Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
File: vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft (raw, json)
Hash identifier: TqoQOezkEU3CwUhLCv/0vGuHAEY9efp/buFEAWMoK6o=
Subject key identifier: 5B:23:E8:5C:5D:BD:38:B8:59:76:D8:DD:76:5F:DC:75:87:46:DF:AA
Authority key identifier: BC:85:D3:79:1F:58:36:C4:15:FF:D3:91:F2:D5:85:C7:3D:BE:CA:39
Certificate issuer: /CN=bc85d3791f5836c415ffd391f2d585c73dbeca39
Certificate serial: 01935764EC797778906B51B838FA1DACE653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
Manifest number: 048C
Signing time: Sat 23 Nov 2024 05:00:51 +0000
Manifest this update: Sat 23 Nov 2024 05:00:51 +0000
Manifest next update: Sun 24 Nov 2024 05:00:51 +0000
Files and hashes: 1: qSDeUXMPcEKbahootPrldkCmQjY.roa (hash: BP+WyNxKIvM51N6O7CoBPvqiw1frzc6tZRsdJWLxxtQ=)
2: vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl (hash: T0RVTH64fe4sqeMN7BihjBSapndPC3nqfdfVnHfbYH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:ec:79:77:78:90:6b:51:b8:38:fa:1d:ac:e6:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc85d3791f5836c415ffd391f2d585c73dbeca39
Validity
Not Before: Nov 23 05:00:51 2024 GMT
Not After : Nov 24 05:00:51 2024 GMT
Subject: CN=5b23e85c5dbd38b85976d8dd765fdc758746dfaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e1:f6:c0:47:6e:43:55:b1:a1:58:82:7f:f5:
bb:8e:a3:c8:72:5a:c3:1e:a6:9a:08:53:99:45:f4:
5d:aa:40:6d:5d:e4:4d:4f:61:14:91:4e:ca:5f:21:
93:47:03:39:9b:fb:7f:79:ae:77:95:c9:a3:ee:a2:
2e:31:77:70:ad:c6:8a:72:82:46:4c:be:53:b7:39:
3e:5a:e4:b7:1d:36:0a:d1:dc:cd:67:fd:08:fd:23:
55:af:6a:63:86:65:54:bc:c6:9f:3f:32:58:0c:20:
f9:1c:64:4e:9c:c5:51:db:40:0f:fa:c8:b8:bc:99:
13:31:24:d3:4c:41:b1:5b:93:cb:94:43:f9:b7:b5:
6b:3c:84:15:51:c3:d9:81:57:fa:47:f3:0b:5b:b4:
2f:c0:4a:11:d8:3d:9e:23:f5:7e:a9:88:d0:67:c8:
45:5d:a2:14:d9:f7:75:b2:dd:a5:10:86:95:ca:34:
e7:de:08:d2:ca:74:fd:c7:55:13:d9:76:fb:e7:17:
24:c0:ee:00:8b:47:ab:33:c2:87:9a:ca:5f:0d:99:
2b:fe:fa:6a:5e:08:53:1e:a9:a3:5e:12:90:e7:98:
33:86:51:80:70:f9:89:62:cd:36:c8:a1:29:cc:14:
63:dc:ae:9f:b3:12:93:b5:75:eb:38:3d:52:1e:38:
ab:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:23:E8:5C:5D:BD:38:B8:59:76:D8:DD:76:5F:DC:75:87:46:DF:AA
X509v3 Authority Key Identifier:
keyid:BC:85:D3:79:1F:58:36:C4:15:FF:D3:91:F2:D5:85:C7:3D:BE:CA:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:73:52:6e:d9:eb:49:6b:dc:02:f5:70:38:c6:42:32:95:84:
