Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft
File: ViVsbA6dSVdlruOixqdPWAqzZqo.mft (raw, json)
Hash identifier: p4nCEy8FLvVUeNrdjnGUddD8mXBJ3iTcNo/BfxvcLSQ=
Subject key identifier: 3F:F1:5A:E3:2E:09:F5:8B:9C:90:50:A3:2F:8D:5C:EE:DE:00:E1:48
Authority key identifier: 56:25:6C:6C:0E:9D:49:57:65:AE:E3:A2:C6:A7:4F:58:0A:B3:66:AA
Certificate issuer: /CN=56256c6c0e9d495765aee3a2c6a74f580ab366aa
Certificate serial: 0194BABBBC2475052682421B855FC5FD7CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ViVsbA6dSVdlruOixqdPWAqzZqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 05:00:53 +0000
Manifest this update: Fri 31 Jan 2025 05:00:53 +0000
Manifest next update: Sat 01 Feb 2025 05:00:53 +0000
Files and hashes: 1: ViVsbA6dSVdlruOixqdPWAqzZqo.crl (hash: rUoRjZ7qu1LPuLmjya02LSE3edkfQpgNMqGXasyI10c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ViVsbA6dSVdlruOixqdPWAqzZqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:bc:24:75:05:26:82:42:1b:85:5f:c5:fd:7c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56256c6c0e9d495765aee3a2c6a74f580ab366aa
Validity
Not Before: Jan 31 05:00:53 2025 GMT
Not After : Feb 1 05:00:53 2025 GMT
Subject: CN=3ff15ae32e09f58b9c9050a32f8d5ceede00e148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2e:b6:95:05:3c:16:94:fb:c9:18:7c:21:4e:
96:29:ac:8b:63:9c:1a:e2:2a:d1:7d:d1:67:49:97:
a5:9a:b4:a8:ed:6a:e9:b0:52:38:50:46:e5:82:26:
5b:83:32:41:34:5b:de:dd:16:db:f9:97:e4:1e:8e:
21:b8:82:29:4c:07:55:8c:be:df:65:c6:10:6d:bf:
9a:9c:fd:4f:73:40:33:ed:1b:b1:32:6b:fe:14:3d:
59:ec:8c:0d:04:68:15:21:bb:9d:95:e9:88:48:24:
71:ce:5e:c4:7a:d5:63:01:01:29:cc:d8:07:5f:a7:
eb:68:a2:1c:86:fc:4f:c8:ee:8f:e3:4b:72:43:e0:
ca:99:aa:df:e2:31:b7:96:db:e4:63:22:a4:4f:ec:
04:12:58:2a:ed:d3:80:2b:a6:0f:83:2a:44:b1:9a:
fb:ef:e8:0a:11:06:cb:fa:6c:01:ad:02:b9:2d:77:
02:43:5f:6d:be:ae:15:78:5c:77:9c:28:a0:f9:0e:
8b:48:20:1f:b0:14:ea:90:aa:c3:73:61:c5:88:b1:
70:d3:d7:96:f9:8d:0b:72:ce:d9:30:2c:67:56:e0:
d6:dc:e4:3b:fc:9c:be:1e:28:4c:d3:6d:2f:91:70:
ad:01:fc:05:1e:30:fb:bb:8c:30:72:dc:45:60:f5:
ee:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F1:5A:E3:2E:09:F5:8B:9C:90:50:A3:2F:8D:5C:EE:DE:00:E1:48
X509v3 Authority Key Identifier:
keyid:56:25:6C:6C:0E:9D:49:57:65:AE:E3:A2:C6:A7:4F:58:0A:B3:66:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ViVsbA6dSVdlruOixqdPWAqzZqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ed:39:75:a3:4a:d5:04:e3:3b:a3:88:97:a8:3b:f5:e9:ee:
