Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
File: vygFmS5lMdPaMe4a9rzVwG0Ctso.mft (raw, json)
Hash identifier: qTG6TI8X6UXq5GawIEJZnvVFNesRpVztBWb85ezeQQk=
Subject key identifier: 95:95:A0:9C:17:D1:66:3A:6E:F3:ED:3E:1D:C5:B4:0A:E6:BD:49:DE
Authority key identifier: BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
Certificate issuer: /CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Certificate serial: 019357D22FCFC322B24EF3E7CA9D48A99CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 07:00:12 +0000
Manifest this update: Sat 23 Nov 2024 07:00:12 +0000
Manifest next update: Sun 24 Nov 2024 07:00:12 +0000
Files and hashes: 1: M3g8xo7SPfnePK-O4xXUvczEzgs.roa (hash: Yw4IKRU3tB4WCkSGOrEkYad79dMlCjHw8+KPJ0RnYCQ=)
2: bIDmk3x0i1QkM_KacacgH75P1ac.roa (hash: SYYKej9n1crqgfF0Cgn32ubFTOGUc2VbuorTTWWE4/0=)
3: vygFmS5lMdPaMe4a9rzVwG0Ctso.crl (hash: frs/r2L9jH/T7qg0d+e25ieT2qrltk2NJ8DJw710+NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:2f:cf:c3:22:b2:4e:f3:e7:ca:9d:48:a9:9c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Validity
Not Before: Nov 23 07:00:12 2024 GMT
Not After : Nov 24 07:00:12 2024 GMT
Subject: CN=9595a09c17d1663a6ef3ed3e1dc5b40ae6bd49de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:71:2b:60:dd:e3:c5:1c:b0:ea:29:94:bd:4f:
95:58:e2:b4:82:9e:c5:e4:fd:43:b2:a0:92:26:7e:
46:f4:20:a6:37:b8:d7:ad:3d:48:6e:61:69:d3:18:
1e:28:2f:e4:6c:0e:7d:3a:d3:32:db:94:a0:f1:73:
8e:9b:e0:8e:62:a1:61:0f:cb:1a:0a:81:30:9a:0d:
95:86:39:00:3e:1f:30:2d:89:cf:47:e9:e1:74:b3:
2f:da:d3:06:6f:76:4c:35:85:75:47:80:d7:b6:89:
69:31:a4:bf:15:2d:d6:12:60:b5:52:a9:67:4c:a8:
f5:37:fb:a0:b4:fe:3d:18:9f:2a:6f:b8:bf:8d:58:
1a:1d:b0:7e:f2:0f:b6:84:29:93:7a:ae:da:02:f6:
3b:dc:9d:bf:8a:ce:80:8a:bc:83:93:d8:23:69:4f:
39:86:36:7a:2a:4e:93:f4:84:27:70:4c:07:ec:32:
6c:24:2b:a7:f2:12:14:82:69:37:97:2d:f0:11:33:
2d:49:4e:43:38:81:ab:0b:9c:d1:2f:15:2b:4d:91:
d1:62:a1:36:3d:b2:c1:ba:fd:fe:2b:bd:c1:2e:d0:
27:1d:29:ec:ec:80:c0:a5:54:cb:38:2c:ef:94:b8:
f4:ac:4c:a6:27:84:cf:13:d4:20:60:74:a9:67:6c:
9c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:95:A0:9C:17:D1:66:3A:6E:F3:ED:3E:1D:C5:B4:0A:E6:BD:49:DE
X509v3 Authority Key Identifier:
keyid:BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:51:20:1e:80:ea:96:ec:e6:f4:59:74:5b:8b:26:d6:0f:95:
91:79:88:68:2d:6a:6a:7b:1c:31:ae:07:53:59:82:69:90:92:
cb:70:b3:90:db:cc:8a:25:b6:ef:9d:11:5a:4c:8f:20:f7:91:
2f:fc:dc:25:e2:48:c4:82:35:7f:ca:02:f7:9f:9b:85:c8:3e:
9a:bf:7d:f8:b8:fd:7b:6c:22:3e:b3:f8:bf:fc:58:65:d1:91:
d2:97:d4:b0:6f:29:bc:86:a5:c9:31:77:4e:4e:b4:a2:34:d7:
9d:97:e8:85:09:76:7f:64:2b:93:cd:61:3b:e9:c3:ef:7d:af:
2e:20:6d:47:86:b1:52:34:62:a9:1b:8b:42:10:c4:b4:c5:66:
17:07:c7:b8:9a:6e:13:ee:c5:c1:9a:5e:67:3a:7f:7e:dd:a0:
ee:e9:70:2f:50:8b:b9:3c:08:62:4c:aa:09:24:c3:66:09:4c:
3c:6a:ff:04:e9:07:3b:9c:e3:06:db:c8:b1:23:5c:d1:24:47:
0b:b9:ed:74:7e:0b:d5:76:ae:b6:31:8e:fc:57:b0:d2:1a:cf:
a0:3c:fc:08:42:ce:56:74:94:f3:70:51:cc:f6:59:cd:18:97:
ae:af:fd:e5:86:a1:42:d1:1b:78:49:cc:0e:60:dd:fc:b2:1f:
46:8b:64:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:48 2024 by rpki-client on console-fra.rpki-client.org