13:30:2d:d0:8b:7b:eb:e3:dc:60:
61:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8D:3C:68:D0:37:C3:7B:00:8B:E9:74:66:0F:6A:52:D8:ED:6F:E4
X509v3 Authority Key Identifier:
keyid:BC:AF:8B:A5:9F:7A:3C:5D:00:FE:0A:D4:56:4D:80:52:4D:F7:FA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:3f:27:ac:ea:c8:56:cb:fb:e0:31:13:7f:ff:2f:bc:6d:d1:
0c:78:2d:fd:e8:28:69:3d:f0:7f:f4:f4:a5:5d:c0:68:b5:5c:
db:18:5c:df:b6:7b:be:a0:1e:1d:45:f7:f0:0a:65:1c:f2:63:
fb:93:d7:89:4c:56:91:65:d4:66:00:db:18:9d:97:dd:22:44:
71:3c:2c:b5:66:66:b2:ff:b0:89:ad:51:61:70:7e:f6:18:0e:
1b:61:cd:3e:29:d2:1b:ef:b5:33:0a:9d:c9:bb:d9:91:32:60:
ae:77:b8:96:69:5e:13:e6:2e:ea:fe:8e:e8:f6:a1:47:20:16:
ab:a3:96:d7:8a:41:84:90:ec:34:4c:9d:ac:dc:db:1c:8f:10:
cd:50:4b:79:55:b5:db:0e:1e:fa:13:36:09:0b:18:c0:39:b3:
22:a2:4c:3c:a6:69:95:2e:92:3b:ae:a5:15:c5:a0:bd:02:62:
60:13:cd:87:cd:70:37:70:73:55:98:c5:e3:57:cd:f7:8f:21:
97:f6:59:24:c5:46:a7:c5:7d:6a:4d:6e:16:08:18:63:af:b5:
2d:2d:71:3c:3a:2e:5a:99:7d:bd:04:c8:bf:68:f6:c2:88:9a:
ab:31:eb:94:c9:82:03:dd:da:ad:79:49:3f:a2:10:ea:8c:fc:
24:7f:5f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:06:53 2025 by rpki-client