Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
File: VSyaHJxP95PoiL1YPcqYFcxFdMA.mft (raw, json)
Hash identifier: QiKROy8EwBgGmmbjeDwXrsO6EsdLrJ0c0BZAcmwlMmY=
Subject key identifier: DD:0C:0D:15:4C:27:D1:01:03:7C:35:A9:F3:6F:91:4F:99:C6:52:C0
Authority key identifier: 55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0
Certificate issuer: /CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
Certificate serial: 01936A7D4E953C57ED4D141FC2A578EF97AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
Manifest number: 130C
Signing time: Tue 26 Nov 2024 22:00:17 +0000
Manifest this update: Tue 26 Nov 2024 22:00:17 +0000
Manifest next update: Wed 27 Nov 2024 22:00:17 +0000
Files and hashes: 1: VSyaHJxP95PoiL1YPcqYFcxFdMA.crl (hash: FVfeEqtDoZhA531YcVDE4ek5p1j1B0kiml0/zykCPng=)
2: gRFKVxLagDwNGMYL_lzqi3i8vA4.roa (hash: sJgv3RHrKF04fCkDxNYIpGoTwWGdXsJI3SnsPAIKbaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:7d:4e:95:3c:57:ed:4d:14:1f:c2:a5:78:ef:97:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
Validity
Not Before: Nov 26 22:00:17 2024 GMT
Not After : Nov 27 22:00:17 2024 GMT
Subject: CN=dd0c0d154c27d101037c35a9f36f914f99c652c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:71:ba:f2:42:d0:e3:f4:0b:0a:09:e2:ef:bb:
9c:3f:f9:7e:f8:34:f7:e1:4e:3c:51:47:3b:d5:20:
c1:29:31:52:9b:96:b0:3a:f6:58:40:51:e9:12:7b:
4b:5b:c3:81:dd:ea:5f:73:93:27:9e:66:25:a1:bd:
ef:55:66:aa:e5:6e:82:f5:a4:8b:12:2b:8b:bd:5b:
36:42:64:b3:1c:ed:ba:c4:dd:7e:e7:ab:58:e7:b2:
1d:78:62:fa:6f:02:a8:b8:04:de:ea:fb:24:f4:98:
58:93:1a:53:db:95:b3:31:c7:b6:9c:db:b5:fe:ad:
2e:a1:36:ad:1e:26:d9:19:0d:e9:d7:7f:28:3b:1b:
84:da:d8:b7:64:dc:91:2d:13:e8:00:26:a3:78:3e:
dc:a2:05:0b:84:b1:36:bc:1d:dc:c0:8d:c7:9c:14:
39:1b:16:d0:64:b5:6f:11:a5:18:43:d4:e1:12:43:
9e:f8:12:b9:86:e9:ec:19:03:81:b2:5d:28:7f:ac:
9c:72:c0:da:ef:2b:2c:19:cc:13:ed:49:19:f0:5d:
82:fb:07:b8:b1:5e:64:f1:26:62:c2:bb:17:59:b5:
b4:46:28:31:6f:76:ac:d1:30:8c:d1:11:70:92:eb:
58:9f:0d:a1:bf:92:ac:58:b5:9c:21:73:e6:9a:67:
b1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0C:0D:15:4C:27:D1:01:03:7C:35:A9:F3:6F:91:4F:99:C6:52:C0
X509v3 Authority Key Identifier:
keyid:55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:51:29:bb:b6:2b:92:ed:44:48:95:aa:c7:b4:dd:7d:fe:f0:
46:08:b7:0f:69:b4:b5:bb:c3:bc:32:75:9d:36:cc:4d:5a:3a:
f4:7a:6c:d3:d9:3f:b9:7f:5d:20:de:d5:59:67:ba:ca:40:a3:
bf:e5:8f:71:df:cf:12:3f:ca:12:41:40:24:ea:39:de:59:99:
34:29:1e:91:3c:1c:de:bb:a6:fa:44:9f:13:68:8a:c1:ee:9f:
fd:e0:5b:46:ce:20:61:08:c6:31:9e:fc:75:44:5e:89:6a:a0:
8b:38:66:4f:0d:21:eb:d0:67:ee:ae:0e:2a:4a:4f:57:70:61:
95:80:b7:67:b8:fa:b7:22:b8:35:3c:70:79:5d:ff:6d:72:4c:
4a:c9:61:49:9a:a5:d7:b7:55:c8:5d:1e:f6:fe:61:a1:97:43:
4c:36:1d:41:63:50:c4:2f:55:c6:43:5a:cd:be:6a:b3:4c:9f:
ad:dd:ce:e4:d5:24:2c:5d:41:77:60:30:52:ae:bb:61:7a:42:
57:c2:5e:81:45:c8:b9:60:85:7d:af:75:d4:19:9f:f0:43:7d:
3b:a0:20:d4:5c:54:ca:0c:07:6d:44:f9:4f:fc:29:5b:55:42:
b9:80:d7:91:c1:79:74:b5:a4:6b:f0:d3:75:20:f7:7b:60:ce:
a0:d5:f2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:12:14 2024 by rpki-client on console-ams.rpki-client.org