Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
File: VYR5uCKzUywZue4BAvmaiYUN8SQ.mft (raw, json)
Hash identifier: XdiisbHxJVoX4SrizyJ9kMQxGcWNssmhbjOP1qyV9jw=
Subject key identifier: 8B:07:F4:46:85:CD:8C:BC:B3:FC:78:D6:F9:3C:A6:06:38:2D:94:A0
Authority key identifier: 55:84:79:B8:22:B3:53:2C:19:B9:EE:01:02:F9:9A:89:85:0D:F1:24
Certificate issuer: /CN=558479b822b3532c19b9ee0102f99a89850df124
Certificate serial: 0194C3877AA3BF4F9773021B8271029013C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
Manifest number: B1
Signing time: Sat 01 Feb 2025 22:00:23 +0000
Manifest this update: Sat 01 Feb 2025 22:00:23 +0000
Manifest next update: Sun 02 Feb 2025 22:00:23 +0000
Files and hashes: 1: VYR5uCKzUywZue4BAvmaiYUN8SQ.crl (hash: IdAxkfEFm5OsAmUlDtxPbW5zpwlecQ5057l53F2Pihg=)
2: bjC_4YQHMbcokGPzsa1ChnLtyF8.roa (hash: QpyUIEtNVpERFh+Sv3RoMUpu/u6eaTM9vusxbG8G8kQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:7a:a3:bf:4f:97:73:02:1b:82:71:02:90:13:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=558479b822b3532c19b9ee0102f99a89850df124
Validity
Not Before: Feb 1 22:00:23 2025 GMT
Not After : Feb 2 22:00:23 2025 GMT
Subject: CN=8b07f44685cd8cbcb3fc78d6f93ca606382d94a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:31:63:1b:3e:a2:36:29:18:8e:05:dd:f5:4a:
9d:80:65:f6:08:3b:46:8a:f7:85:d3:60:0a:8c:e7:
d7:c4:47:15:2f:2a:51:d3:e8:aa:d6:bb:0f:03:f9:
b5:ca:9d:a1:33:7d:fe:16:df:4e:e6:4d:0f:29:05:
32:e9:64:0e:57:aa:c1:9d:42:9f:88:98:8d:30:20:
f6:04:75:c1:54:83:eb:a2:4b:0b:f3:d9:58:39:a2:
05:9b:0f:37:48:21:05:e2:ff:14:45:07:1b:35:ba:
3e:9e:90:97:df:34:f8:dd:ea:e5:07:c0:ab:9a:73:
fe:fb:1c:56:fe:cb:ba:99:07:c5:1d:a4:e0:c1:30:
49:d9:e4:6c:37:ac:12:e2:69:4a:ca:41:18:1c:4d:
80:f0:41:41:77:00:66:75:04:f5:72:f5:34:6e:37:
59:98:0f:af:dc:2f:88:26:77:15:71:a6:98:49:70:
34:50:46:05:4c:e3:bf:61:20:c9:c1:71:8e:c7:69:
fc:4b:d3:40:d7:c8:6e:13:20:a3:c6:bf:20:29:bf:
c3:41:40:11:13:1e:83:bc:8b:be:0b:af:c1:0c:6f:
4f:9f:d9:b4:2b:ec:e6:7c:1b:32:48:64:c2:c2:1c:
0e:20:45:a7:34:be:39:a6:4b:74:98:81:b6:91:5a:
ba:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:07:F4:46:85:CD:8C:BC:B3:FC:78:D6:F9:3C:A6:06:38:2D:94:A0
X509v3 Authority Key Identifier:
keyid:55:84:79:B8:22:B3:53:2C:19:B9:EE:01:02:F9:9A:89:85:0D:F1:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:0e:79:c0:2b:5d:a9:68:1e:83:d8:29:98:54:43:5f:e6:6a:
b4:76:19:34:36:ba:62:54:29:18:d1:2f:8a:4e:fc:1b:9c:16:
91:89:f6:9a:34:4c:7a:3e:ef:19:66:87:3c:4c:42:98:5f:28:
f5:d1:88:9a:67:45:f3:c0:cc:df:1a:9c:7a:62:ef:bf:fb:91:
aa:49:64:be:8a:e7:8d:76:20:f7:37:f6:e2:34:45:1b:e3:7a:
7d:a6:06:98:ad:6d:19:03:b3:dd:dc:14:16:9c:7c:6b:26:35:
3a:2a:68:2b:0e:91:44:11:a5:90:cf:c2:12:4c:24:e5:29:a1:
3a:1d:6c:73:1d:11:e4:f0:54:b9:38:bf:dc:ff:b8:e1:e1:ef:
6d:d6:02:36:65:21:ea:be:8e:c3:06:ca:dc:43:fb:f6:0b:b4:
80:50:5d:50:ac:fa:d7:9d:70:15:27:19:7d:fe:88:91:4f:fa:
76:1e:b6:fb:92:9b:80:4a:74:91:8d:6a:1c:15:04:8a:c9:8b:
16:00:e7:1a:86:03:0f:38:70:89:83:c5:f9:18:ff:eb:19:e5:
03:56:e0:69:e1:4a:ba:60:60:52:0f:d5:cb:83:01:b8:98:3a:
e7:01:90:a1:38:62:68:df:4c:0c:b1:b3:1d:69:76:ec:34:a5:
c7:eb:61:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:58:27 2025 by rpki-client