Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
File: VwFSjCouLEaRPAsoyjVw84gPGlY.mft (raw, json)
Hash identifier: nM/lSSSgwREdo1oNYXgsgFyGrpe0e21vds2MtpNUyys=
Subject key identifier: 86:A0:C7:26:9E:F8:97:0B:2F:81:69:01:F7:1E:66:0D:6C:EC:78:94
Authority key identifier: 57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56
Certificate issuer: /CN=5701528c2a2e2c46913c0b28ca3570f3880f1a56
Certificate serial: 0194BB29319014F2547C2DE28A6C1F655DE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
Manifest number: 0837
Signing time: Fri 31 Jan 2025 07:00:26 +0000
Manifest this update: Fri 31 Jan 2025 07:00:26 +0000
Manifest next update: Sat 01 Feb 2025 07:00:26 +0000
Files and hashes: 1: 466YAs6d9cdjAoG1VqV9G_HtvQg.roa (hash: wVtqE+qIa2JsmDebXlhf45xn2AahdoB1no9v6MIhuuw=)
2: VwFSjCouLEaRPAsoyjVw84gPGlY.crl (hash: k2Fbt9fL1SMUxuryeGNc5TDZEFlO4eyg5RMDCbyk7hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:31:90:14:f2:54:7c:2d:e2:8a:6c:1f:65:5d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5701528c2a2e2c46913c0b28ca3570f3880f1a56
Validity
Not Before: Jan 31 07:00:26 2025 GMT
Not After : Feb 1 07:00:26 2025 GMT
Subject: CN=86a0c7269ef8970b2f816901f71e660d6cec7894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e4:41:1f:75:bd:c2:0a:63:a9:1e:0a:8d:63:
60:b9:b3:74:57:c7:69:f7:bd:a8:be:ad:87:bf:37:
18:c7:e4:bc:76:c1:79:e7:ce:4f:ca:ae:d8:56:19:
ff:92:42:b6:d3:d5:6b:59:4e:a3:89:7f:70:49:8c:
69:8d:0c:b3:e5:d0:bb:8d:0a:71:61:1b:6a:20:89:
cb:bb:e3:32:af:94:83:a9:e2:ca:a0:12:31:42:90:
f6:e4:55:7a:22:71:61:c4:bb:65:ad:41:e6:93:8c:
c5:e7:6a:d1:fa:7f:3c:33:6b:31:f8:b9:31:c3:c2:
43:a5:f7:ca:ff:22:af:fa:fd:57:69:17:1b:00:e8:
8e:66:33:6a:28:de:e0:ec:23:96:13:2c:8b:21:bf:
2d:a8:01:34:ee:03:34:94:f0:0a:fe:ee:3e:e5:61:
53:a2:c2:1f:a4:17:19:fc:d4:62:3a:d5:c1:ac:d0:
95:d1:b7:29:58:32:1e:e5:02:2e:89:f3:4d:7a:1b:
80:19:f3:7f:0f:6d:7d:9d:f9:6a:ee:fd:c0:cb:74:
f2:06:da:54:1c:e3:82:b2:85:a6:84:f1:09:fe:e6:
13:cc:31:37:4f:5f:3b:d0:60:de:4b:84:b2:e5:5e:
41:cc:94:54:83:31:af:35:f6:83:e9:fc:f3:22:eb:
6c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A0:C7:26:9E:F8:97:0B:2F:81:69:01:F7:1E:66:0D:6C:EC:78:94
X509v3 Authority Key Identifier:
keyid:57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:41:50:b2:5a:c9:73:35:7b:e2:08:68:b0:af:f7:f5:a0:d0:
35:3d:9e:5e:83:c7:64:fa:c5:77:5f:66:28:6d:29:77:ad:e9:
f7:b3:54:f2:f6:a5:b6:e3:ed:7e:e9:3e:de:2c:98:ac:5f:04:
29:75:6f:56:16:b3:2e:b1:44:12:02:df:e5:fe:07:1a:94:68:
eb:80:37:cf:e5:96:83:d0:fa:61:12:91:b5:55:d2:bd:d8:c0:
52:65:61:a3:25:0a:4a:17:93:c8:21:31:e9:4d:ce:f2:0e:c7:
08:03:5d:08:c8:62:62:11:0b:33:e0:28:0b:d1:e6:80:00:e0:
6b:93:68:17:c5:1e:83:dc:3d:72:af:67:35:10:71:cb:dd:a4:
15:52:7e:7d:2d:db:26:25:9c:8b:92:a4:70:10:b1:31:95:0f:
a0:d1:b5:c8:57:09:fc:2f:c2:e4:e9:27:aa:b6:50:33:e1:f5:
09:07:3f:bd:4f:c3:18:19:be:76:f2:f9:0e:5a:0f:b2:7e:fa:
b0:9a:bd:62:4a:5d:72:df:b6:2a:4f:cb:1c:dc:90:dc:18:e9:
8d:f9:ac:db:d6:93:4c:73:67:20:06:6d:90:85:54:15:7e:c2:
d0:de:08:f0:9b:90:6a:4b:98:4f:8d:44:be:1d:72:b1:81:68:
86:8e:6e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:10 2025 by rpki-client on console-fra.rpki-client.org