Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fc80f0-5c27-4898-84ac-28e416cf11cf/1/vowKdPRzEt8pikYJXkdSXVFYVKE.mft
File: vowKdPRzEt8pikYJXkdSXVFYVKE.mft (raw, json)
Hash identifier: igYCKHt1LDghvEA+oMR+CORgH2fOCCES2Sn+KLGBcqg=
Subject key identifier: 0D:0D:43:B1:A7:17:9F:58:79:30:0A:7B:9A:D1:44:70:37:9C:C6:10
Authority key identifier: BE:8C:0A:74:F4:73:12:DF:29:8A:46:09:5E:47:52:5D:51:58:54:A1
Certificate issuer: /CN=be8c0a74f47312df298a46095e47525d515854a1
Certificate serial: 01904869A30D523358EAD465FBC253006D5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vowKdPRzEt8pikYJXkdSXVFYVKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fc80f0-5c27-4898-84ac-28e416cf11cf/1/vowKdPRzEt8pikYJXkdSXVFYVKE.mft
Manifest number: 0A46
Signing time: Mon 24 Jun 2024 04:03:20 +0000
Manifest this update: Mon 24 Jun 2024 04:03:20 +0000
Manifest next update: Tue 25 Jun 2024 04:03:20 +0000
Files and hashes: 1: 3cqGH6ZdXOe0OcqxDoO4NW7F17w.roa (hash: Nt31i60bPIGlZyaGxnJVt8mbPX8vGb5q3T66vexLV6E=)
2: bmUuSlwCmSnhulY7FhNL1WiBGtY.roa (hash: vGcOfUYOkL3VmUZIjblzRBZFAX8+VlyYxZuXj/2BMoY=)
3: vowKdPRzEt8pikYJXkdSXVFYVKE.crl (hash: oE1GeDUddMgtqgl7y6yuJ7BiXNBLG5MKADtT/91Y3IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fc80f0-5c27-4898-84ac-28e416cf11cf/1/vowKdPRzEt8pikYJXkdSXVFYVKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fc80f0-5c27-4898-84ac-28e416cf11cf/1/vowKdPRzEt8pikYJXkdSXVFYVKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vowKdPRzEt8pikYJXkdSXVFYVKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 04:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:48:69:a3:0d:52:33:58:ea:d4:65:fb:c2:53:00:6d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be8c0a74f47312df298a46095e47525d515854a1
Validity
Not Before: Jun 24 04:03:20 2024 GMT
Not After : Jun 25 04:03:20 2024 GMT
Subject: CN=0d0d43b1a7179f5879300a7b9ad14470379cc610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bc:54:cd:c2:76:6e:5e:5e:38:15:ca:0b:10:
2e:92:1d:80:09:21:33:f2:af:fe:b5:64:67:e5:a6:
96:ef:b8:7b:09:6d:55:09:ac:df:37:6d:0a:a3:b7:
57:b0:82:60:9c:62:5c:56:3e:ce:57:f0:93:12:50:
48:a0:be:0f:be:eb:f8:7f:04:0e:00:04:93:70:4e:
dd:07:f0:13:f0:d1:e9:a3:39:81:1d:86:ae:5b:d7:
28:e4:c3:0f:c8:ed:bb:ba:85:98:09:5a:5f:d3:51:
a4:10:89:14:28:3d:d5:0f:1e:47:6f:fd:e4:49:0d:
0b:71:12:68:19:b7:e9:e3:64:93:e5:0f:b7:db:f3:
27:3f:39:5d:d7:0c:d7:03:1f:f9:4f:6c:4d:ad:b1:
02:6f:9d:01:24:46:73:07:3c:0b:34:9d:c0:79:d8:
05:ae:63:27:fd:e9:a3:04:7c:92:11:42:2f:04:c4:
e6:78:93:6a:57:15:e6:0f:a3:af:6e:45:c0:bc:0b:
8e:d0:af:7d:15:44:28:50:0b:3c:8f:7c:6c:b0:77:
7e:63:93:f1:13:f5:1f:3c:d9:33:61:85:27:4f:93:
87:66:8e:d2:be:bc:8b:c0:c4:f5:b1:ab:26:1b:44:
59:8b:40:42:d4:ff:bd:3d:2e:f9:51:59:76:f4:c2:
dc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0D:43:B1:A7:17:9F:58:79:30:0A:7B:9A:D1:44:70:37:9C:C6:10
X509v3 Authority Key Identifier:
keyid:BE:8C:0A:74:F4:73:12:DF:29:8A:46:09:5E:47:52:5D:51:58:54:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vowKdPRzEt8pikYJXkdSXVFYVKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fc80f0-5c27-4898-84ac-28e416cf11cf/1/vowKdPRzEt8pikYJXkdSXVFYVKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fc80f0-5c27-4898-84ac-28e416cf11cf/1/vowKdPRzEt8pikYJXkdSXVFYVKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:aa:02:57:86:42:5f:d2:28:f3:d9:24:85:6d:64:0e:84:66:
13:02:22:5f:b7:2e:9f:f5:93:5c:eb:5c:61:e2:69:26:f6:8a:
cf:d1:15:34:28:f8:3f:f1:d0:70:66:da:7f:9c:4e:31:3c:68:
1b:64:b6:c9:ff:c3:9f:29:a3:b4:6f:39:56:cc:fa:b1:83:14:
cd:50:f9:d4:4e:1c:d7:0c:3a:53:ea:99:02:c1:d9:46:0c:82:
97:fe:5d:5b:66:d1:8a:07:13:4f:7c:27:cd:c0:aa:75:8e:8f:
3a:46:53:c4:c7:79:47:37:aa:db:2c:6a:5b:a1:dd:6e:46:6c:
1a:5f:95:6f:b7:ae:12:a9:55:c5:a6:2f:96:3e:04:bd:fa:83:
95:01:0a:fa:47:ac:1f:3a:66:56:35:e9:b2:3b:df:6e:ae:85:
5b:9e:71:1b:cb:c9:31:e0:db:2b:bb:b0:49:c6:94:b7:fb:95:
26:3d:0d:fd:06:0e:e7:1e:d6:9c:e0:bb:5c:f3:5b:34:6f:d4:
34:99:af:9e:55:23:ba:05:fa:8b:9c:ed:a7:a1:19:e3:07:0f:
b4:91:c9:94:d1:65:e7:80:11:c7:16:1f:19:f3:45:19:b7:57:
6b:05:11:25:5e:fe:ce:27:59:3d:e6:22:72:c4:9e:67:78:85:
29:7b:58:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:08:30 2024 by rpki-client on console-ams.rpki-client.org