Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
File: VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft (raw, json)
Hash identifier: s6UsbM6Ft/Q200c0rKLPfiNzyCE5lqe7FZhQAK4O1V8=
Subject key identifier: F7:DF:75:11:88:B2:15:89:2E:13:03:25:ED:FA:D3:A2:1A:D5:AF:04
Authority key identifier: 54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
Certificate issuer: /CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Certificate serial: 0194BA8446A37FFA34FE0BCC097E20F4F7EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
Manifest number: 12DD
Signing time: Fri 31 Jan 2025 04:00:18 +0000
Manifest this update: Fri 31 Jan 2025 04:00:18 +0000
Manifest next update: Sat 01 Feb 2025 04:00:18 +0000
Files and hashes: 1: M5Ss8dPr3mgOSEzIF3jmA6pApv4.roa (hash: QeN0UB5jBHieDVxeoJHOIWGc+jidnXLUOykEdgdKgwA=)
2: VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl (hash: XzQv91Myc6v5VeSEPWFlM+4h8GVhrw9E19gu5mNx2XQ=)
3: jhn2n6Zhnk2eAJzC6HzMRpbzBDY.roa (hash: JGVKd7N6rxJHSCarnyD9lhtED3Ke3uBCDSZH7wuHINc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:46:a3:7f:fa:34:fe:0b:cc:09:7e:20:f4:f7:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Validity
Not Before: Jan 31 04:00:18 2025 GMT
Not After : Feb 1 04:00:18 2025 GMT
Subject: CN=f7df751188b215892e130325edfad3a21ad5af04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:35:6d:6f:5e:1d:d0:c6:44:b1:a1:04:03:99:
89:91:44:02:44:d9:e8:cb:0a:16:6a:67:75:7a:62:
29:d9:da:5b:fb:16:25:86:26:ac:c3:a8:09:41:1e:
dd:1f:36:4f:6e:4d:a8:33:89:2d:4b:c0:38:1a:11:
cf:58:1d:9a:b3:93:50:10:dc:d7:0a:04:ee:2a:7a:
40:51:bf:68:af:ae:03:43:e3:34:8c:3c:a3:fb:10:
32:05:71:3f:b8:a8:27:f7:fa:49:2b:01:40:bb:a8:
ec:e5:d5:83:0f:5b:bd:23:c1:62:26:2f:a7:bb:f8:
c1:97:3c:5b:01:b8:8b:c3:b1:f1:0c:e7:72:45:5a:
6c:2d:b0:3e:b7:55:6c:8e:ac:48:51:0a:94:0d:f4:
1b:1e:63:80:94:40:05:68:27:7b:f7:12:96:2f:32:
78:b3:b9:c4:a9:6d:a3:5b:a9:2b:76:00:53:6a:db:
ea:da:9d:ea:01:0b:b3:3e:ac:92:69:a3:c7:d8:45:
f8:03:80:a9:3c:82:dc:a7:1c:a9:94:51:6b:81:9a:
89:54:7f:65:0b:d7:52:20:33:2a:99:5d:c2:f7:39:
ca:16:53:af:cb:a8:92:50:d4:54:8d:14:7d:9d:27:
2a:59:60:46:43:f7:2a:02:e8:6b:73:8b:62:d7:bf:
d1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DF:75:11:88:B2:15:89:2E:13:03:25:ED:FA:D3:A2:1A:D5:AF:04
X509v3 Authority Key Identifier:
keyid:54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:6f:20:4b:f9:c3:91:c2:a3:de:52:35:a0:bd:53:2a:a0:f3:
b1:07:43:54:d8:63:7e:15:be:f3:87:76:03:17:8b:dc:72:66:
81:d4:a6:2b:6b:e0:87:34:6d:30:55:a2:f6:8a:e1:0b:45:b5:
e6:60:6c:4f:6e:e9:20:98:bd:2e:63:d3:e6:09:23:46:ad:f0:
90:48:6a:8a:63:fa:d3:e0:c7:92:fa:2d:1d:46:32:2f:cf:23:
a2:21:22:5c:51:1d:a5:47:9f:14:11:33:fa:7b:0e:35:67:2e:
14:75:f5:19:92:06:66:f2:73:0f:16:56:ff:7b:27:77:67:fe:
73:17:d2:d3:c2:c9:2e:57:9f:c0:b7:dd:23:7e:4e:56:ba:bf:
6e:20:b5:07:c3:63:23:d2:fc:08:cd:5b:43:ee:cb:80:55:3b:
cb:00:fb:c9:68:cf:b9:0f:d0:46:c5:c6:83:e9:cc:4d:4f:1c:
39:18:c9:1b:ef:17:f9:5a:cd:7f:e1:c8:a4:af:f4:92:5e:24:
9e:b5:b9:8d:83:89:19:be:23:4a:a9:b2:96:71:bf:2c:2a:3e:
b6:56:5e:4c:be:ef:f4:bc:17:61:53:51:82:eb:b8:4b:c6:b0:
b0:ef:81:6d:a9:63:17:b3:3c:e2:4a:ae:c6:f5:0c:a8:c5:98:
b2:cb:e2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:59 2025 by rpki-client on console-fra.rpki-client.org