Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
File: Vxy1HLpo6375hnp10XqygBgZaqE.mft (raw, json)
Hash identifier: UYYAAMdjtWqxXhi9echtvRKxtO7lxlD6I9d5rykspdM=
Subject key identifier: 68:8E:B1:7E:67:38:5B:EF:BF:5F:50:1E:82:0F:91:35:D3:E9:6F:44
Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Certificate serial: 018F93BAD392AD36CD6E252A371BFFC0CF81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
Manifest number: 0753
Signing time: Mon 20 May 2024 02:00:45 +0000
Manifest this update: Mon 20 May 2024 02:00:45 +0000
Manifest next update: Tue 21 May 2024 02:00:45 +0000
Files and hashes: 1: CI-QSCwceAsre8uMpax2d1qWCLQ.roa (hash: HxqqVkSEukc685uygSCdYQhIIYjRE0gIU0FakPx8fDQ=)
2: Vxy1HLpo6375hnp10XqygBgZaqE.crl (hash: 0YWFPEOOxWuFExkjk6OayJ63gY79MiMMVAp3MFKeC+c=)
3: _K6n5CisBVSl3d6lgfeBVR4ir-4.roa (hash: OU9UeK/U8NCb75qRpWLC1OltBl7ltPLT24GS5BhFsiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:93:ba:d3:92:ad:36:cd:6e:25:2a:37:1b:ff:c0:cf:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Validity
Not Before: May 20 02:00:45 2024 GMT
Not After : May 21 02:00:45 2024 GMT
Subject: CN=688eb17e67385befbf5f501e820f9135d3e96f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:74:dd:e5:f1:24:cd:1d:c5:be:b1:46:c5:f7:
91:ec:22:70:ca:77:26:e8:05:29:77:5d:eb:d4:b4:
32:90:3f:1e:61:06:48:cf:43:2f:ac:ba:45:b9:7b:
c7:46:0d:1a:9d:8a:e8:d1:5c:57:c1:14:17:88:e2:
b9:74:fc:37:74:d7:39:19:c5:63:df:62:df:94:ef:
9a:1a:b8:b8:9f:ae:1d:be:d9:4a:a0:e1:b1:fa:df:
04:bb:ad:31:11:41:f5:f6:81:f2:4f:b6:63:72:b5:
f5:09:6e:a3:c7:0e:a6:6a:7f:ba:27:c5:76:3b:0b:
94:91:50:f0:f7:d2:79:52:46:10:c0:30:e3:f8:22:
36:00:02:49:c1:65:d7:e2:2c:a1:68:fa:96:54:76:
76:13:95:38:f6:00:75:55:44:6f:30:12:a1:ba:b9:
a5:f4:00:e4:27:58:bb:0a:b7:10:af:3e:44:f8:5c:
69:8a:39:2d:d1:19:96:24:2d:57:b2:d7:18:bc:35:
dc:c1:5f:4b:02:7a:7d:bc:c7:39:77:6d:f7:a5:94:
1d:c2:bb:59:a9:9c:0d:05:34:55:da:25:e4:56:96:
ef:48:78:cd:7f:16:7e:da:29:f0:c2:97:05:e8:86:
49:de:d7:f6:ba:2d:ac:d4:11:79:e9:ca:4f:77:8b:
11:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8E:B1:7E:67:38:5B:EF:BF:5F:50:1E:82:0F:91:35:D3:E9:6F:44
X509v3 Authority Key Identifier:
keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:9a:68:c3:81:a3:6d:51:29:23:e8:9f:a2:88:96:31:c4:dd:
47:bc:0f:9a:7e:e3:0e:83:1c:d0:da:63:af:4f:8f:1b:3d:0c:
01:2b:72:06:4c:0a:b9:ff:b8:b8:59:ef:b7:cd:38:24:0a:82:
29:c7:51:9f:cd:72:fe:25:8c:09:76:28:ad:2c:3d:31:fd:94:
a9:4f:d8:7a:25:25:72:bd:37:a5:21:ad:9a:38:08:19:f2:f8:
88:65:d4:8e:cb:10:c0:9d:b1:50:f9:07:d8:80:dc:4d:bc:a1:
79:58:ea:d2:07:7f:e7:51:60:43:17:a7:bc:2d:dc:7f:63:c6:
77:5b:70:b2:b0:56:06:d4:78:89:c8:c4:5f:f4:01:fa:5f:19:
9d:fe:9d:89:75:35:70:21:27:31:95:65:d6:17:f7:66:e6:b2:
7d:bb:78:48:07:e8:72:e3:6f:0b:b9:b2:dd:05:33:86:55:0a:
09:a1:2c:07:3e:29:e9:a1:c2:fe:39:92:94:bc:9e:64:e1:bf:
87:3a:0c:44:56:57:5e:e6:a0:54:db:bc:ed:1e:12:ba:58:8d:
ca:7f:3f:c1:73:0d:2a:04:be:47:b6:fe:de:29:47:54:42:65:
c4:df:be:c1:75:39:d1:2b:fc:91:d9:2d:64:c3:0f:1e:80:80:
21:18:33:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 05:29:20 2024 by rpki-client on console-fra.rpki-client.org