Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d7da56-9965-4bf0-8f4d-9f52de227621/1/vfNhcQLdR-pKPy7wJ5z2fxSRajw.mft
File: vfNhcQLdR-pKPy7wJ5z2fxSRajw.mft (raw, json)
Hash identifier: lubT/tRNxWCgMolOxWM4LmPd5piL3ltVpMOUfyRUKzM=
Subject key identifier: 89:80:97:58:67:CC:43:57:79:F0:35:B0:C1:18:65:71:DD:65:B4:57
Authority key identifier: BD:F3:61:71:02:DD:47:EA:4A:3F:2E:F0:27:9C:F6:7F:14:91:6A:3C
Certificate issuer: /CN=bdf3617102dd47ea4a3f2ef0279cf67f14916a3c
Certificate serial: 0194C42C2CCE65B3678ADF8A26DCE4026DA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfNhcQLdR-pKPy7wJ5z2fxSRajw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d7da56-9965-4bf0-8f4d-9f52de227621/1/vfNhcQLdR-pKPy7wJ5z2fxSRajw.mft
Manifest number: 03EA
Signing time: Sun 02 Feb 2025 01:00:16 +0000
Manifest this update: Sun 02 Feb 2025 01:00:16 +0000
Manifest next update: Mon 03 Feb 2025 01:00:16 +0000
Files and hashes: 1: vfNhcQLdR-pKPy7wJ5z2fxSRajw.crl (hash: 1h662L2qsjjU8pt2MsliW3Y/nY2/GlT+6CVk3m53xFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d7da56-9965-4bf0-8f4d-9f52de227621/1/vfNhcQLdR-pKPy7wJ5z2fxSRajw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d7da56-9965-4bf0-8f4d-9f52de227621/1/vfNhcQLdR-pKPy7wJ5z2fxSRajw.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfNhcQLdR-pKPy7wJ5z2fxSRajw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:2c:ce:65:b3:67:8a:df:8a:26:dc:e4:02:6d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf3617102dd47ea4a3f2ef0279cf67f14916a3c
Validity
Not Before: Feb 2 01:00:16 2025 GMT
Not After : Feb 3 01:00:16 2025 GMT
Subject: CN=8980975867cc435779f035b0c1186571dd65b457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:38:ae:62:38:b9:60:4e:7c:4c:86:4d:85:
d9:bc:33:19:24:ff:bc:43:ae:75:59:f2:87:58:21:
e6:ee:95:42:86:ef:7f:8e:4a:09:3f:d9:10:a5:74:
6a:a7:c8:50:6f:b5:07:c1:a4:0a:9e:e7:41:04:17:
fb:5f:e8:52:f3:69:e5:cf:42:ed:22:47:95:ef:f5:
74:7e:ee:bf:14:71:2f:8e:7c:5c:5d:cf:6e:fb:11:
b8:62:b7:9c:48:44:39:94:3b:ae:30:f6:b0:28:cb:
cf:d2:a2:e3:66:a9:ad:2a:3c:5e:a3:2a:ac:48:4d:
29:77:85:7f:2f:ae:b1:7b:4c:26:a3:c0:00:6e:1e:
3d:1b:ba:bc:05:62:11:0f:d8:87:2e:63:a5:6f:1b:
b3:c9:44:38:cf:5e:18:e8:b2:4a:d2:23:8f:e2:2c:
5b:23:9c:bd:74:3d:1e:66:c5:3c:f4:c5:fe:55:3c:
f5:58:71:19:b0:e5:76:aa:bb:a6:df:a9:ff:9b:ae:
94:15:d8:7f:4a:ef:03:6f:e9:6b:97:11:5c:c8:96:
a1:18:bf:e8:6a:97:2b:2a:48:10:4e:0c:3d:7e:08:
5f:50:f5:87:df:86:ac:95:db:8b:47:6b:55:91:8c:
6c:ac:ae:ed:1c:c3:98:c2:a2:54:86:19:49:43:e9:
01:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:80:97:58:67:CC:43:57:79:F0:35:B0:C1:18:65:71:DD:65:B4:57
X509v3 Authority Key Identifier:
keyid:BD:F3:61:71:02:DD:47:EA:4A:3F:2E:F0:27:9C:F6:7F:14:91:6A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfNhcQLdR-pKPy7wJ5z2fxSRajw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d7da56-9965-4bf0-8f4d-9f52de227621/1/vfNhcQLdR-pKPy7wJ5z2fxSRajw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d7da56-9965-4bf0-8f4d-9f52de227621/1/vfNhcQLdR-pKPy7wJ5z2fxSRajw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:25:e3:d6:ec:02:e0:8b:8d:0b:b6:a9:c7:e5:83:cd:cd:6b:
4f:37:5c:bf:6f:8c:cc:a3:20:7c:74:af:21:37:95:25:33:19:
e7:89:1a:5e:c3:3a:1e:98:ff:c9:c8:f2:36:1d:30:53:18:5d:
3c:16:3e:02:dc:34:d3:86:3f:63:7e:63:fd:f9:8a:0d:b1:20:
c5:87:3b:39:74:4b:34:fa:4c:94:bd:8f:db:3d:9f:04:ad:c0:
e7:28:d0:a6:e9:39:3d:77:12:7d:38:e3:39:a8:78:cd:5f:9b:
01:fa:ac:5c:66:b6:85:e7:7e:a8:01:31:29:fc:8d:8c:8e:26:
8f:8a:81:c2:7a:5f:a3:24:16:a9:1d:c7:c9:60:f8:9e:b5:33:
7a:e1:34:e4:97:a8:79:31:ce:f2:15:dc:35:66:cc:2d:07:79:
35:6a:d7:b3:02:9f:b0:71:c5:e8:89:2b:73:c7:9e:bb:a9:1a:
18:d9:ba:7b:d4:be:24:7c:99:a2:3b:38:49:df:c7:6b:b0:a4:
2c:68:79:dc:ef:97:4b:6e:ff:3c:6e:f8:91:b2:7b:c9:c6:c7:
15:46:98:c6:78:de:4d:62:e9:72:e8:30:de:8b:ed:06:d5:42:
5a:da:c2:71:81:5b:31:a9:9c:4f:23:49:ee:b6:8b:47:9e:a3:
7e:43:a6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:12 2025 by rpki-client