Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
File: VAQZQbFFDWuVtYyj8HfOII39-0s.mft (raw, json)
Hash identifier: xaJ7GIGPJLgOq7ILyi2IwvqyqiWx113EwUA245KJTRI=
Subject key identifier: 07:BD:79:C5:76:A7:AF:F9:91:76:5E:92:AE:F9:40:D3:9E:78:7F:36
Authority key identifier: 54:04:19:41:B1:45:0D:6B:95:B5:8C:A3:F0:77:CE:20:8D:FD:FB:4B
Certificate issuer: /CN=54041941b1450d6b95b58ca3f077ce208dfdfb4b
Certificate serial: 018F9CF4F96A715031DAC4F76F2015CF2E30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
Manifest number: 0221
Signing time: Tue 21 May 2024 21:00:51 +0000
Manifest this update: Tue 21 May 2024 21:00:51 +0000
Manifest next update: Wed 22 May 2024 21:00:51 +0000
Files and hashes: 1: 7-XRHhcfl-DmlmC_OuJxJU8f3Z0.roa (hash: QF0FJk0X6+Q8j3fvOe2ZQoQSga7sR3h1gIbfi1KtMTQ=)
2: VAQZQbFFDWuVtYyj8HfOII39-0s.crl (hash: iOOIeEyW7c3/vIhsEFjMI1CKED98UxhKiKAmRxyV8oE=)
3: yA8FFQwWS21xHDJvnv7k1peLbSQ.roa (hash: IEIYsIExqZUtgs733xjhnv9gdE4AaRmHuPRhioNh/7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9c:f4:f9:6a:71:50:31:da:c4:f7:6f:20:15:cf:2e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54041941b1450d6b95b58ca3f077ce208dfdfb4b
Validity
Not Before: May 21 21:00:51 2024 GMT
Not After : May 22 21:00:51 2024 GMT
Subject: CN=07bd79c576a7aff991765e92aef940d39e787f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3f:cd:10:41:a2:a4:03:92:d4:f9:33:52:16:
a6:fc:2b:89:66:c7:99:1b:63:3c:d2:5e:45:4b:6c:
02:94:04:19:20:21:e1:1a:d8:da:b9:4e:78:7a:58:
c3:dc:1e:b0:de:20:90:25:f9:84:62:30:71:2d:80:
85:d5:ec:80:17:51:2a:5b:1e:f8:36:70:99:a7:88:
df:c5:60:1d:53:0e:33:14:81:9c:92:fe:7e:c5:77:
78:c9:31:08:9e:ef:2e:22:c6:ce:cd:8a:5b:b3:30:
0f:f7:05:b4:f7:22:29:7b:b5:3a:44:cb:7a:a3:9f:
cb:be:08:17:76:e8:42:80:96:04:6d:8a:20:bb:f8:
75:86:d4:f0:14:b6:df:9c:e5:14:85:79:79:5e:2e:
f0:01:67:13:43:5b:03:97:d6:6a:c7:ef:dd:7d:49:
ae:57:2f:2f:2b:7b:15:40:87:a3:48:5d:b5:e5:fd:
46:ef:a0:5c:0b:00:5c:9c:91:a2:2a:33:35:5a:a2:
8e:45:1f:37:52:11:d1:e0:28:64:b9:75:f8:ab:50:
c0:f4:19:46:2a:1d:8a:74:52:d7:39:a8:96:ab:f1:
05:d4:25:7f:50:83:1b:f0:90:5c:70:45:92:20:bd:
ae:54:d3:61:e8:f4:a6:4a:56:06:ed:04:d4:59:70:
fb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BD:79:C5:76:A7:AF:F9:91:76:5E:92:AE:F9:40:D3:9E:78:7F:36
X509v3 Authority Key Identifier:
keyid:54:04:19:41:B1:45:0D:6B:95:B5:8C:A3:F0:77:CE:20:8D:FD:FB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:33:d5:06:32:ef:f3:93:de:61:97:1b:65:03:1f:3c:99:3d:
