Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
File: vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft (raw, json)
Hash identifier: Z86JnUQ4hXT0q6YD6wmmskX+RwlrcfwrmJ3znfVsR84=
Subject key identifier: 48:8D:35:34:5B:D4:76:C6:88:69:69:A9:D9:C9:8A:F0:EA:E8:39:D5
Authority key identifier: BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
Certificate issuer: /CN=bc63a36d5c80651a89a76906c9e3402fb34568da
Certificate serial: 0194BAF24E1452DDD836926AE3B9AC3682D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
Manifest number: 01B3
Signing time: Fri 31 Jan 2025 06:00:29 +0000
Manifest this update: Fri 31 Jan 2025 06:00:29 +0000
Manifest next update: Sat 01 Feb 2025 06:00:29 +0000
Files and hashes: 1: 8pgaGBXBaUb02KKfxBTaArJBx7M.roa (hash: MwzlZRqfpq85Jtfy1BfMUyKAa2i1GlwvDq8Y0Ug3Xu8=)
2: B6_6e2WVsyfaOmjKudfNr0g4dMs.roa (hash: rRjjEbNFtXOP8HK5A6ODglpO6DXLSRaxFyjXQUR8uMo=)
3: vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl (hash: gY3Uv/lhQAcDl+n8pWQyiTNFy944sXUsWuOHcWi3/EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:4e:14:52:dd:d8:36:92:6a:e3:b9:ac:36:82:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc63a36d5c80651a89a76906c9e3402fb34568da
Validity
Not Before: Jan 31 06:00:29 2025 GMT
Not After : Feb 1 06:00:29 2025 GMT
Subject: CN=488d35345bd476c6886969a9d9c98af0eae839d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9e:b1:a7:63:45:4d:61:79:03:b0:28:6d:d2:
96:d0:e9:ae:ca:fc:a9:b8:1e:d6:0c:7f:19:9a:6e:
e3:f8:00:4e:1f:a3:05:6c:7f:85:ad:21:d1:e4:8e:
e9:f2:b2:a2:27:de:2b:61:1d:f6:a1:cd:cb:2a:35:
51:31:a5:37:63:7f:d5:04:a9:59:79:dc:c0:1e:46:
35:b7:72:dd:50:ba:c9:08:c7:0c:59:b4:2a:11:a5:
23:af:0f:b0:ba:38:99:c6:90:77:0a:9d:60:88:62:
da:0b:8b:73:bc:32:76:77:fa:e8:24:f9:b1:ac:fb:
d4:84:a7:2d:2f:5d:25:92:c2:da:3e:d2:e9:39:20:
0f:f5:f5:ef:54:07:b1:91:9c:9d:f0:a6:a9:1b:fb:
24:81:e2:04:82:f9:ca:0e:ea:e8:d6:f4:cf:d2:82:
1f:14:68:85:c5:b8:a5:93:e5:14:dd:b9:68:e4:1a:
2b:83:98:8c:fa:3d:8f:f4:6e:67:40:66:8e:c0:0a:
ae:8c:2a:d6:e0:73:88:7b:19:9c:70:bc:78:ac:5e:
b4:cb:7e:7a:11:18:6b:34:68:3f:ac:c4:1d:40:03:
2f:d1:9e:61:34:a0:5d:6f:10:39:5e:2a:8f:28:b9:
af:36:ab:0e:a6:10:a1:a4:59:b2:86:94:3c:cf:d7:
f4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8D:35:34:5B:D4:76:C6:88:69:69:A9:D9:C9:8A:F0:EA:E8:39:D5
X509v3 Authority Key Identifier:
keyid:BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:0e:01:83:4f:aa:fa:d4:47:83:e2:b8:ac:c1:8d:f6:84:9a:
b2:27:65:c2:08:74:9c:80:56:e8:1d:90:ad:5b:0e:1f:f4:d6:
41:13:98:03:c3:51:78:d2:29:c9:6d:57:b1:9c:85:a5:71:73:
bc:67:83:af:dc:c3:3d:79:05:63:f8:84:6e:42:10:76:19:b7:
96:91:16:44:3f:49:aa:15:2c:0a:49:9c:ef:fe:bf:57:fd:9e:
41:7f:cd:41:d8:42:01:cd:2a:84:66:c6:f5:01:11:fb:ac:9c:
8b:fd:32:b0:a3:30:41:fa:8a:42:83:40:3d:56:5c:27:fb:6d:
55:b1:5a:be:09:54:e6:51:f3:37:b2:fd:78:87:c5:37:c8:c5:
c6:2a:3c:d4:8f:14:6a:45:9d:e8:6b:10:84:1d:c4:70:39:1d:
41:f7:e2:b4:7b:c0:32:5c:47:82:26:19:e2:f6:b2:04:e7:79:
8a:46:c6:f4:f4:4a:8f:dc:62:b1:88:84:fd:b0:c7:22:20:2d:
8c:2c:9a:2d:9d:1d:b8:bb:14:0c:b8:7d:99:7e:ef:69:21:8c:
36:0b:c1:d3:c5:7a:81:a8:31:4f:93:6c:77:54:4b:51:3c:62:
ec:87:51:80:ea:06:fe:cb:15:5e:6f:0f:f5:74:f8:b4:1d:cd:
76:e8:ae:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:42 2025 by rpki-client on console-fra.rpki-client.org