Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
File: vkCzwr54Ndeze1gmEC-HRqUZnUk.mft (raw, json)
Hash identifier: yV8ymAgnv1TjSlUUlfl3RQjBOyHO4ERv2VBVpXruz4o=
Subject key identifier: 8F:D3:A4:BC:1B:E6:8C:AB:5A:59:B7:7C:23:9C:05:E1:88:64:83:8D
Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
Certificate issuer: /CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Certificate serial: 018F9C87EC15B75513FCA641CE627F8F4FA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
Manifest number: 0A2A
Signing time: Tue 21 May 2024 19:01:44 +0000
Manifest this update: Tue 21 May 2024 19:01:44 +0000
Manifest next update: Wed 22 May 2024 19:01:44 +0000
Files and hashes: 1: _pJ5WosBdTYR38dZLLCr1Wy2QAo.roa (hash: x6o03n45ppIEEHBsFFFfX49yFf9PMhPr4neNR3rhLQo=)
2: lrWYFQ2jllpk5JZfrMkbA1_6PgU.roa (hash: XqTJjZtuLrkTux3xE+h/HUaU+CELbHn+205QoWwF/U0=)
3: vkCzwr54Ndeze1gmEC-HRqUZnUk.crl (hash: /dxM9yLlE0NPeMzw9PquZb5XlMOtjki5xd737vkFgTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9c:87:ec:15:b7:55:13:fc:a6:41:ce:62:7f:8f:4f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Validity
Not Before: May 21 19:01:44 2024 GMT
Not After : May 22 19:01:44 2024 GMT
Subject: CN=8fd3a4bc1be68cab5a59b77c239c05e18864838d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:91:8c:d7:ef:b2:07:8c:c3:04:f2:87:c3:b2:
c5:9b:db:01:07:5a:db:9d:de:30:7a:40:04:08:72:
3d:9b:d7:97:71:3c:6a:b5:a1:d5:de:8b:84:5e:77:
23:ef:68:64:d3:21:42:3c:5e:35:9d:05:36:46:2b:
2c:59:f1:2b:24:b2:6a:ea:2a:51:79:ed:ff:79:d0:
97:58:e6:72:28:29:d9:91:23:e0:40:0d:d5:ac:34:
2d:a9:e8:4e:99:0c:ee:6c:2c:5c:0a:a1:ba:3d:20:
69:b9:aa:d8:97:e5:ea:a2:60:19:6d:a1:ce:b2:7b:
57:1b:c9:1d:2e:79:60:a5:e1:a6:f2:dc:b2:9e:49:
4a:00:a1:41:07:72:a1:91:93:da:69:79:28:45:ea:
35:e3:20:47:44:b3:e4:44:1b:47:2c:3b:65:32:10:
3a:a9:0e:34:4f:1d:00:14:e8:58:57:9e:6a:78:09:
64:30:dd:bb:b8:23:2f:fe:52:f3:3f:2e:ce:c4:02:
d4:10:07:50:f9:86:9e:0f:b2:14:12:79:a3:1c:07:
fe:13:28:c2:ac:d7:8f:a7:f7:e6:6b:96:ad:32:9a:
da:be:9f:8d:4e:f6:64:fa:ac:7d:a2:1e:d9:21:98:
af:38:00:85:5f:f0:41:2b:f1:3f:84:db:1f:63:34:
b9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D3:A4:BC:1B:E6:8C:AB:5A:59:B7:7C:23:9C:05:E1:88:64:83:8D
X509v3 Authority Key Identifier:
keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:de:56:da:51:fa:c2:bb:25:36:6c:b2:94:4f:67:3b:37:54:
5a:80:60:c1:48:88:8d:9d:db:5b:b4:96:d8:ba:16:6e:0f:8c:
