Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
File: VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft (raw, json)
Hash identifier: oFnp8ygbOBueGly3Pv1jzIgNZX9tvnWHZaXXjyXnfIg=
Subject key identifier: D8:12:1C:34:FD:4B:6F:48:EC:E2:2B:47:C9:18:95:28:CA:8B:3C:C1
Authority key identifier: 54:4D:5A:6C:39:19:F5:1F:8F:DB:95:05:0C:19:C5:3E:F8:49:D0:79
Certificate issuer: /CN=544d5a6c3919f51f8fdb95050c19c53ef849d079
Certificate serial: 01935508AC4E7CC559EEA0437472186AFA23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
Manifest number: 0A68
Signing time: Fri 22 Nov 2024 18:00:51 +0000
Manifest this update: Fri 22 Nov 2024 18:00:51 +0000
Manifest next update: Sat 23 Nov 2024 18:00:51 +0000
Files and hashes: 1: VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl (hash: OQVDOsl7N9I1P1BLEUbjAIqiiBzy66hOB6haygur/y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:08:ac:4e:7c:c5:59:ee:a0:43:74:72:18:6a:fa:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544d5a6c3919f51f8fdb95050c19c53ef849d079
Validity
Not Before: Nov 22 18:00:51 2024 GMT
Not After : Nov 23 18:00:51 2024 GMT
Subject: CN=d8121c34fd4b6f48ece22b47c9189528ca8b3cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:51:ae:94:31:9c:41:aa:a5:3e:48:87:c1:36:
71:6d:7b:c8:2b:78:48:ed:d6:96:82:4d:a3:6a:ce:
4a:ff:78:14:b5:7f:c6:41:34:14:af:6c:04:0c:4a:
14:9c:ab:01:33:6a:8c:dd:e4:33:ab:51:66:ca:3c:
bf:72:b8:0d:4d:f8:a6:f7:ed:87:9c:72:47:3c:f6:
fa:f7:ac:89:3f:03:25:54:eb:41:39:10:63:35:a3:
bd:65:ab:0d:ba:50:cb:c3:80:d3:e5:4c:c1:16:99:
f3:aa:8b:07:4d:b0:ea:ee:d0:19:cf:75:df:e3:37:
ca:42:24:dd:7b:db:aa:1b:05:19:d7:2e:2d:bb:2f:
3b:25:1e:ff:20:70:bd:cb:72:c4:b3:af:8f:fb:f0:
d3:cf:dd:95:16:26:1d:6d:8e:7b:25:5c:aa:2f:70:
11:55:49:3c:e5:c2:29:a0:12:d4:ee:f6:b6:31:62:
94:27:56:26:57:ea:18:8f:c1:2f:22:cf:f7:72:a9:
22:f8:15:ec:a2:a1:f8:cb:a0:25:ea:d6:ba:a6:f3:
5e:01:9d:fc:1a:d1:b8:12:72:62:6a:7b:9a:c4:bf:
7f:71:ad:b7:47:83:af:37:9a:5b:5d:bc:6b:c7:97:
bb:9c:2b:07:63:5a:f0:4d:fa:ce:fd:1a:b1:5b:13:
f2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:12:1C:34:FD:4B:6F:48:EC:E2:2B:47:C9:18:95:28:CA:8B:3C:C1
X509v3 Authority Key Identifier:
keyid:54:4D:5A:6C:39:19:F5:1F:8F:DB:95:05:0C:19:C5:3E:F8:49:D0:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c6:07:67:f7:2a:0e:6a:6e:6f:5c:80:05:cf:54:7d:8c:73:
ca:e0:c1:27:ba:4a:04:34:f4:88:ee:38:46:40:8d:9e:df:92:
c6:db:04:48:3e:b4:29:f6:84:5d:6e:6c:50:f7:8f:c2:58:b5:
d9:bc:9e:8e:a5:98:96:f8:dd:a1:1e:96:a7:df:68:8f:52:2b:
ac:e0:fd:64:68:de:09:6a:4f:1b:a2:c0:88:9a:f1:d0:71:44:
4d:a1:b4:00:d7:32:33:e7:00:63:ff:ea:9c:4b:c5:83:4e:09:
d9:9c:a1:9c:a1:2b:12:54:61:63:4a:c0:48:19:29:6e:73:8a:
98:c1:4e:5c:c1:c5:93:60:7c:62:96:a6:8c:2c:8e:2f:f8:0f:
a9:4e:7b:41:68:d1:82:4d:e3:3f:df:60:38:ea:88:ad:c3:3d:
ca:a0:40:a5:be:c6:c0:d3:a1:c0:95:f5:38:bc:1a:82:d8:b6:
b4:ce:31:25:d6:9c:02:90:f6:40:ca:26:5c:86:6d:00:7c:ff:
42:14:4d:69:d0:cc:37:63:16:3e:07:25:1c:23:6e:31:d2:99:
f3:af:dd:cb:85:c3:f3:08:77:34:9e:9e:89:9e:0a:60:0c:5e:
f2:d2:12:2b:64:26:11:16:ad:0c:de:79:00:6c:46:0c:d5:72:
41:1c:3a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:51:03 2024 by rpki-client on console-fra.rpki-client.org