Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
File: vgXqx8OvU1UcnmI2U906198VVLs.mft (raw, json)
Hash identifier: K5l9Lk/VJxey+i0j1F5POYBm06kg5ZO/4rlKu5ozfWk=
Subject key identifier: FB:98:DD:C3:55:8F:0F:C6:C0:A4:6C:79:EC:6C:8B:CA:5E:E1:8B:78
Authority key identifier: BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB
Certificate issuer: /CN=be05eac7c3af53551c9e623653dd3ad7df1554bb
Certificate serial: 0194C4636FB29341AB12ADA7632CE0575299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
Manifest number: 0510
Signing time: Sun 02 Feb 2025 02:00:38 +0000
Manifest this update: Sun 02 Feb 2025 02:00:38 +0000
Manifest next update: Mon 03 Feb 2025 02:00:38 +0000
Files and hashes: 1: vgXqx8OvU1UcnmI2U906198VVLs.crl (hash: c2XeY2mpyjQ56qCvMC+Tho+xosYACGcZhUOKFjMYQBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:6f:b2:93:41:ab:12:ad:a7:63:2c:e0:57:52:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be05eac7c3af53551c9e623653dd3ad7df1554bb
Validity
Not Before: Feb 2 02:00:38 2025 GMT
Not After : Feb 3 02:00:38 2025 GMT
Subject: CN=fb98ddc3558f0fc6c0a46c79ec6c8bca5ee18b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ea:f7:88:84:45:81:43:bd:cd:a9:3f:ee:91:
fc:19:ed:0d:3f:1d:e6:cc:e7:5b:04:53:bf:7b:e2:
c4:00:57:da:4c:61:d6:9a:8c:f5:fa:fd:4f:5f:45:
b7:b8:c8:0a:59:e3:e6:a7:c8:11:16:3f:0d:9f:20:
c6:5b:b9:83:37:1e:70:c1:85:29:bb:2f:3f:7f:95:
4a:0c:9a:ec:53:bb:42:34:92:de:00:b2:8a:95:e6:
83:d1:78:0c:02:22:6e:fe:23:90:8e:68:05:47:8c:
38:86:41:af:09:60:cc:6d:3e:5a:9b:3a:bd:72:dd:
5c:4c:d4:cf:06:55:2e:09:4f:bb:dc:86:ac:16:20:
59:17:69:ed:3f:eb:a4:10:9d:67:57:15:39:95:43:
5b:5c:5b:60:81:52:be:18:65:79:bc:6c:5d:fd:67:
c2:6f:89:a2:b7:73:fa:2d:6f:5a:71:1f:56:76:78:
da:e8:34:f0:23:ac:ea:74:f0:ed:db:70:22:6f:3f:
8f:4d:1f:be:df:7b:85:83:dd:0a:6d:14:51:24:9a:
7f:f1:5f:a9:f5:bd:ba:e9:aa:27:86:92:e5:bb:90:
85:98:a8:4f:0f:8e:fc:7c:6a:0c:ae:21:c4:5a:77:
0d:63:ee:9c:ba:d6:3e:27:3d:58:25:00:21:dd:f6:
dd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:98:DD:C3:55:8F:0F:C6:C0:A4:6C:79:EC:6C:8B:CA:5E:E1:8B:78
X509v3 Authority Key Identifier:
keyid:BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:10:60:a9:d1:a7:9f:8f:b6:00:23:31:ef:8c:c4:25:d5:3b:
1a:b8:b7:36:8a:cf:a1:d9:e6:7f:da:43:1f:e2:f3:22:43:15:
6c:ae:ad:aa:18:8b:94:29:33:0e:0e:52:8e:f7:ef:ae:39:20:
ce:28:ae:ce:60:b9:45:56:aa:79:cc:ca:f5:1f:39:5c:56:80:
56:53:22:f5:e1:a9:0f:9a:6b:a9:e9:94:10:b1:b5:b5:dc:37:
ae:05:1d:f1:ef:e3:5e:cc:23:64:63:b8:60:73:55:55:3e:8a:
bd:b6:f2:d7:1b:f9:9e:2b:be:b3:b5:64:e3:1f:87:34:f4:59:
1b:0e:63:f9:0e:b3:c7:88:a3:92:99:11:db:91:fd:ce:82:36:
3c:bf:34:d4:8e:bf:dc:c7:9f:73:39:84:54:e7:8e:0e:7e:4c:
72:1f:98:f6:47:6c:36:7b:9f:3e:da:65:27:18:e9:a3:8e:78:
e3:37:fa:c7:29:78:9c:41:8c:37:62:93:e4:e2:93:ca:d5:77:
fc:32:b0:e1:76:4f:48:17:4b:46:4b:a1:b3:b5:25:c6:54:4a:
7c:b2:95:93:91:fb:90:13:58:26:76:e8:6d:83:ae:a2:87:d3:
fe:a2:04:f2:6e:1b:14:91:77:a6:28:aa:2f:8e:50:03:63:e5:
18:a7:be:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:03:55 2025 by rpki-client