Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
File: VcQvLHehgijJ-pqzeYQmYNB5KQg.mft (raw, json)
Hash identifier: qruHBZfkb5T4ax8CmY6g+a5QKisgWP97G7ysd+TuTTc=
Subject key identifier: 47:BA:24:E8:A7:42:25:AC:C0:53:F1:46:78:30:0A:3E:CB:4D:52:6A
Authority key identifier: 55:C4:2F:2C:77:A1:82:28:C9:FA:9A:B3:79:84:26:60:D0:79:29:08
Certificate issuer: /CN=55c42f2c77a18228c9fa9ab379842660d0792908
Certificate serial: 0194BC3BBADADA9354CDCA9D000FD0ED1D40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
Manifest number: 03F0
Signing time: Fri 31 Jan 2025 12:00:18 +0000
Manifest this update: Fri 31 Jan 2025 12:00:18 +0000
Manifest next update: Sat 01 Feb 2025 12:00:18 +0000
Files and hashes: 1: En2fZob7-Xp8zkiLryaS1TtBdYw.roa (hash: zk5DD5xhiB++oRKxPmJdvhY2qq8VEHhmVtAgMqGgPO4=)
2: VcQvLHehgijJ-pqzeYQmYNB5KQg.crl (hash: aaHV3SFqggGjLoLCeKuE3q4I1Cp97BDaTDPpR6mxqeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 11:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ba:da:da:93:54:cd:ca:9d:00:0f:d0:ed:1d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c42f2c77a18228c9fa9ab379842660d0792908
Validity
Not Before: Jan 31 12:00:18 2025 GMT
Not After : Feb 1 12:00:18 2025 GMT
Subject: CN=47ba24e8a74225acc053f14678300a3ecb4d526a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e6:0a:32:03:33:1e:47:26:cd:2b:56:10:b1:
8b:62:6f:70:d0:db:c7:7a:a1:72:39:4d:f3:15:57:
7d:fb:65:ac:83:c3:82:7f:18:aa:42:4a:cd:67:65:
f8:39:c0:78:80:24:6d:81:e7:92:96:bc:66:cb:91:
a8:82:2e:33:96:11:25:c4:f0:fd:41:41:cc:c7:3b:
5c:fd:e8:42:e0:04:02:0a:b7:0b:8e:4c:78:5e:3c:
dc:df:7b:05:63:c9:dd:24:49:24:f4:f9:30:65:04:
c4:d6:4c:22:39:99:20:71:3f:cc:06:37:76:f1:13:
49:5a:4a:b5:61:a4:96:4e:aa:d3:2e:f6:37:cd:ac:
d2:ba:a4:40:27:bb:fa:c2:03:33:7c:77:6a:2c:38:
c5:0d:f4:6f:59:dc:a9:f5:d4:e9:59:ea:fb:ed:ae:
21:c9:17:60:96:10:29:98:07:e7:ce:2a:cb:6f:ab:
73:93:6b:c4:01:6b:f4:d7:a8:3b:05:c6:1e:66:5c:
bf:3b:a6:f1:7e:88:71:25:e3:29:73:2d:94:ad:11:
73:0f:b6:c2:4c:80:3d:2d:86:97:5d:58:82:17:5d:
3d:42:56:32:28:99:c5:81:5f:73:17:76:fa:48:8d:
fb:f6:64:1f:30:81:ca:7c:b8:81:80:95:95:aa:75:
d7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BA:24:E8:A7:42:25:AC:C0:53:F1:46:78:30:0A:3E:CB:4D:52:6A
X509v3 Authority Key Identifier:
keyid:55:C4:2F:2C:77:A1:82:28:C9:FA:9A:B3:79:84:26:60:D0:79:29:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:74:62:75:68:0a:f7:a9:95:84:bb:25:65:ca:4e:a0:17:00:
7b:de:20:eb:13:db:8b:90:70:d6:3d:e0:ec:3d:a1:e5:ba:90:
f6:4e:7a:71:09:9d:32:c2:5e:0f:6b:51:b6:54:28:f9:a4:cf:
b5:65:f4:a7:64:99:12:ce:24:29:a7:05:c6:4e:0a:7c:60:70:
eb:ac:a5:e2:5c:d2:2a:a6:e1:25:f1:6e:13:14:e8:2c:88:93:
9f:45:c1:4f:6a:56:8c:c4:80:ea:5f:0d:25:41:62:7a:c4:b5:
7b:07:56:bd:65:25:47:2f:00:03:d9:93:e1:28:b7:33:f1:a6:
35:45:df:7d:f1:19:27:08:7b:39:34:13:e0:9e:8c:29:2d:8b:
90:d3:d1:72:b2:bd:7e:3a:ec:24:04:80:7b:1f:ad:51:66:19:
24:05:e1:96:59:54:f3:f0:9f:d6:69:42:9c:c5:28:f9:ac:af:
67:61:60:45:f6:15:fa:f0:e9:14:01:69:d6:6b:d0:30:92:19:
f2:92:87:4f:87:d3:3a:39:0d:e4:b7:1f:d1:81:df:d6:94:f9:
0d:5c:6e:54:56:5f:ca:8d:42:87:65:08:30:d7:bc:61:4d:2b:
65:33:41:99:fd:1a:65:f9:56:69:eb:9e:56:39:2e:64:ee:84:
2f:ee:7a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:45 2025 by rpki-client on console-fra.rpki-client.org