Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
File: VPK5p1k1doKsQZtcAhHMDkICUro.mft (raw, json)
Hash identifier: uL8RSNKTFrZRltvNUu/A5//54+DK084GgX0lecv2Pv8=
Subject key identifier: 51:75:29:AC:B1:E8:03:59:32:AB:49:16:AD:65:D6:9B:1F:75:B7:1C
Authority key identifier: 54:F2:B9:A7:59:35:76:82:AC:41:9B:5C:02:11:CC:0E:42:02:52:BA
Certificate issuer: /CN=54f2b9a759357682ac419b5c0211cc0e420252ba
Certificate serial: 01935A9C6461F67605EDC409BB6E2A7125A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
Manifest number: 1193
Signing time: Sat 23 Nov 2024 20:00:18 +0000
Manifest this update: Sat 23 Nov 2024 20:00:18 +0000
Manifest next update: Sun 24 Nov 2024 20:00:18 +0000
Files and hashes: 1: LD1tgRFASbrxthHeRqLdZbiEst0.roa (hash: bf9M8F+X1I5G4PJ4YNijqPrbeIhRGPS1kVlQoMaR7VA=)
2: S3hRbFAfv5UX2tPzM3A9HbJCT8c.roa (hash: 2cJt29EV8qnZ/LDQ3VDGOKrXTDPhtaFrFOaS9A/V66w=)
3: VPK5p1k1doKsQZtcAhHMDkICUro.crl (hash: UFYmq4pSVGHQY7L+t5pYTmZFVVQg6ifmEKe3uWpwUsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5a:9c:64:61:f6:76:05:ed:c4:09:bb:6e:2a:71:25:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f2b9a759357682ac419b5c0211cc0e420252ba
Validity
Not Before: Nov 23 20:00:18 2024 GMT
Not After : Nov 24 20:00:18 2024 GMT
Subject: CN=517529acb1e8035932ab4916ad65d69b1f75b71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f9:2a:b5:7b:ac:db:2d:ee:a0:96:27:80:55:
fc:d3:56:cb:0e:f8:19:94:26:77:27:d1:b3:d3:99:
dd:7a:26:6f:b2:8c:67:07:df:56:1e:fc:87:82:26:
48:11:88:78:b3:ec:2d:b9:3a:5d:0c:be:44:00:df:
bb:6c:54:2e:ec:fb:66:3d:af:d9:ac:f1:fa:f0:bc:
8e:96:6f:6a:99:f6:0a:e3:6f:58:47:a6:43:e5:fb:
62:bb:c9:86:3e:6e:76:05:4a:2c:b5:8d:f2:93:4f:
e1:ca:02:dd:22:8c:9b:d9:1a:7f:94:32:81:84:61:
fb:a9:0d:83:0d:57:ed:87:ad:58:db:63:44:92:e2:
9b:db:1e:71:30:a7:91:8a:27:00:9c:49:5c:55:51:
da:36:20:4e:44:c2:01:4d:c9:96:14:d3:3f:44:2a:
19:ad:ea:00:4c:7a:96:39:3a:86:51:7b:1f:0a:5a:
d5:5e:07:80:f3:f7:bc:9b:1b:cc:b1:5b:bd:d4:12:
38:45:35:f2:4f:7c:1a:0a:d6:c3:20:69:bb:0b:57:
65:9a:ce:89:ce:60:62:61:e1:fa:a0:b8:e4:a6:ad:
32:bb:da:53:94:57:13:66:83:c1:fc:08:c6:63:8e:
72:7f:31:a7:1b:ea:24:2b:bd:61:54:74:e9:7e:77:
f2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:75:29:AC:B1:E8:03:59:32:AB:49:16:AD:65:D6:9B:1F:75:B7:1C
X509v3 Authority Key Identifier:
keyid:54:F2:B9:A7:59:35:76:82:AC:41:9B:5C:02:11:CC:0E:42:02:52:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7a:be:fd:23:c4:78:64:e3:84:43:12:28:f0:8c:c7:3d:d7:
