Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
File: vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft (raw, json)
Hash identifier: 6VXEQ7yj0gwqXeKYZU0xO8sZoUi/JLAGsMgwGGRxadE=
Subject key identifier: 07:15:3D:0C:CC:D3:94:BC:61:30:D9:F1:A8:12:9F:6D:45:DD:69:60
Authority key identifier: BE:2F:2C:CF:1B:AA:39:03:3E:C7:6A:58:6F:84:6A:36:21:8F:20:9D
Certificate issuer: /CN=be2f2ccf1baa39033ec76a586f846a36218f209d
Certificate serial: 0194BB96CBACEF8645899F617F294B66710C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
Manifest number: 0F6C
Signing time: Fri 31 Jan 2025 09:00:09 +0000
Manifest this update: Fri 31 Jan 2025 09:00:09 +0000
Manifest next update: Sat 01 Feb 2025 09:00:09 +0000
Files and hashes: 1: JAdnsONCtTfLbO2OfLFXkq3UEe0.roa (hash: uH25J1sXmVYdKjAjZcQtubKyV6gnVwOjCbWyLNaZ4r4=)
2: vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl (hash: z1reT2id/5vRLpaDtuA4X3ZrNMPmRyJxWJQbVOKeXYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:cb:ac:ef:86:45:89:9f:61:7f:29:4b:66:71:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be2f2ccf1baa39033ec76a586f846a36218f209d
Validity
Not Before: Jan 31 09:00:09 2025 GMT
Not After : Feb 1 09:00:09 2025 GMT
Subject: CN=07153d0cccd394bc6130d9f1a8129f6d45dd6960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:37:d4:82:d6:1a:8c:7a:58:b5:62:db:87:5c:
fd:6a:66:81:6e:77:e9:7a:27:fe:9d:6e:c1:7c:93:
62:12:4c:6b:f9:85:79:2d:e2:a6:c1:2c:31:1a:57:
64:a2:2b:4f:6e:3f:f0:71:e9:7f:dd:92:36:3a:88:
8b:b1:84:21:c2:2a:f3:cc:6d:0c:1c:0a:6e:eb:b9:
56:f8:23:4a:57:b9:8b:98:2a:41:b9:34:7b:65:07:
70:b2:d6:15:12:e8:b6:2f:a1:0e:2d:c3:a9:8f:d6:
c0:0b:a4:0f:94:4f:b4:54:ea:55:1c:da:a3:3c:aa:
4e:da:00:c1:45:71:ba:5c:bb:7f:95:f3:8f:c9:31:
b1:a4:1a:aa:d0:c3:ee:ed:79:44:c5:2b:7a:0c:40:
5d:6e:ab:1c:54:b6:14:8a:6e:d4:fa:ed:03:54:19:
53:7b:c3:e3:03:5e:1a:6c:39:05:d4:46:6b:cf:a8:
b0:3d:73:be:58:c5:c9:eb:7c:22:2a:65:9a:3c:4b:
fe:31:29:2a:71:d7:a3:de:51:1b:5a:c1:12:d4:dd:
b4:84:8c:86:f0:c3:76:4a:06:80:03:51:71:8b:c5:
40:70:0d:09:d9:9b:c4:99:09:6d:3a:63:a4:39:79:
18:7d:a8:77:8a:47:a8:fc:11:b4:17:b6:10:f6:59:
3a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:15:3D:0C:CC:D3:94:BC:61:30:D9:F1:A8:12:9F:6D:45:DD:69:60
X509v3 Authority Key Identifier:
keyid:BE:2F:2C:CF:1B:AA:39:03:3E:C7:6A:58:6F:84:6A:36:21:8F:20:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:44:17:c1:be:85:6c:d6:97:4f:be:38:0d:3f:83:d9:5e:6d:
bb:35:53:aa:65:5e:6b:bb:9d:6d:6a:c1:32:69:f7:33:9c:22:
a4:17:a7:3f:63:bf:3b:0a:7a:f3:3a:42:dc:06:6d:5d:51:29:
97:70:ab:0d:3a:f4:6d:be:41:35:d1:12:39:c0:fb:ed:e2:38:
8c:dc:01:4c:f0:69:e0:9e:c9:cf:4b:eb:cd:99:eb:f3:f5:00:
a7:a3:f9:fd:79:4c:4b:37:f8:e6:25:1f:25:93:dd:45:c8:d1:
78:25:03:d2:13:b6:e2:48:b1:c9:3e:bc:d5:bb:71:d6:96:a9:
28:20:bf:e7:0e:21:e3:f7:0f:1b:3a:99:6b:61:b5:ac:e4:05:
e7:c7:cc:53:93:9e:84:ca:83:24:4e:b0:ed:cc:54:7f:46:97:
62:2d:6b:02:82:85:cf:5d:f2:45:6a:a2:5d:c3:73:7c:c0:98:
65:0c:39:3a:3d:4e:e9:00:a4:20:5a:25:5e:f1:67:45:0e:54:
40:34:5a:89:70:38:17:66:9e:ae:fc:9d:2f:b5:52:42:1b:d7:
95:51:9f:15:45:70:69:e8:1b:a3:99:09:f9:81:df:0d:3c:97:
fc:65:7b:7f:0a:03:b9:5f:5c:34:35:24:44:24:e9:af:6a:40:
3b:2b:77:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:56 2025 by rpki-client on console-fra.rpki-client.org