Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
File: veGsj467UC_MRFYtwQ2XOIRJO-U.mft (raw, json)
Hash identifier: AO0IeGfM7/IGPf9GziV8YUhQv+EoKdzy7x5P9t712HU=
Subject key identifier: 76:A5:FB:6D:EB:A1:53:49:82:D0:65:6E:82:27:8F:2F:A0:29:FA:56
Authority key identifier: BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5
Certificate issuer: /CN=bde1ac8f8ebb502fcc44562dc10d973884493be5
Certificate serial: 0194C42C9A731162303ABB59C89C973150D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
Manifest number: 0761
Signing time: Sun 02 Feb 2025 01:00:44 +0000
Manifest this update: Sun 02 Feb 2025 01:00:44 +0000
Manifest next update: Mon 03 Feb 2025 01:00:44 +0000
Files and hashes: 1: BIfb7ZxJcI_z8KzHeX5n3JHCcq0.roa (hash: zQ0KDMqG7X6AzmJpBDsrH1YQkiSpOUR257iu4JXF7UQ=)
2: veGsj467UC_MRFYtwQ2XOIRJO-U.crl (hash: htxPedfulYdr17e5sD8WunH8DO6BNQkr+cgYrQwp6lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:9a:73:11:62:30:3a:bb:59:c8:9c:97:31:50:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde1ac8f8ebb502fcc44562dc10d973884493be5
Validity
Not Before: Feb 2 01:00:44 2025 GMT
Not After : Feb 3 01:00:44 2025 GMT
Subject: CN=76a5fb6deba1534982d0656e82278f2fa029fa56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fd:f3:1d:57:50:13:f7:8a:02:da:b4:82:e3:
ec:58:c5:d1:fd:af:49:18:d0:92:68:2c:11:db:f7:
df:12:23:8f:63:c4:31:e4:6d:fd:eb:5e:62:1a:7c:
a9:46:7d:66:88:8d:68:93:f6:65:53:d3:50:99:5f:
2b:b3:7c:e7:77:ae:10:47:bc:48:42:ff:87:1e:96:
b5:75:58:df:ba:7e:c0:d2:ac:1c:27:5c:ec:1d:4e:
1c:e8:e5:d1:44:1f:b0:19:e3:09:11:d6:ce:bd:ef:
4a:3e:14:ed:b3:8e:ad:fc:41:a6:f4:e2:af:d4:61:
56:ab:32:7e:14:d6:22:65:c0:5a:b2:45:56:58:dc:
ae:ab:0d:f6:10:ff:d1:05:d0:9d:6c:72:4a:a2:c6:
69:4e:c2:22:c5:52:94:f5:b5:46:54:0b:e1:8c:c3:
02:28:51:ca:35:3e:49:4f:17:29:de:94:27:19:70:
50:5e:54:7f:8f:00:a4:c9:24:ef:af:b1:f1:b2:fc:
50:97:34:ed:e6:27:46:3b:3e:f0:1b:f1:8e:02:44:
c3:49:da:dd:88:57:29:99:7c:38:cc:7f:c2:23:bb:
23:63:9a:2e:a7:b8:52:1f:ca:ae:41:71:5e:34:5b:
62:83:bc:73:e9:28:24:a1:4c:65:b8:f3:dd:e3:1a:
3f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A5:FB:6D:EB:A1:53:49:82:D0:65:6E:82:27:8F:2F:A0:29:FA:56
X509v3 Authority Key Identifier:
keyid:BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:5e:59:94:e9:cf:89:5e:56:3f:7a:57:07:13:19:fe:ab:95:
4b:aa:47:fa:68:9f:8a:f5:ce:45:72:57:fa:dc:26:df:01:6b:
48:d1:37:24:77:91:21:3c:e2:ba:52:09:d9:98:b6:3a:25:dd:
15:04:20:13:65:e4:9d:67:8d:12:17:b4:54:de:03:9d:f4:45:
7b:c0:00:ff:8d:a9:48:58:d9:a1:c5:d0:12:90:35:56:14:6d:
78:fa:49:56:e8:4f:f5:49:2a:da:62:ba:65:23:d0:7f:11:9b:
52:f4:d1:c6:0f:4f:0f:7a:b4:fb:f3:57:d8:3c:fe:ee:de:8f:
28:9f:54:ae:12:94:2d:6f:11:c2:ab:13:5b:44:bb:8a:08:e0:
9e:b7:97:70:d5:49:b0:78:19:b5:00:8a:88:67:d6:91:3d:14:
77:43:5c:1a:c1:4a:2b:11:a8:11:fc:91:9f:b4:8c:f4:89:33:
66:da:4c:a0:43:5d:f9:a1:2c:0e:27:7f:6a:96:54:74:ad:51:
55:2d:32:1e:88:08:a7:47:ec:b3:3f:28:b4:12:25:ec:72:18:
5d:60:b5:52:4d:3f:8c:fb:2a:da:b5:b2:c6:f6:c8:f8:22:8d:
66:0a:77:65:d1:7c:44:f3:70:db:84:18:7f:0c:7e:87:ee:7f:
8d:6d:a3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:03:02 2025 by rpki-client