4e:34:c8:93:22:a6:03:26:49:8a:f5:23:76:4e:70:2b:dd:c2:
64:43:74:9c:4b:98:e9:90:d2:be:16:a4:e1:75:c1:d1:3f:90:
9d:fb:ed:c3:25:5c:c5:00:68:c7:8b:34:a0:ac:d8:56:5b:e4:
28:15:ca:72:f9:20:8b:5f:98:e6:ec:b8:ca:f9:2e:6f:42:7b:
63:99:6a:c0:e4:f2:f6:e8:d8:d7:84:be:2c:ea:7b:4f:d3:a0:
0e:c4:b3:fb:3a:21:59:5a:84:b1:68:cd:ef:3e:82:a6:f9:42:
0b:7d:77:2b:4b:66:bf:f6:a8:f8:a4:20:a2:86:9d:2e:fe:c9:
e2:fc:64:b4:36:16:fb:d9:c8:2a:dc:c2:bb:20:2f:2b:2e:fd:
34:98:31:3c:0a:d7:43:74:ff:cb:86:d8:88:23:13:ee:50:6d:
37:31:25:39:a5:21:14:98:61:47:c5:a9:96:02:16:ed:b2:0d:
80:56:f8:6c:e2:cd:ac:c1:f8:a8:e9:c8:2a:09:67:9d:7d:43:
7d:d6:41:76:64:29:f7:4d:98:59:ce:95:2a:dd:b3:75:3b:40:
57:52:f0:4a:7b:4d:c2:06:8e:15:51:4c:23:90:8e:20:2f:67:
44:fb:38:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u7wkdQUmgkIbhV/F/XykMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2MjU2YzZjMGU5ZDQ5NTc2NWFlZTNhMmM2YTc0ZjU4MGFi
MzY2YWEwHhcNMjUwMTMxMDUwMDUzWhcNMjUwMjAxMDUwMDUzWjAzMTEwLwYDVQQD
EygzZmYxNWFlMzJlMDlmNThiOWM5MDUwYTMyZjhkNWNlZWRlMDBlMTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS62lQU8FpT7yRh8IU6WKayLY5wa
4irRfdFnSZelmrSo7WrpsFI4UEblgiZbgzJBNFve3Rbb+ZfkHo4huIIpTAdVjL7f
ZcYQbb+anP1Pc0Az7RuxMmv+FD1Z7IwNBGgVIbudlemISCRxzl7EetVjAQEpzNgH
X6fraKIchvxPyO6P40tyQ+DKmarf4jG3ltvkYyKkT+wEElgq7dOAK6YPgypEsZr7
7+gKEQbL+mwBrQK5LXcCQ19tvq4VeFx3nCig+Q6LSCAfsBTqkKrDc2HFiLFw09eW
+Y0Lcs7ZMCxnVuDW3OQ7/Jy+HihM020vkXCtAfwFHjD7u4wwctxFYPXu7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/xWuMuCfWLnJBQoy+NXO7eAOFIMB8GA1UdIwQY
MBaAFFYlbGwOnUlXZa7josanT1gKs2aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmlWc2JBNmRTVmRscnVPaXhxZFBXQXF6WnFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8wMjkyZDItODRjNi00YjRiLWIzMmIt
ZTQ1ZjEzODgzNDM5LzEvVmlWc2JBNmRTVmRscnVPaXhxZFBXQXF6WnFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8wMjkyZDItODRjNi00YjRiLWIzMmItZTQ1ZjEzODgzNDM5
LzEvVmlWc2JBNmRTVmRscnVPaXhxZFBXQXF6WnFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOu05daNK
1QTjO6OIl6g79enuTjTIkyKmAyZJivUjdk5wK93CZEN0nEuY6ZDSvhak4XXB0T+Q
nfvtwyVcxQBox4s0oKzYVlvkKBXKcvkgi1+Y5uy4yvkub0J7Y5lqwOTy9ujY14S+
LOp7T9OgDsSz+zohWVqEsWjN7z6CpvlCC313K0tmv/ao+KQgooadLv7J4vxktDYW
+9nIKtzCuyAvKy79NJgxPArXQ3T/y4bYiCMT7lBtNzElOaUhFJhhR8WplgIW7bIN
gFb4bOLNrMH4qOnIKglnnX1DfdZBdmQp902YWc6VKt2zdTtAV1LwSntNwgaOFVFM
I5COIC9nRPs4VA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:54 2025 by rpki-client on console-fra.rpki-client.org