Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
File: vJ7I21lyYHXuKfXvyQth5zwH968.mft (raw, json)
Hash identifier: 4tF1R7WhdOtYGdM7DfPhTEMcAm3SwJBny67ghUqVgEM=
Subject key identifier: D5:34:3B:CE:EF:71:23:0D:26:CA:C5:8B:10:E4:B3:3E:EB:62:04:3C
Authority key identifier: BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF
Certificate issuer: /CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
Certificate serial: 0193640EDDCEB60A6A1285CEC20557F0DE56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
Manifest number: 08C3
Signing time: Mon 25 Nov 2024 16:01:55 +0000
Manifest this update: Mon 25 Nov 2024 16:01:55 +0000
Manifest next update: Tue 26 Nov 2024 16:01:55 +0000
Files and hashes: 1: 1tz66VRzT3ksgBHezpDP-dWydtI.roa (hash: 2aYx7cEdS5mEmOCtCGZr4szy4XXnCbKjEdXlmLb9uMQ=)
2: vJ7I21lyYHXuKfXvyQth5zwH968.crl (hash: sCNv9cxje7reakH3oZOjnsWo/uel50OCkOMIhES2fq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:0e:dd:ce:b6:0a:6a:12:85:ce:c2:05:57:f0:de:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
Validity
Not Before: Nov 25 16:01:55 2024 GMT
Not After : Nov 26 16:01:55 2024 GMT
Subject: CN=d5343bceef71230d26cac58b10e4b33eeb62043c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:b3:ee:28:6e:69:fa:f7:aa:41:ad:3f:85:
6a:c6:f1:03:7e:16:18:28:32:d5:62:61:52:78:7d:
d4:80:9c:11:a7:21:36:d1:1b:82:8f:2e:88:9c:a3:
e9:34:87:68:58:ed:24:45:3b:60:f2:20:e5:af:57:
67:9e:d2:5b:bf:d5:3d:f6:84:b6:25:84:86:6a:90:
39:fa:8d:eb:60:f6:e3:88:e8:58:72:14:05:80:bf:
b0:3c:78:0d:bf:f4:a4:fd:7c:3a:04:84:25:09:4f:
a9:62:a0:81:a9:56:d2:3d:1e:35:0e:53:f7:88:bc:
2c:22:a0:91:46:53:7c:a5:67:83:c5:28:29:c6:0d:
db:d2:b4:63:ce:9b:b5:ac:a0:6b:69:49:1e:8c:16:
02:45:04:9c:f7:d4:20:cf:68:0f:d7:fb:e6:c5:9c:
ac:7a:6f:61:20:ed:69:4e:8c:2c:42:e6:30:0f:69:
77:5f:3a:e0:ad:38:7f:67:61:8f:df:a6:ae:b5:a1:
b9:37:1c:3c:ba:fa:ff:94:74:84:41:e0:2e:9e:fb:
9b:92:22:94:1a:8c:18:c6:d5:95:3b:c7:44:85:b4:
b3:dc:99:0f:35:96:40:35:4b:19:8e:77:45:6f:e7:
b4:47:28:e4:50:37:77:22:04:9f:93:af:65:b1:c7:
55:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:34:3B:CE:EF:71:23:0D:26:CA:C5:8B:10:E4:B3:3E:EB:62:04:3C
X509v3 Authority Key Identifier:
keyid:BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:bb:f6:b9:53:88:6a:1f:bc:0d:4d:97:e9:59:83:24:47:28:
1c:36:74:83:a2:49:4e:5e:4d:4b:cb:31:21:99:ab:5b:95:da:
4e:a6:d5:c4:b9:30:35:8e:71:a8:de:3a:93:26:e3:19:09:fc:
ac:28:ee:98:c7:6e:a2:ca:77:58:3a:e3:99:7a:be:49:45:11:
0f:26:e2:d4:a6:4e:58:20:be:5f:5e:5e:ec:88:ad:0f:43:74:
de:05:40:a2:e2:cd:98:8a:60:1a:5d:3b:b1:d5:00:b9:93:c6:
38:02:4e:bb:ee:ba:82:cd:87:4a:4f:29:9b:9a:7f:12:03:2b:
36:4f:c4:80:7d:97:6f:16:4e:20:b4:6e:e9:8d:a4:26:18:11:
e0:69:d7:bc:56:58:89:07:e4:7c:45:eb:de:3a:b4:c5:96:96:
c6:b7:c3:0a:43:30:a8:38:29:50:30:50:8d:e8:ee:e8:8d:24:
3a:03:15:b1:8b:b8:31:5c:cc:48:9a:a6:41:c0:c6:ae:88:88:
96:37:58:95:bd:71:5b:22:58:c3:91:67:54:fd:35:d4:a7:56:
6a:49:60:62:5d:a3:2a:f7:d4:07:33:a2:d0:2d:8e:23:42:59:
25:22:f9:de:b0:91:c9:a2:f1:7d:fb:b7:5a:26:03:e6:2f:06:
fa:c0:51:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:21:48 2024 by rpki-client on console-fra.rpki-client.org