81:4b:ec:91:21:29:53:05:aa:2d:0a:f0:63:0b:e3:e2:ca:d5:
f6:27:61:72:5a:f7:56:a7:d7:df:84:f5:27:3d:52:b7:d7:cc:
f4:7f:35:ec:5e:15:11:b7:fb:05:e5:f6:42:81:d6:68:1d:c8:
11:83:b4:58:bf:b7:a4:cd:fa:19:16:73:ab:a1:f0:a7:9d:2b:
d5:ae:a1:01:6f:12:58:be:36:af:ce:73:fa:91:b0:42:9f:84:
22:6e:83:84:e6:fe:a0:85:e0:54:f5:f9:14:25:55:68:4f:59:
4e:fa:7f:d7:36:50:44:a6:41:ad:11:5a:99:dc:8b:a8:88:56:
40:00:85:dc:94:a3:6c:d5:b4:ae:50:90:8e:b8:fd:1e:8f:ba:
ee:f5:84:6a:86:e5:dd:f5:48:6d:11:e3:23:8e:26:93:02:be:
8d:83:b1:53:0c:e2:19:b6:a8:4d:bc:ce:6e:d0:18:3d:ab:6a:
ee:94:72:85:72:0c:3b:15:36:a9:18:dc:8a:40:8d:9a:3f:9f:
4a:42:0b:b0:57:0e:8d:12:50:62:37:a2:1c:4b:fd:60:42:30:
66:cf:41:d6:35:93:c1:a2:1b:1c:26:64:95:13:81:cf:13:d9:
09:30:4d:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNanGRh9nYF7cQJu24qcSWpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZjJiOWE3NTkzNTc2ODJhYzQxOWI1YzAyMTFjYzBlNDIw
MjUyYmEwHhcNMjQxMTIzMjAwMDE4WhcNMjQxMTI0MjAwMDE4WjAzMTEwLwYDVQQD
Eyg1MTc1MjlhY2IxZTgwMzU5MzJhYjQ5MTZhZDY1ZDY5YjFmNzViNzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/kqtXus2y3uoJYngFX801bLDvgZ
lCZ3J9Gz05ndeiZvsoxnB99WHvyHgiZIEYh4s+wtuTpdDL5EAN+7bFQu7PtmPa/Z
rPH68LyOlm9qmfYK429YR6ZD5ftiu8mGPm52BUostY3yk0/hygLdIoyb2Rp/lDKB
hGH7qQ2DDVfth61Y22NEkuKb2x5xMKeRiicAnElcVVHaNiBORMIBTcmWFNM/RCoZ
reoATHqWOTqGUXsfClrVXgeA8/e8mxvMsVu91BI4RTXyT3waCtbDIGm7C1dlms6J
zmBiYeH6oLjkpq0yu9pTlFcTZoPB/AjGY45yfzGnG+okK71hVHTpfnfySQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFF1Kayx6ANZMqtJFq1l1psfdbccMB8GA1UdIwQY
MBaAFFTyuadZNXaCrEGbXAIRzA5CAlK6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlBLNXAxazFkb0tzUVp0Y0FoSE1Ea0lDVXJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wNzQ4OWEtODA1ZS00MzM5LWI0M2Et
NTM5ZGE2OTc3NGM4LzEvVlBLNXAxazFkb0tzUVp0Y0FoSE1Ea0lDVXJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8wNzQ4OWEtODA1ZS00MzM5LWI0M2EtNTM5ZGE2OTc3NGM4
LzEvVlBLNXAxazFkb0tzUVp0Y0FoSE1Ea0lDVXJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQHq+/SPE
eGTjhEMSKPCMxz3XgUvskSEpUwWqLQrwYwvj4srV9idhclr3VqfX34T1Jz1St9fM
9H817F4VEbf7BeX2QoHWaB3IEYO0WL+3pM36GRZzq6Hwp50r1a6hAW8SWL42r85z
+pGwQp+EIm6DhOb+oIXgVPX5FCVVaE9ZTvp/1zZQRKZBrRFamdyLqIhWQACF3JSj
bNW0rlCQjrj9Ho+67vWEaobl3fVIbRHjI44mkwK+jYOxUwziGbaoTbzObtAYPatq
7pRyhXIMOxU2qRjcikCNmj+fSkILsFcOjRJQYjeiHEv9YEIwZs9B1jWTwaIbHCZk
lROBzxPZCTBN8A==
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:42:44 2024 by rpki-client on console-ams.rpki-client.org