Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
File: vpxSiWGxCzIPR-i3BlTurtLyRNM.mft (raw, json)
Hash identifier: ygIM8/6xOxDD85GLusF7T251zjehhityc05vxokL+wk=
Subject key identifier: 02:B4:A0:48:38:1F:26:DD:61:F0:D8:74:5E:C8:CD:32:D7:94:94:16
Authority key identifier: BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3
Certificate issuer: /CN=be9c528961b10b320f47e8b70654eeaed2f244d3
Certificate serial: 0193579BBD8E439B949B5A908EC94C73866B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
Manifest number: 0962
Signing time: Sat 23 Nov 2024 06:00:44 +0000
Manifest this update: Sat 23 Nov 2024 06:00:44 +0000
Manifest next update: Sun 24 Nov 2024 06:00:44 +0000
Files and hashes: 1: MxDLIarvwGoqvokR4mCkxjZdZDg.roa (hash: ZTstS/S1fSCcXPLTS5MTZzs0m4K+ZWYpfpaWNPhu9fU=)
2: vpxSiWGxCzIPR-i3BlTurtLyRNM.crl (hash: GVoSnlVZE+elXlkZgxMidZTnDRwSjweQJkQoGussrPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:bd:8e:43:9b:94:9b:5a:90:8e:c9:4c:73:86:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9c528961b10b320f47e8b70654eeaed2f244d3
Validity
Not Before: Nov 23 06:00:44 2024 GMT
Not After : Nov 24 06:00:44 2024 GMT
Subject: CN=02b4a048381f26dd61f0d8745ec8cd32d7949416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:40:72:3e:ab:08:10:aa:d8:76:d7:4a:c0:51:
90:9d:4e:7c:3e:3a:f3:e4:3a:64:b8:3a:dc:e0:0d:
94:7e:8d:3b:99:3c:d0:85:5f:0c:f5:86:77:7e:5a:
55:00:46:e5:fe:36:8f:2a:26:ce:17:8b:0c:05:36:
e6:63:11:9f:cf:05:39:12:3b:63:f6:7d:32:69:5a:
34:85:33:60:95:24:73:35:47:7a:db:20:6e:9d:c3:
7e:be:84:03:ea:7d:ea:ed:08:b3:a2:95:1a:e1:11:
b6:67:91:66:a9:7e:48:43:a6:5f:d1:63:8d:8f:15:
e0:94:12:a0:70:56:c7:fd:b4:86:1e:d6:bf:fb:5f:
04:78:02:78:08:dd:83:cc:3d:f0:f5:91:74:99:0d:
23:fe:4a:30:a1:cb:3c:e1:62:ef:c3:e0:d0:d3:75:
b9:93:cb:cd:33:88:b2:89:b1:ad:07:25:8d:8c:29:
b1:f3:41:8d:7b:87:ef:f7:d4:70:3a:db:c4:6a:d4:
67:1e:eb:78:14:55:22:ea:a7:c8:66:fc:89:b5:ec:
23:39:fb:a4:71:02:e4:9d:fc:8a:8b:b3:94:73:56:
be:47:25:9c:e6:41:dc:d7:7f:34:b2:c6:cf:ac:c2:
fc:17:6e:80:dc:52:3a:ae:ec:4a:1d:8c:c1:38:3a:
57:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B4:A0:48:38:1F:26:DD:61:F0:D8:74:5E:C8:CD:32:D7:94:94:16
X509v3 Authority Key Identifier:
keyid:BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:73:dd:4f:99:b9:e1:77:c4:89:97:6d:7a:81:d3:b6:ad:4b:
27:5a:1d:9c:a1:24:04:6d:11:fe:7b:e2:49:b2:07:04:8b:9d:
9f:4e:db:8d:71:19:c0:55:d8:cc:94:2b:47:3f:5e:d9:b3:cb:
73:9f:ab:0e:fb:2c:25:a0:74:21:ac:ac:d9:6b:e1:b0:fe:f4:
a7:dd:12:47:0a:d9:d5:6a:56:b1:49:b5:96:71:93:6f:f4:d6:
c6:3d:d0:6c:3f:d6:76:36:01:64:f2:06:3c:f9:29:6e:06:08:
ca:a1:41:fb:e7:14:b9:94:0b:ec:24:a6:11:eb:51:f1:d6:7a:
2d:76:cd:6d:2b:2d:de:96:1e:7e:27:e3:bf:8b:62:f5:b3:2b:
bf:3d:59:c7:77:e3:8c:47:4e:f8:7e:ad:2f:41:36:5f:fe:4e:
b8:7b:a0:c7:8e:a1:42:d2:73:45:af:98:14:f6:a9:6e:10:13:
50:c2:d3:ba:41:23:a2:72:45:27:66:b4:63:31:27:b6:c1:d3:
96:d4:39:e5:26:b4:48:72:85:9d:59:8d:f6:6a:3b:4b:76:6b:
f8:f0:cb:ee:4a:5d:b3:8d:10:4a:5a:e8:98:75:5b:b9:37:f4:
e9:98:57:7a:c4:64:26:81:68:bb:e4:46:f0:47:eb:85:ce:57:
48:67:58:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:45 2024 by rpki-client on console-fra.rpki-client.org