59:54:de:66:39:f3:5c:6d:55:2b:47:33:fa:ef:50:4f:47:db:
a7:46:a5:25:ca:06:7f:98:4d:6b:ca:83:7c:58:4d:f3:48:9c:
2f:49:6b:a8:d1:7c:f2:28:d1:08:d4:11:9d:1c:03:55:0c:16:
a0:d7:53:7f:bf:b1:a1:74:11:6e:ba:5f:40:f5:a4:eb:0e:1d:
12:19:2a:7f:5e:a1:a2:87:bb:56:b9:ad:b0:32:34:ce:6f:a3:
d4:6f:1a:51:cc:7a:9d:09:31:a6:1f:f9:43:fd:7e:c4:78:f0:
32:ed:de:98:1e:fc:93:df:69:47:79:9b:41:f5:f1:39:5a:ad:
a4:ae:39:b0:a7:b3:3d:2a:4c:48:23:39:ef:1e:57:3e:ad:9e:
a9:5a:cd:5e:81:c8:e3:6d:5c:ee:8a:8c:17:94:7e:70:ac:29:
5c:aa:23:ef:f0:93:43:ae:06:2a:ab:7c:47:7c:14:aa:ae:d7:
8e:be:e5:6c:50:e4:93:89:9a:83:f2:6c:4e:03:cc:fa:07:cd:
d1:be:c0:4c:b8:88:6b:3a:95:02:41:30:64:dc:25:cb:d5:13:
11:19:e7:64:47:9d:ac:29:94:43:0c:25:4c:1e:bb:8e:01:c6:
3f:13:51:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+c9PlqcVAx2sT3byAVzy4wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MDQxOTQxYjE0NTBkNmI5NWI1OGNhM2YwNzdjZTIwOGRm
ZGZiNGIwHhcNMjQwNTIxMjEwMDUxWhcNMjQwNTIyMjEwMDUxWjAzMTEwLwYDVQQD
EygwN2JkNzljNTc2YTdhZmY5OTE3NjVlOTJhZWY5NDBkMzllNzg3ZjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1T/NEEGipAOS1PkzUham/CuJZseZ
G2M80l5FS2wClAQZICHhGtjauU54eljD3B6w3iCQJfmEYjBxLYCF1eyAF1EqWx74
NnCZp4jfxWAdUw4zFIGckv5+xXd4yTEInu8uIsbOzYpbszAP9wW09yIpe7U6RMt6
o5/LvggXduhCgJYEbYogu/h1htTwFLbfnOUUhXl5Xi7wAWcTQ1sDl9Zqx+/dfUmu
Vy8vK3sVQIejSF215f1G76BcCwBcnJGiKjM1WqKORR83UhHR4ChkuXX4q1DA9BlG
Kh2KdFLXOaiWq/EF1CV/UIMb8JBccEWSIL2uVNNh6PSmSlYG7QTUWXD76wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAe9ecV2p6/5kXZekq75QNOeeH82MB8GA1UdIwQY
MBaAFFQEGUGxRQ1rlbWMo/B3ziCN/ftLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkFRWlFiRkZEV3VWdFl5ajhIZk9JSTM5LTBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85Mzk4YjAtMmZiYi00YmQzLWI5YmMt
MWU4OWY5Njk1ZDFiLzEvVkFRWlFiRkZEV3VWdFl5ajhIZk9JSTM5LTBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi85Mzk4YjAtMmZiYi00YmQzLWI5YmMtMWU4OWY5Njk1ZDFi
LzEvVkFRWlFiRkZEV3VWdFl5ajhIZk9JSTM5LTBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyjPVBjLv
85PeYZcbZQMfPJk9WVTeZjnzXG1VK0cz+u9QT0fbp0alJcoGf5hNa8qDfFhN80ic
L0lrqNF88ijRCNQRnRwDVQwWoNdTf7+xoXQRbrpfQPWk6w4dEhkqf16hooe7Vrmt
sDI0zm+j1G8aUcx6nQkxph/5Q/1+xHjwMu3emB78k99pR3mbQfXxOVqtpK45sKez
PSpMSCM57x5XPq2eqVrNXoHI421c7oqMF5R+cKwpXKoj7/CTQ64GKqt8R3wUqq7X
jr7lbFDkk4mag/JsTgPM+gfN0b7ATLiIazqVAkEwZNwly9UTERnnZEedrCmUQwwl
TB67jgHGPxNRzQ==
-----END CERTIFICATE-----
Generated at Wed May 22 04:20:27 2024 by rpki-client on console-ams.rpki-client.org