Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
File: VytO2SaC1xio_ESIFAAnQGlgeV8.mft (raw, json)
Hash identifier: DYkZc9BDDzqMvr8cCA3n0AIPgEdv78Ba3g5soGohXs8=
Subject key identifier: DC:B8:01:FA:4E:D1:9F:1B:7A:79:C6:CF:7E:60:25:73:22:27:A4:28
Authority key identifier: 57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
Certificate issuer: /CN=572b4ed92682d718a8fc4488140027406960795f
Certificate serial: 0190459D3DC6424FEFCC0B38245CF01069F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
Manifest number: 0829
Signing time: Sun 23 Jun 2024 15:00:51 +0000
Manifest this update: Sun 23 Jun 2024 15:00:51 +0000
Manifest next update: Mon 24 Jun 2024 15:00:51 +0000
Files and hashes: 1: Bbnls2_6SCo6y919vuOMPU8Z_Tw.roa (hash: GsHv4RUOismCpiicVdSRNnkPbMoB7WKtTnKpXENBw90=)
2: VytO2SaC1xio_ESIFAAnQGlgeV8.crl (hash: VJhmKAvYZ1QWnNCK/OkwtyzkIH9atsykucXgOb1avUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:9d:3d:c6:42:4f:ef:cc:0b:38:24:5c:f0:10:69:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572b4ed92682d718a8fc4488140027406960795f
Validity
Not Before: Jun 23 15:00:51 2024 GMT
Not After : Jun 24 15:00:51 2024 GMT
Subject: CN=dcb801fa4ed19f1b7a79c6cf7e6025732227a428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2d:d7:0f:fc:2a:8d:60:63:42:46:b9:2a:b5:
78:42:a5:dd:aa:ce:f6:02:ff:9d:ec:c2:4a:8e:04:
d4:ca:20:32:6f:25:75:56:96:48:e1:d1:a4:ca:9f:
87:55:da:64:ac:cd:f5:c9:f5:d7:88:a9:78:8c:a3:
69:d8:81:e0:fb:59:c7:de:7d:51:a5:99:cb:a2:70:
c5:47:a7:21:dd:42:5d:25:dc:76:32:4f:d7:6b:ee:
ed:1c:b2:d4:09:d7:e3:45:10:cb:3e:2f:3e:70:fd:
fb:ec:2f:7b:11:5a:7a:a6:38:b3:8b:83:88:82:29:
6d:f2:bb:97:d6:be:ba:1a:d1:e7:aa:9d:0e:47:09:
b4:58:45:48:ba:62:13:44:3f:32:a7:60:5a:71:ae:
02:26:4a:85:40:c0:81:ac:33:a7:60:b1:cb:5b:eb:
62:ea:b9:64:ba:5d:75:8a:23:3d:bb:f6:30:98:3f:
1c:f8:fe:35:ce:b7:47:81:ac:68:72:a9:76:ca:69:
3b:92:02:32:86:40:01:eb:be:0e:18:83:9b:3a:7d:
dc:08:c2:88:11:03:c5:d3:3e:c6:5f:60:22:08:e3:
c2:59:ed:94:88:bd:db:9a:18:ba:c6:3c:d1:08:f2:
83:6b:5e:97:a7:52:2b:d2:96:48:35:12:73:a4:69:
f0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B8:01:FA:4E:D1:9F:1B:7A:79:C6:CF:7E:60:25:73:22:27:A4:28
X509v3 Authority Key Identifier:
keyid:57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a1:a8:3f:18:5c:61:9e:4a:aa:af:56:b6:09:19:39:df:f1:
08:d9:86:3a:0a:97:6c:2f:b5:27:cc:91:86:90:ac:a3:63:07:
92:22:4f:a6:a9:f9:f9:e5:3b:c3:46:78:ad:f6:f7:66:fd:91:
88:74:14:f2:f0:59:38:c4:82:1b:55:ed:57:b9:05:a5:68:6e:
f6:21:22:14:ea:3d:ae:c9:3c:ca:ab:31:80:7d:5e:b7:4f:10:
ad:35:d9:05:e2:6c:1e:36:3c:51:f1:86:09:19:a5:71:58:92:
68:bd:98:b3:e1:2e:21:1b:ab:16:28:fe:ad:fe:e3:bf:dd:7d:
db:b9:2a:4a:c0:3b:97:2e:73:63:0b:bd:e0:94:02:63:05:88:
b9:23:ed:e1:a1:24:26:24:fb:49:3c:79:71:4d:4b:3b:11:62:
75:4c:7d:4e:72:74:16:f8:43:25:b5:d1:4e:c9:64:06:99:ad:
a5:35:5a:79:77:57:e9:b3:d5:f5:90:c7:2d:01:ed:dc:cb:a6:
e1:e4:72:55:9a:5a:bd:27:4d:b7:85:07:61:b2:43:02:a8:e7:
08:50:e3:59:c9:9a:88:38:6a:ea:85:57:a3:e6:47:e8:38:df:
b0:50:06:a1:23:3d:19:73:4a:48:05:16:47:96:44:04:ac:79:
7e:1a:f0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 16:48:52 2024 by rpki-client on console-fra.rpki-client.org