Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
File: VtZBSGvcmNSn3gkopC19aOYBXzA.mft (raw, json)
Hash identifier: RD0z3+1sgNN71EKPPzJ18sOCC4bxOMTMQhEagREXwKQ=
Subject key identifier: 35:6D:36:77:CB:53:18:16:D6:77:B7:AA:3A:19:22:8B:CE:B7:4D:D7
Authority key identifier: 56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
Certificate issuer: /CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Certificate serial: 019239943AD60C1A36E78D236F8D63D958D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
Manifest number: 1A
Signing time: Sat 28 Sep 2024 17:01:08 +0000
Manifest this update: Sat 28 Sep 2024 17:01:08 +0000
Manifest next update: Sun 29 Sep 2024 17:01:08 +0000
Files and hashes: 1: 0TaXDBJ8t47l7wu1pCzYJt2z6WY.roa (hash: MUWeI+3WSydI9StaBCw5Nh4jBtcurd2qtiZ3+cpDgLc=)
2: NnobAK-AQjxynUcUL3vLrM0FiC4.roa (hash: 72fEZQ4En67bxos7W32TSgAMFViSGsQZkMGXVnxRijY=)
3: VtZBSGvcmNSn3gkopC19aOYBXzA.crl (hash: anZ+K4nc9MW/7QY0MYE1twatnsVLURTi1kyNWS7d6PA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:39:94:3a:d6:0c:1a:36:e7:8d:23:6f:8d:63:d9:58:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Validity
Not Before: Sep 28 17:01:08 2024 GMT
Not After : Sep 29 17:01:08 2024 GMT
Subject: CN=356d3677cb531816d677b7aa3a19228bceb74dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8f:35:ca:c5:53:c2:53:e5:48:ce:f1:96:16:
b8:e3:bc:d9:ad:90:c0:21:27:3c:e6:bc:72:0f:5d:
50:1e:57:10:64:4c:ca:9e:78:7d:2b:37:c9:a1:e1:
8b:e5:76:da:82:17:b5:67:b6:a9:6c:c4:54:48:f9:
bc:ad:82:f0:b3:7a:19:83:c3:9c:64:4e:e9:eb:52:
5d:04:8d:c7:fb:7e:f1:3f:40:f9:b4:81:51:10:bc:
9b:c8:e9:1c:0c:be:70:88:be:69:4b:84:44:ce:c6:
93:49:0d:6a:87:29:b8:40:f2:ad:ef:47:f3:6f:7c:
34:20:b1:13:f4:4e:7d:95:57:eb:94:46:e8:99:3f:
b7:e3:55:f3:90:be:a3:16:91:ff:a7:78:c1:a3:ab:
07:ae:2a:a1:a8:34:5b:6e:87:e1:ae:db:a2:f9:d1:
60:42:54:aa:c4:ef:3c:3c:29:fd:90:2f:18:92:36:
80:30:20:a8:ce:f5:19:af:f3:c6:c3:da:5d:af:4a:
00:48:97:04:a2:f8:1c:a2:49:ab:27:35:b5:ac:a7:
f7:7b:59:f2:a2:0b:58:73:48:f6:1b:6f:6d:04:49:
35:51:32:ef:01:20:13:cd:8b:47:59:73:d5:22:a7:
3e:66:4a:22:65:d2:8d:fc:68:4d:78:d6:96:49:40:
98:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6D:36:77:CB:53:18:16:D6:77:B7:AA:3A:19:22:8B:CE:B7:4D:D7
X509v3 Authority Key Identifier:
keyid:56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e5:c6:91:ff:2a:3e:f8:bb:13:16:09:ee:4c:ad:da:39:ef:
fa:be:b6:d9:b9:8c:b8:03:0a:57:5d:50:8d:6f:a1:73:5c:0d:
94:c3:e1:14:de:df:ca:63:fc:ad:47:6d:7e:01:4a:85:fc:89:
5c:bc:fe:0f:46:c5:f6:eb:5f:9c:9d:61:30:07:a9:96:2f:1b:
95:dc:60:b9:a4:a3:af:f7:97:fa:1d:dd:b5:2a:93:65:db:3b:
f3:65:f5:84:cf:a6:96:ae:17:9c:7c:2b:dd:dd:ee:70:ea:a5:
e8:28:a1:e1:ac:79:ab:46:39:b5:0a:39:47:fe:84:48:40:4b:
cf:dd:3e:1c:4c:24:71:01:53:ea:7b:3d:04:ec:5a:bd:07:df:
ec:93:51:19:94:87:70:ee:c2:99:3c:38:47:02:fd:65:6c:dc:
b3:c5:3a:5b:91:39:b2:97:5e:8b:e7:d6:31:68:d9:e8:5e:0d:
00:1f:2a:58:21:27:4c:4d:38:0b:c5:64:fe:7c:97:62:68:75:
61:49:fd:20:57:e7:ab:43:ba:7c:3f:86:43:f3:5d:7f:90:a4:
3b:7b:5f:36:33:be:13:5c:cb:6a:a5:7b:5b:40:ff:52:9e:30:
ca:77:d2:87:b9:10:2f:48:b9:bb:3d:f6:6c:d9:49:ec:04:aa:
31:01:9f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 18:41:44 2024 by rpki-client on console-fra.rpki-client.org