Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
File: vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft (raw, json)
Hash identifier: vIObYxUtH7z4ATONvslor0LTtHmEaEeLJf4EiTNUhNI=
Subject key identifier: 8D:CC:DB:48:20:93:FC:E9:E8:E0:98:90:78:DC:C7:71:C9:32:5B:C4
Authority key identifier: BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
Certificate issuer: /CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Certificate serial: 01935688B26BBF0F71404B0E535DA09A53E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
Manifest number: 1374
Signing time: Sat 23 Nov 2024 01:00:19 +0000
Manifest this update: Sat 23 Nov 2024 01:00:19 +0000
Manifest next update: Sun 24 Nov 2024 01:00:19 +0000
Files and hashes: 1: S7GiFR-bu_FB2gjMUFA79eXuOAY.roa (hash: 9Q7VuJiwKGcIktV01VyOXxgKoIPMv5LugACwNKMlU3o=)
2: lNodm1bB0GPqtRUxSA6-6IUWhcM.roa (hash: wOJ4Qij/RckGyrYSI3VJLaSDpIkQYixUmNJOK5JP8oE=)
3: vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl (hash: gszWVv//Kp413Q3DNQi8eqXrNMTs0drOI/23AV6DS+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:88:b2:6b:bf:0f:71:40:4b:0e:53:5d:a0:9a:53:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Validity
Not Before: Nov 23 01:00:19 2024 GMT
Not After : Nov 24 01:00:19 2024 GMT
Subject: CN=8dccdb482093fce9e8e0989078dcc771c9325bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1b:22:90:16:c9:3e:94:b8:f0:75:7f:8b:3f:
31:89:04:c9:fd:c9:3d:2b:16:e5:d8:9c:f5:71:29:
0f:4e:9f:28:11:b1:c1:fb:d5:28:7c:e5:92:6f:06:
3d:11:3c:40:e3:09:92:7c:65:c5:67:5b:f1:b7:18:
5d:1a:bf:2e:d8:7d:37:d0:4c:da:63:68:70:8d:a6:
a6:04:e1:05:62:10:af:95:09:eb:37:fc:99:02:5b:
5f:19:5e:21:df:b7:0b:f6:c0:ae:d7:21:5a:96:05:
0f:c9:e2:6b:fe:4d:09:c2:c2:77:87:90:e5:f4:4d:
52:99:5f:84:bb:a9:be:7c:a1:10:16:36:a6:07:80:
51:09:e3:e4:36:f3:48:e8:c1:72:ac:6e:62:17:0b:
5d:0c:7d:56:c2:e7:cf:e7:5f:ae:d3:5c:a0:05:d1:
1e:a1:6a:c7:d1:c8:92:d0:46:94:b5:97:09:d4:62:
a6:ce:5c:15:fa:d4:69:02:b5:82:33:1a:db:df:78:
71:95:48:a5:70:23:09:d5:0f:c5:bd:23:ff:2e:9d:
45:c0:55:65:6c:0e:57:11:41:17:ee:b6:61:52:a9:
23:09:98:79:df:cd:5a:4a:9d:41:fe:99:c9:84:94:
8f:5f:37:12:76:7a:a8:71:81:41:ac:94:4a:ba:55:
02:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CC:DB:48:20:93:FC:E9:E8:E0:98:90:78:DC:C7:71:C9:32:5B:C4
X509v3 Authority Key Identifier:
keyid:BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:14:e4:1c:37:b0:39:6a:65:c0:bb:88:b4:fc:a5:ae:3c:b9:
b6:93:a4:cf:87:98:a6:56:f2:c5:d8:29:7c:d3:52:d5:fa:00:
7b:76:2f:17:03:78:4e:81:4b:75:6d:63:3d:d3:af:9d:63:3d:
24:44:95:cb:d0:fc:cf:a3:32:4d:3f:49:f6:c4:6d:df:a8:0b:
15:ab:1d:67:bb:68:de:33:53:23:e3:00:b2:b4:72:a6:75:91:
01:22:fb:fd:81:9d:72:37:a3:96:d6:74:f9:f9:b0:4a:b0:ff:
72:13:70:41:10:86:e4:68:89:97:6b:6b:27:d4:c3:65:9d:0e:
a8:df:d4:15:bc:eb:05:8f:3c:8c:1e:02:52:6f:38:7a:35:65:
18:8b:c0:2c:a6:49:13:f6:e9:96:c2:a6:81:74:ec:3d:75:fb:
20:b9:84:0b:b6:d3:31:f7:e8:ab:86:ed:78:60:45:6d:be:9d:
e8:29:a7:8d:3a:d9:2b:71:6d:52:b1:49:51:f0:65:8d:8f:05:
82:f1:d0:a0:bb:31:86:67:a6:aa:8d:81:b4:02:96:a2:74:cf:
89:7c:4d:c4:df:1b:4b:69:23:18:da:0d:1c:0c:c4:a9:f1:b1:
67:0d:ba:65:3f:41:00:d3:6b:b4:36:3d:97:da:d0:3e:61:d9:
85:ac:08:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:40:55 2024 by rpki-client on console-ams.rpki-client.org