a9:b5:cb:48:3c:23:d2:a9:86:97:31:0e:d8:ae:66:2e:c3:24:
05:24:f5:58:b3:e0:3b:cc:41:53:6b:2d:86:8e:02:b2:32:c2:
12:b0:a5:3a:45:ee:46:42:0f:37:4b:e3:fd:e9:67:a4:ca:7c:
4c:86:97:46:b8:f6:92:d0:68:3a:90:b1:fe:c4:b5:4a:19:34:
49:91:84:35:58:4b:8a:28:3b:ef:1d:6a:6f:95:90:8c:83:91:
4f:62:36:47:f2:d9:45:77:27:2b:9d:58:5f:33:ef:99:20:80:
01:d9:ba:a9:5a:d6:09:02:7d:9f:da:ec:2e:80:bb:f6:3d:05:
b8:7d:8c:6a:24:61:71:f2:76:85:51:84:7c:d5:52:76:64:e4:
00:84:39:f6:f1:64:60:51:af:0b:e0:40:c8:32:ac:9f:6a:e2:
d5:5e:6c:9e:03:14:89:8a:8c:4d:02:32:44:c6:38:fd:34:5b:
27:02:4f:1f:17:d8:75:7c:df:1c:45:90:52:18:de:a1:f8:9c:
da:7c:00:8a:28:2b:f4:8e:18:5f:dd:df:b5:87:2e:a0:ee:88:
bf:d8:93:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+ch+wVt1UT/KZBzmJ/j0+hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNDBiM2MyYmU3ODM1ZDdiMzdiNTgyNjEwMmY4NzQ2YTUx
OTlkNDkwHhcNMjQwNTIxMTkwMTQ0WhcNMjQwNTIyMTkwMTQ0WjAzMTEwLwYDVQQD
Eyg4ZmQzYTRiYzFiZTY4Y2FiNWE1OWI3N2MyMzljMDVlMTg4NjQ4MzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55GM1++yB4zDBPKHw7LFm9sBB1rb
nd4wekAECHI9m9eXcTxqtaHV3ouEXncj72hk0yFCPF41nQU2RissWfErJLJq6ipR
ee3/edCXWOZyKCnZkSPgQA3VrDQtqehOmQzubCxcCqG6PSBpuarYl+XqomAZbaHO
sntXG8kdLnlgpeGm8tyynklKAKFBB3KhkZPaaXkoReo14yBHRLPkRBtHLDtlMhA6
qQ40Tx0AFOhYV55qeAlkMN27uCMv/lLzPy7OxALUEAdQ+YaeD7IUEnmjHAf+EyjC
rNePp/fma5atMpravp+NTvZk+qx9oh7ZIZivOACFX/BBK/E/hNsfYzS5HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/TpLwb5oyrWlm3fCOcBeGIZIONMB8GA1UdIwQY
MBaAFL5As8K+eDXXs3tYJhAvh0alGZ1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmtDendyNTROZGV6ZTFnbUVDLUhScVVablVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jNzE2MzYtZWRkOC00ZDExLTg1ZTgt
YjgzNGZhZjZhY2VkLzEvdmtDendyNTROZGV6ZTFnbUVDLUhScVVablVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9jNzE2MzYtZWRkOC00ZDExLTg1ZTgtYjgzNGZhZjZhY2Vk
LzEvdmtDendyNTROZGV6ZTFnbUVDLUhScVVablVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA95W2lH6
wrslNmyylE9nOzdUWoBgwUiIjZ3bW7SW2LoWbg+MqbXLSDwj0qmGlzEO2K5mLsMk
BST1WLPgO8xBU2stho4CsjLCErClOkXuRkIPN0vj/elnpMp8TIaXRrj2ktBoOpCx
/sS1Shk0SZGENVhLiig77x1qb5WQjIORT2I2R/LZRXcnK51YXzPvmSCAAdm6qVrW
CQJ9n9rsLoC79j0FuH2MaiRhcfJ2hVGEfNVSdmTkAIQ59vFkYFGvC+BAyDKsn2ri
1V5sngMUiYqMTQIyRMY4/TRbJwJPHxfYdXzfHEWQUhjeofic2nwAiigr9I4YX93f
tYcuoO6Iv9iTWQ==
-----END CERTIFICATE-----
Generated at Tue May 21 20:55:10 2024 by rpki-client on console-fra.rpki-client.org