Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
File: VHbDyngMxXdErb6QoPOU8dHNcvM.mft (raw, json)
Hash identifier: zBzxGm9IMO2aCDsCd1rMHFKEv72X5XmcDrXWq9kI164=
Subject key identifier: B6:52:29:11:57:33:09:27:C7:4D:A5:30:4E:2B:11:FC:A7:58:B9:4F
Authority key identifier: 54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
Certificate issuer: /CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Certificate serial: 0194C46364BEA543332F3EED01C0BB212780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
Manifest number: 97
Signing time: Sun 02 Feb 2025 02:00:35 +0000
Manifest this update: Sun 02 Feb 2025 02:00:35 +0000
Manifest next update: Mon 03 Feb 2025 02:00:35 +0000
Files and hashes: 1: J1F-UaHfYAClgmD-n-h_bemva1g.roa (hash: LkkLFeCVLkb+GZvSdm+hQS9Yt//NS73l5BEh3ajjGOM=)
2: Mzf3T5ZCYDRP9VJBsVQOjUFWDdY.roa (hash: fMfmlTHaxDxkKj4QIO7HlLPP5wMEtHiZKgYxRA6zmJA=)
3: VHbDyngMxXdErb6QoPOU8dHNcvM.crl (hash: n0JebmE7vSfST/T0HO7gv67veyQUKE6Zy1raDCiGd/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:64:be:a5:43:33:2f:3e:ed:01:c0:bb:21:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Validity
Not Before: Feb 2 02:00:35 2025 GMT
Not After : Feb 3 02:00:35 2025 GMT
Subject: CN=b652291157330927c74da5304e2b11fca758b94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2e:5f:9a:08:a2:e9:45:9f:bc:79:3a:fb:eb:
20:c0:6f:ab:9c:5a:a9:eb:54:44:5c:18:5f:38:ce:
d6:35:2a:43:63:41:85:bf:67:99:1b:40:05:d1:58:
11:34:62:6c:d8:d4:0f:ba:be:59:95:6e:81:c0:6a:
30:94:c6:4c:c1:da:f8:55:f8:5f:da:f8:ea:b0:59:
79:65:5a:59:49:d6:de:88:04:87:b2:71:cc:83:b7:
61:04:09:35:63:8c:c7:76:7b:7a:89:76:b1:f5:69:
31:2e:9d:74:3e:05:28:65:cb:25:a6:76:3c:1d:98:
7b:8b:35:ff:08:67:0b:a2:4a:07:a7:e5:6a:36:c7:
12:cb:09:1d:ac:28:5f:b1:c5:83:27:c9:6e:fb:a3:
ea:90:0e:b4:ed:32:11:f3:43:9a:c2:7e:64:aa:18:
94:e9:4a:97:8f:e7:77:bb:87:d2:44:4b:06:32:7c:
0c:16:ae:da:cf:bc:0a:db:b6:6e:ae:91:c0:e5:50:
6a:5d:1b:f1:0d:14:39:ed:a1:a7:00:b2:16:08:fa:
f4:88:7a:a9:7b:d1:4e:b6:c0:85:9f:d8:58:94:af:
fd:76:46:c0:ab:c0:80:1d:0c:9b:2c:5d:0f:bc:5b:
43:58:a2:62:f0:0c:59:bd:22:21:6e:d1:31:3b:19:
39:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:52:29:11:57:33:09:27:C7:4D:A5:30:4E:2B:11:FC:A7:58:B9:4F
X509v3 Authority Key Identifier:
keyid:54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e8:21:c4:95:b4:72:22:5b:4a:04:a0:18:28:91:4e:0f:6f:
02:ea:4e:1d:60:b9:d5:71:ec:33:c4:62:49:08:85:4b:b5:42:
46:5c:ca:71:8f:82:b3:5b:c9:89:bb:74:cf:0f:4f:ac:0e:1e:
43:ef:e7:4e:c2:5c:e4:f9:ff:7d:70:bf:1e:97:27:d7:d9:ab:
92:7a:a2:a0:d1:e6:36:08:b9:ec:3f:03:e3:66:27:a3:14:c9:
c6:31:bc:7c:c8:dd:af:b1:32:9a:c0:05:89:63:d9:b7:64:4d:
3a:79:ca:ec:47:d6:a7:a9:41:47:b0:94:a4:b7:e4:7d:80:98:
43:12:c8:26:66:8c:68:5a:e6:74:b7:2d:6d:63:38:d6:e1:3f:
23:25:70:14:0d:3f:b5:1f:cd:4c:15:95:3f:7c:11:3b:2b:17:
76:83:33:d8:07:ac:cb:cb:e3:2f:c0:97:ac:81:ad:ba:aa:21:
88:f6:34:09:f4:e7:38:8d:ae:55:66:72:55:d5:c0:74:4c:02:
89:0d:38:51:44:d8:9e:f6:f3:9e:e9:fb:c7:71:34:11:04:0f:
c3:c1:90:30:47:6b:df:96:29:21:9b:25:cf:3b:38:f2:d8:1c:
22:2c:4f:4f:f4:05:ff:c6:f6:42:c2:f4:38:8c:5e:1f:32:4d:
c3:fd:9a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:45:15 2025 by rpki-client