Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
File: VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft (raw, json)
Hash identifier: v8JT7aKRTpc3F6cHRZMOO9YZH53AkcY5fIa2kQ+N7ls=
Subject key identifier: 77:00:8E:64:4B:4F:7A:8A:BC:72:91:96:1E:E2:1B:62:C4:11:A3:7C
Authority key identifier: 54:79:1D:DE:2C:9B:DE:A3:66:CE:7E:C6:C5:A8:00:C5:DA:63:34:54
Certificate issuer: /CN=54791dde2c9bdea366ce7ec6c5a800c5da633454
Certificate serial: 0194BAF28BDE62D1704AC623CC122431943B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
Manifest number: 11E5
Signing time: Fri 31 Jan 2025 06:00:45 +0000
Manifest this update: Fri 31 Jan 2025 06:00:45 +0000
Manifest next update: Sat 01 Feb 2025 06:00:45 +0000
Files and hashes: 1: 45perw_w1j6f13fS2dhRsqX1J5M.roa (hash: DYBg8sY6Y3Ov/VU9uOEBk40lHTsP43PpQZFd0Uj3ouA=)
2: VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl (hash: 6Wf8rkOXr4+52q7m40faXE1qen43zHy2lP6tPkmbXHA=)
3: lVcXLet5xDC9hx49fSzHNMkhKuQ.roa (hash: yDDXEEZlcdjv6pPGItKtHPkxBZnpxpZ1NCia9fyNgYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:8b:de:62:d1:70:4a:c6:23:cc:12:24:31:94:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54791dde2c9bdea366ce7ec6c5a800c5da633454
Validity
Not Before: Jan 31 06:00:45 2025 GMT
Not After : Feb 1 06:00:45 2025 GMT
Subject: CN=77008e644b4f7a8abc7291961ee21b62c411a37c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a1:2e:7f:4b:88:85:82:6c:fa:60:a6:89:7a:
c8:c7:a8:34:b7:7c:34:1d:58:d9:a2:ba:39:fc:b2:
37:be:f6:5c:02:0b:40:fb:34:81:35:3d:14:f1:8b:
3e:7e:d5:28:85:cd:04:99:ac:28:31:9b:1e:d7:2f:
e5:8a:71:dd:6f:15:87:8e:b4:11:e4:1f:cf:9f:59:
a3:51:f9:2b:1f:42:ee:79:dd:b6:22:af:53:e5:1d:
88:13:17:55:cf:cb:d2:d0:5c:f4:84:07:fa:21:6b:
1f:af:97:29:89:02:bb:35:72:21:e5:24:9e:09:51:
44:81:3c:82:d4:f0:6d:ca:78:c4:6b:1c:17:ac:6e:
d3:f4:69:b8:2f:f6:06:d4:82:98:47:18:0d:ea:87:
35:65:11:da:9e:88:c7:40:2b:dd:b1:7d:70:bc:f6:
9f:76:e2:1d:0c:d2:2e:d7:df:d7:b2:f2:ed:68:3e:
b9:7c:59:51:46:e8:8d:29:df:33:a4:f1:48:a0:bb:
0f:54:02:87:96:a8:a7:2b:af:57:ba:19:b3:a9:e6:
a1:93:1f:96:2b:3a:ff:d8:01:3e:44:6c:4d:71:d9:
e3:24:86:72:5a:43:c1:a4:28:0a:7b:bb:34:95:a2:
7a:f7:e6:a8:9e:e8:40:c4:16:23:88:9e:24:bb:0f:
27:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:00:8E:64:4B:4F:7A:8A:BC:72:91:96:1E:E2:1B:62:C4:11:A3:7C
X509v3 Authority Key Identifier:
keyid:54:79:1D:DE:2C:9B:DE:A3:66:CE:7E:C6:C5:A8:00:C5:DA:63:34:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:42:53:89:11:8e:18:d0:37:7c:8d:7c:d4:22:9f:f2:d0:3b:
30:8b:17:86:9f:4a:32:86:1e:ca:5a:d7:28:16:93:53:8e:58:
b1:92:05:70:d6:57:eb:5e:28:af:3a:b1:22:ca:bd:e4:1b:de:
c9:5a:4a:6e:df:5a:11:d8:81:3f:4b:24:ae:13:07:bd:5d:36:
03:3a:b9:79:8a:00:f9:02:a0:bb:5b:68:57:de:e1:24:97:18:
44:e5:2e:af:3b:57:c8:83:4e:e0:e5:c9:68:d9:c1:6a:7f:d9:
c4:d7:c0:f1:66:42:75:9e:09:9d:98:e8:da:9f:4f:eb:e1:95:
1e:de:31:a3:26:f2:80:4a:aa:dc:e9:92:9a:6c:51:fd:3c:48:
cc:56:21:ac:ff:53:fe:f7:6e:99:c4:a7:12:a0:c3:03:62:a4:
d8:5a:4f:20:c9:bb:df:10:02:78:36:d6:24:63:7b:e1:a6:93:
20:60:30:5d:3e:a4:13:56:bb:d6:53:cc:b1:ea:42:02:f9:7e:
b8:d9:7f:a0:ac:44:e5:61:be:dc:03:2e:65:c9:47:60:57:30:
6a:bc:d0:29:a9:f8:81:f8:85:a6:5e:39:43:c7:c7:9b:56:ff:
b8:10:02:f5:c0:06:da:50:20:ec:56:f5:35:42:87:48:9f:7c:
c5:81:a1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----