85:fa:cb:f9:d7:19:e2:fb:36:da:4c:fd:8a:70:e9:c8:03:8e:
e2:cb:d6:f9:dd:00:38:97:a4:db:cb:18:b0:99:46:15:32:71:
41:be:03:77:17:a9:2c:4d:dd:3e:a8:b2:73:69:36:c1:62:16:
9b:79:52:aa:cb:df:4f:3a:7f:b4:02:ff:d0:da:6b:21:78:f7:
4a:58:6f:2c:6c:a1:93:8c:b9:dd:27:27:65:a5:cc:fb:2d:6c:
ce:08:dc:da:4a:f0:de:81:4d:a7:17:90:68:76:fa:fb:d0:7f:
5f:03:e0:f5:d9:46:09:f1:a8:15:7e:18:de:d6:3b:0d:e1:90:
2a:32:3c:9b:6c:4f:2a:31:f1:5e:41:6e:ec:c0:75:01:46:52:
f2:2e:64:e5:dc:bf:67:28:7e:b2:bc:45:19:60:15:5e:d5:f0:
e0:e8:63:c5:ad:97:ba:09:06:83:cf:b3:bb:f2:bc:57:11:4c:
e1:d0:dc:4e:ab:11:76:90:c5:ed:13:67:2d:9b:6b:88:54:db:
2f:82:7b:b6:1d:67:12:ac:b1:97:6c:c1:0c:83:90:10:49:b1:
ae:f5:bb:82:0a:72:fb:14:7f:da:a4:ea:da:4c:c3:b6:9f:17:
b8:06:8a:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZOx5d3iQa1G4OPodrOZTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjODVkMzc5MWY1ODM2YzQxNWZmZDM5MWYyZDU4NWM3M2Ri
ZWNhMzkwHhcNMjQxMTIzMDUwMDUxWhcNMjQxMTI0MDUwMDUxWjAzMTEwLwYDVQQD
Eyg1YjIzZTg1YzVkYmQzOGI4NTk3NmQ4ZGQ3NjVmZGM3NTg3NDZkZmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+H2wEduQ1WxoViCf/W7jqPIclrD
HqaaCFOZRfRdqkBtXeRNT2EUkU7KXyGTRwM5m/t/ea53lcmj7qIuMXdwrcaKcoJG
TL5Ttzk+WuS3HTYK0dzNZ/0I/SNVr2pjhmVUvMafPzJYDCD5HGROnMVR20AP+si4
vJkTMSTTTEGxW5PLlEP5t7VrPIQVUcPZgVf6R/MLW7QvwEoR2D2eI/V+qYjQZ8hF
XaIU2fd1st2lEIaVyjTn3gjSynT9x1UT2Xb75xckwO4Ai0erM8KHmspfDZkr/vpq
XghTHqmjXhKQ55gzhlGAcPmJYs02yKEpzBRj3K6fsxKTtXXrOD1SHjirWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsj6FxdvTi4WXbY3XZf3HWHRt+qMB8GA1UdIwQY
MBaAFLyF03kfWDbEFf/TkfLVhcc9vso5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdklYVGVSOVlOc1FWXzlPUjh0V0Z4ejIteWprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9hZjk1MGYtYzE5My00NWRmLTkwZDct
Yjg0MmI5OTA2ODllLzEvdklYVGVSOVlOc1FWXzlPUjh0V0Z4ejIteWprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9hZjk1MGYtYzE5My00NWRmLTkwZDctYjg0MmI5OTA2ODll
LzEvdklYVGVSOVlOc1FWXzlPUjh0V0Z4ejIteWprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3NSbtnr
SWvcAvVwOMZCMpWEhfrL+dcZ4vs22kz9inDpyAOO4svW+d0AOJek28sYsJlGFTJx
Qb4DdxepLE3dPqiyc2k2wWIWm3lSqsvfTzp/tAL/0NprIXj3SlhvLGyhk4y53Scn
ZaXM+y1szgjc2krw3oFNpxeQaHb6+9B/XwPg9dlGCfGoFX4Y3tY7DeGQKjI8m2xP
KjHxXkFu7MB1AUZS8i5k5dy/Zyh+srxFGWAVXtXw4Ohjxa2XugkGg8+zu/K8VxFM
4dDcTqsRdpDF7RNnLZtriFTbL4J7th1nEqyxl2zBDIOQEEmxrvW7ggpy+xR/2qTq
2kzDtp8XuAaKOA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:57:29 2024 by rpki-client on console-fra.rpki-client.org