Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
File: VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft (raw, json)
Hash identifier: CPZvILOEE2F68cLH9B9LrwLWrAuWRLbsUiJcIvP+P6A=
Subject key identifier: D4:E7:84:F3:0B:10:2E:F7:B1:48:43:37:03:6C:5D:5E:70:D5:0A:C8
Authority key identifier: 54:16:78:C3:7A:1F:93:34:31:4F:EE:A5:83:25:EA:79:40:AF:0F:5D
Certificate issuer: /CN=541678c37a1f9334314feea58325ea7940af0f5d
Certificate serial: 0194BA841A81D29AAA15828430A1F0952DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBZ4w3ofkzQxT-6lgyXqeUCvD10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
Manifest number: 10A4
Signing time: Fri 31 Jan 2025 04:00:07 +0000
Manifest this update: Fri 31 Jan 2025 04:00:07 +0000
Manifest next update: Sat 01 Feb 2025 04:00:07 +0000
Files and hashes: 1: VBZ4w3ofkzQxT-6lgyXqeUCvD10.crl (hash: oPqiBETlfwyrTHmeiPMepdVAf6A2qbC6rVJIHOxXOi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBZ4w3ofkzQxT-6lgyXqeUCvD10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:1a:81:d2:9a:aa:15:82:84:30:a1:f0:95:2d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541678c37a1f9334314feea58325ea7940af0f5d
Validity
Not Before: Jan 31 04:00:07 2025 GMT
Not After : Feb 1 04:00:07 2025 GMT
Subject: CN=d4e784f30b102ef7b1484337036c5d5e70d50ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:57:f5:a4:67:d7:19:59:6a:a5:c0:bd:e1:81:
34:f0:fd:51:54:70:ee:40:7e:48:bd:cc:95:04:eb:
c5:98:dc:02:a9:69:d4:8b:77:c9:1a:f7:17:13:ae:
5b:60:b3:97:4f:0c:e9:84:16:5a:7a:a1:0a:7e:3f:
af:9c:61:62:aa:62:53:40:9b:4a:1e:da:f2:61:76:
9a:80:56:9f:3f:6d:d7:08:4d:73:d5:0e:9f:84:30:
40:73:7c:ef:e2:db:4b:53:61:55:b9:54:24:73:ea:
aa:db:68:f7:4d:68:0c:58:53:93:82:a5:e5:1f:20:
6f:59:02:e2:ff:03:22:68:bb:39:4f:a0:f1:9a:da:
84:30:48:31:72:67:e4:00:19:2a:9b:e3:91:a0:14:
32:37:8f:9f:17:32:be:f5:cb:d7:80:fc:b0:e4:93:
b8:c8:51:af:ff:1d:cf:b4:bd:97:90:58:3a:14:a3:
f9:68:a0:8c:0c:dd:52:2a:03:67:5f:57:1b:82:a2:
67:1c:25:bd:b1:a8:2c:f6:91:e3:42:09:9b:ee:9b:
23:b1:36:d4:84:68:2b:93:92:cf:0c:93:3e:b3:bc:
e9:49:cc:80:09:af:4b:88:d8:a1:ce:96:7d:de:56:
57:af:d5:e4:08:a4:86:68:97:da:b9:b2:84:5b:81:
00:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E7:84:F3:0B:10:2E:F7:B1:48:43:37:03:6C:5D:5E:70:D5:0A:C8
X509v3 Authority Key Identifier:
keyid:54:16:78:C3:7A:1F:93:34:31:4F:EE:A5:83:25:EA:79:40:AF:0F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBZ4w3ofkzQxT-6lgyXqeUCvD10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:32:f8:22:2a:93:47:71:4c:da:a6:a5:99:b4:55:83:4e:44:
b2:09:a8:2a:55:00:47:31:fe:5f:99:cd:87:7d:e4:1b:fd:85:
f7:1c:50:a1:47:dc:04:8c:96:ea:4a:9d:7e:6f:05:9b:8c:10:
06:6f:44:79:83:b1:09:8a:15:56:1b:09:02:47:9f:fa:35:7e:
25:97:a1:57:2e:05:fb:ee:4f:f0:4b:7a:cc:aa:e0:7b:f5:0a:
92:65:70:cb:84:1e:c2:a6:90:84:e4:01:8a:7f:aa:db:47:d2:
67:78:fd:5b:af:5f:50:f6:65:5b:91:c4:11:8e:69:a9:2f:c9:
28:34:4e:e1:a6:13:77:d2:29:41:da:6a:7f:34:a6:5b:7d:c0:
fe:33:b1:c4:53:41:20:ca:fb:2b:f9:e0:82:d6:08:e5:4d:4c:
d3:79:05:61:2b:f1:81:83:d1:75:63:c6:33:5b:a7:d2:c8:5f:
f9:f7:52:46:07:dc:cf:86:21:f1:30:db:ec:3a:60:ce:bf:fc:
8b:ae:9d:99:ef:99:2e:67:9e:1b:d3:da:f5:ab:46:d1:34:f8:
af:56:70:fd:eb:59:8e:4f:b5:dc:1b:69:bd:e1:70:8c:cf:22:
67:a2:6d:84:6f:bc:68:5c:ef:85:ae:b2:01:8e:33:60:12:9c:
19:ef:7c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:27 2025 by rpki-client on console-fra.rpki-client.org