Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
File: vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft (raw, json)
Hash identifier: P3bHJHer5UIedsDZKBEaMurFyjmGJm+zlu8XMABf/8Q=
Subject key identifier: DC:F3:D8:23:FD:9F:A8:F1:49:7F:5A:76:31:75:60:27:93:FF:0B:1E
Authority key identifier: BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
Certificate issuer: /CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Certificate serial: 01951134C19284FF82810C30178E542D9A68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
Manifest number: 145B
Signing time: Mon 17 Feb 2025 00:00:24 +0000
Manifest this update: Mon 17 Feb 2025 00:00:24 +0000
Manifest next update: Tue 18 Feb 2025 00:00:24 +0000
Files and hashes: 1: 2_V6lJnSbHp-dXL7YMoo09f6snw.roa (hash: OhjwpaD5BnWeaMwPzsn2/JlXIUwI6tpxdz7vTY63lGM=)
2: vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl (hash: 6FFr1ljDJmONXFaOA2Wm0FHnjOzOLf6xkyV9ngV1BNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:c1:92:84:ff:82:81:0c:30:17:8e:54:2d:9a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Validity
Not Before: Feb 17 00:00:24 2025 GMT
Not After : Feb 18 00:00:24 2025 GMT
Subject: CN=dcf3d823fd9fa8f1497f5a763175602793ff0b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:38:16:cc:3f:d7:cd:9c:b4:6c:e6:4e:0f:4f:
f6:f1:13:c8:e6:72:7d:ba:5a:b5:2f:27:fa:99:08:
f9:b1:e2:7d:f2:eb:7e:14:24:c5:ba:9c:6d:29:13:
fa:91:98:72:e3:cc:40:db:ae:3f:44:06:53:27:37:
a0:98:9c:1b:81:b6:5c:de:9b:9c:2a:cf:9e:92:6d:
65:42:1e:15:0a:d0:9a:11:e0:f8:30:29:a4:ec:ac:
85:5b:aa:5c:84:08:26:d6:8d:35:6c:78:bd:dc:e7:
82:59:d4:50:38:fa:2a:17:df:42:9f:63:ba:a7:12:
ca:ac:00:fe:ee:30:37:4b:31:76:65:e8:29:ec:ad:
4a:55:62:f6:99:c5:93:ff:b4:e9:6b:e8:33:60:9d:
1f:f1:72:b3:1d:78:84:d5:d6:c1:2e:29:3e:d9:d1:
53:6a:9f:d4:03:cd:26:07:23:1a:5a:c3:1a:65:de:
63:cf:4c:b6:ab:b8:6d:2d:28:8e:08:47:e6:62:5b:
17:fe:74:f6:70:fd:2d:03:98:c9:f6:08:98:7b:29:
97:fe:9c:d3:9b:a0:b5:87:74:46:bb:ce:8c:1b:57:
89:91:b3:8e:6b:c0:4d:15:d0:6b:ba:65:ba:17:8e:
87:d3:ec:8f:89:62:5e:52:68:94:ae:2e:d3:6f:fe:
d7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F3:D8:23:FD:9F:A8:F1:49:7F:5A:76:31:75:60:27:93:FF:0B:1E
X509v3 Authority Key Identifier:
keyid:BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:fb:29:fa:e3:1d:0a:e2:dc:ee:80:21:42:bf:00:a1:80:47:
3a:ad:3a:57:1b:b3:98:8a:00:db:cb:68:3e:0c:73:33:10:d0:
6f:dd:dc:72:ac:3b:2e:40:57:44:b3:9e:f3:f2:c7:a7:8e:5d:
ac:a7:ef:22:67:31:e4:e6:bd:7c:c2:a3:ac:92:33:74:87:69:
9c:28:da:03:b7:2b:85:59:06:4f:c9:ee:6e:90:36:59:fa:d7:
a5:e9:d1:63:94:f0:99:f8:04:81:33:d7:e7:1a:bc:59:31:44:
45:e6:ed:b9:ed:22:6a:77:b0:b1:93:b5:9b:05:0c:b8:c0:c2:
fe:e0:3a:1f:1e:06:5e:80:a3:b5:23:5f:8c:f6:91:85:3f:72:
ef:16:f8:96:45:e1:92:04:e6:b5:85:1a:87:6d:93:be:cc:ac:
4b:c7:d1:d4:5f:7b:e2:5d:f4:36:48:95:11:4f:eb:68:ba:63:
b1:b5:a7:ee:70:74:02:82:61:3b:0d:d4:bb:f9:7d:68:9d:fe:
40:5d:d8:e7:5b:e8:ef:9d:76:9d:36:98:90:64:02:11:3e:35:
e2:ed:ce:3c:38:86:7c:6f:a1:3f:e1:de:53:77:c8:73:87:d8:
e9:6a:7a:23:a6:fe:c8:f9:2a:8f:7e:15:51:12:ad:06:91:a2:
a6:ce:80:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:33 2025 by rpki-client