Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft
File: VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft (raw, json)
Hash identifier: I86vflpSgU2A/lA2Ky7Y/npbnEJwB5Bf00aN1NNdIMA=
Subject key identifier: AA:61:10:3B:AA:5C:A6:08:46:26:61:CD:30:AD:90:C8:20:86:30:DB
Authority key identifier: 56:88:B1:1C:5F:24:F2:E9:38:C8:8A:51:CB:49:CE:B1:35:36:43:89
Certificate issuer: /CN=5688b11c5f24f2e938c88a51cb49ceb135364389
Certificate serial: 0194BB973695EB38F32D23E0F6BCE812F7AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft
Manifest number: 0C3B
Signing time: Fri 31 Jan 2025 09:00:36 +0000
Manifest this update: Fri 31 Jan 2025 09:00:36 +0000
Manifest next update: Sat 01 Feb 2025 09:00:36 +0000
Files and hashes: 1: VoixHF8k8uk4yIpRy0nOsTU2Q4k.crl (hash: hy+Or/SVPoYZ7UHz2OxU0naci5R4molhsT7bA9y5ef8=)
2: cJ5glVz4GHRzOf6IyvRRck-9UEU.roa (hash: 58bsNe/joAKOWYDPmFBrEXcY+rLRfxv60aTTZ4/yvVI=)
3: gDx_EkaHuEb4LxSm5qDhRH-UdZM.roa (hash: XHmtxgaP2vmqWx5qZWaBQh+bglRBX5m7TvdpxAwnTCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:36:95:eb:38:f3:2d:23:e0:f6:bc:e8:12:f7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5688b11c5f24f2e938c88a51cb49ceb135364389
Validity
Not Before: Jan 31 09:00:36 2025 GMT
Not After : Feb 1 09:00:36 2025 GMT
Subject: CN=aa61103baa5ca608462661cd30ad90c8208630db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:63:52:23:a4:19:47:f7:21:9c:aa:8c:51:
a7:ae:1b:f1:0b:3e:88:7b:6f:c9:41:8a:26:0d:db:
8d:9d:e3:9a:fc:cf:61:69:9c:8f:0c:e4:d8:cf:d2:
4f:70:a3:92:ab:ac:39:ea:69:ac:94:76:e6:8b:eb:
71:64:4a:75:f3:a3:2d:35:3c:c2:a0:18:75:c9:5b:
8c:df:1e:2e:f9:d0:9c:59:07:bb:76:b0:f3:c6:da:
ed:95:05:89:fe:9b:7b:cd:63:42:d7:80:f0:04:23:
6c:6d:84:71:ff:c2:0f:fe:5e:17:6a:5d:0e:4c:d7:
18:b3:5e:95:85:63:9f:28:93:6b:ed:af:62:49:e6:
02:db:a4:d7:86:37:08:79:0f:75:a6:d1:35:b9:59:
2d:6a:7f:6e:78:db:4a:5c:5f:df:07:8b:91:97:d9:
81:46:07:1d:2d:6e:b6:58:ea:fa:eb:88:96:bd:fc:
f1:3b:92:37:98:bb:25:74:87:8b:96:38:19:30:69:
e3:f2:c0:7e:99:ff:1f:e8:e4:73:eb:92:cd:66:59:
17:64:b6:21:62:bb:a1:00:ba:5a:f1:a5:82:0f:2e:
38:77:8d:08:bb:97:78:a8:82:f1:ae:7f:f9:35:d5:
2d:9d:12:20:c1:1b:c8:fd:cd:85:9d:80:e8:49:1f:
6e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:61:10:3B:AA:5C:A6:08:46:26:61:CD:30:AD:90:C8:20:86:30:DB
X509v3 Authority Key Identifier:
keyid:56:88:B1:1C:5F:24:F2:E9:38:C8:8A:51:CB:49:CE:B1:35:36:43:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:1c:7e:5f:1a:67:87:14:7c:5b:66:e2:a7:05:c0:32:c5:76:
98:30:be:e4:b4:36:b0:c4:ed:63:d4:e3:4e:6c:75:fd:cc:ad:
fc:e1:65:f1:85:a6:95:7b:98:13:01:70:d6:85:e9:30:e2:22:
27:29:63:76:4a:93:c7:9c:94:7b:d0:db:65:d5:2c:f8:b9:d6:
46:72:5a:34:0d:3e:66:a0:d1:2e:57:aa:20:83:26:f4:79:ee:
61:d5:bd:6e:72:07:45:ed:bb:b6:cf:02:46:9b:33:d7:07:e5:
16:5a:c8:60:64:f1:89:ba:19:5a:84:7b:7d:06:62:c1:ca:2c:
90:46:90:ee:7f:cb:f0:33:0a:01:83:59:b6:6d:d5:a2:9f:c0:
b0:30:86:a9:d2:73:37:11:0b:70:38:17:fe:de:62:05:aa:9f:
bc:c5:ac:c0:52:ff:5b:27:1a:70:95:1e:65:53:d2:6e:e3:85:
f1:0e:44:90:14:9f:78:b9:85:8b:66:8c:59:c8:af:99:b5:ed:
24:07:47:63:96:fe:30:bc:ee:4a:11:6b:2d:6b:98:c7:45:55:
83:66:47:e6:09:0b:42:fa:31:96:63:9b:36:a2:50:3f:44:3e:
30:8a:d8:98:0d:52:3c:ef:f2:4e:cb:bf:c9:36:54:78:61:68:
a1:fa:e8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:57 2025 by rpki-client on console-fra.rpki-client.org