Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
File: VZhirROQ5Nv4grUie8kzUPLYBxM.mft (raw, json)
Hash identifier: xNoVtMvz7nDi4+gEmMzYJ/qknUxGmHoN1xWXbcenkP0=
Subject key identifier: F2:12:7C:E1:4B:CD:59:B6:B0:CB:25:84:CB:F7:63:A9:83:B2:B1:0B
Authority key identifier: 55:98:62:AD:13:90:E4:DB:F8:82:B5:22:7B:C9:33:50:F2:D8:07:13
Certificate issuer: /CN=559862ad1390e4dbf882b5227bc93350f2d80713
Certificate serial: 0194BA84BC77C8CCAE746385941E99614DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
Manifest number: 0558
Signing time: Fri 31 Jan 2025 04:00:48 +0000
Manifest this update: Fri 31 Jan 2025 04:00:48 +0000
Manifest next update: Sat 01 Feb 2025 04:00:48 +0000
Files and hashes: 1: VZhirROQ5Nv4grUie8kzUPLYBxM.crl (hash: aJ+wol6YzoirDJojvVM+7f9rFL1jNga2bCZ75Pl9mPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:bc:77:c8:cc:ae:74:63:85:94:1e:99:61:4d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559862ad1390e4dbf882b5227bc93350f2d80713
Validity
Not Before: Jan 31 04:00:48 2025 GMT
Not After : Feb 1 04:00:48 2025 GMT
Subject: CN=f2127ce14bcd59b6b0cb2584cbf763a983b2b10b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:92:16:99:be:af:cb:fb:54:ff:cf:4b:3e:d8:
82:08:f8:a7:25:cd:37:8f:88:1e:dc:2d:3a:af:ce:
48:bb:2f:31:c5:07:c4:60:91:7c:af:fa:2c:42:7a:
76:e6:d0:5c:a6:8f:f8:e6:91:48:ed:c8:08:cf:1c:
8c:76:49:8b:f8:ad:81:d2:36:cf:cd:66:b2:ea:f1:
08:2a:d2:af:4e:eb:ed:1c:ef:22:9e:a8:31:5b:a8:
c0:50:a6:ff:b0:06:36:e2:6d:67:a9:7d:0d:9a:ed:
7e:15:08:6a:98:65:af:1a:f4:c5:d5:32:ea:35:82:
c2:52:10:14:59:18:0c:ea:df:8e:1b:eb:07:d0:84:
7c:fb:7b:32:c9:e9:31:a7:be:d0:c5:a2:1f:db:2c:
f1:cf:cd:b0:45:a4:fa:e3:0d:a3:47:46:ba:62:45:
ea:5e:64:73:08:35:2d:05:1d:a7:99:eb:cf:d0:68:
cb:93:1f:0e:3b:71:87:75:47:8b:10:c4:bd:bc:99:
d6:47:a2:49:a6:f2:57:e8:00:eb:1a:8b:f2:cc:bc:
2d:fe:d9:e1:4d:2c:5f:c6:1c:50:0f:1f:ac:7b:89:
4e:33:95:5c:41:8d:f7:d0:78:9e:38:b9:ab:94:cf:
fe:f5:e2:2d:16:26:24:50:44:93:c0:e0:c0:8d:96:
a5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:12:7C:E1:4B:CD:59:B6:B0:CB:25:84:CB:F7:63:A9:83:B2:B1:0B
X509v3 Authority Key Identifier:
keyid:55:98:62:AD:13:90:E4:DB:F8:82:B5:22:7B:C9:33:50:F2:D8:07:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZhirROQ5Nv4grUie8kzUPLYBxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/62ed0f-a81f-434f-b975-071fb1f3b985/1/VZhirROQ5Nv4grUie8kzUPLYBxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:90:67:da:35:0a:db:77:87:f0:ba:2b:28:05:6f:fc:4e:00:
cb:d7:82:54:1b:ce:fc:5e:8e:40:e2:0d:4d:0f:7a:42:86:2c:
8e:bb:47:f8:66:09:f5:96:26:63:b9:4a:35:53:8c:9e:09:8c:
5c:da:cf:ca:64:40:f7:5c:cd:f5:3f:2a:6c:b2:02:fd:d0:6d:
50:73:d0:f3:37:57:30:25:9c:83:7b:2b:58:fa:22:2f:c5:99:
1c:58:0a:28:84:13:e9:8d:11:02:88:f8:1c:b8:55:61:c9:e0:
15:e4:3e:ee:6f:7b:b6:14:86:e6:b2:05:99:94:1d:67:c7:95:
8b:1d:46:06:1c:3f:0b:47:0a:9d:f2:39:07:a7:a9:54:3f:3d:
f7:2e:ad:d7:d8:70:33:0c:7e:e8:f3:b9:d3:1f:f5:64:87:29:
0a:7a:15:42:11:66:8f:2a:f1:f3:c5:28:06:da:a4:13:9c:ad:
9e:e0:5a:88:15:5e:1e:4a:78:44:43:8c:ba:ca:c5:04:69:22:
3b:cc:f5:03:0e:4d:18:aa:4a:ba:e0:3f:e5:f8:7a:7b:73:33:
2b:7f:85:58:d2:cc:f3:8a:df:00:62:29:ba:67:37:f0:77:cb:
51:2d:ed:fd:65:d9:bc:08:24:4e:3d:a3:48:9e:2a:26:cf:b4:
92:e4:49:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:25 2025 by rpki-client on console-fra.rpki-client.org