Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft
File: VQlsYRU9KrVQd_GjDCRZhgAbodk.mft (raw, json)
Hash identifier: M+pxKj9dpmH3A87kR3So+dYrNJAzNUvsG/ZXJBSN7lI=
Subject key identifier: 74:95:F4:EB:B0:2E:B3:CA:10:56:D0:28:D0:0C:44:7A:1C:00:EB:FD
Authority key identifier: 55:09:6C:61:15:3D:2A:B5:50:77:F1:A3:0C:24:59:86:00:1B:A1:D9
Certificate issuer: /CN=55096c61153d2ab55077f1a30c245986001ba1d9
Certificate serial: 0193579BBF689DBAD826B71A9ED36ADC7B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQlsYRU9KrVQd_GjDCRZhgAbodk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft
Manifest number: 12C9
Signing time: Sat 23 Nov 2024 06:00:45 +0000
Manifest this update: Sat 23 Nov 2024 06:00:45 +0000
Manifest next update: Sun 24 Nov 2024 06:00:45 +0000
Files and hashes: 1: VQlsYRU9KrVQd_GjDCRZhgAbodk.crl (hash: sEn25wswsHr+WlCeZ2J6Kyi5LqBMxKLxMsoXexQYM24=)
2: zX1dHpyFscgNYFt3vrB-XclDWMM.roa (hash: ap6Fd0IXF+xIEarDz7s6mUmMQH5GbtcFFS6YSSU38uo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQlsYRU9KrVQd_GjDCRZhgAbodk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:bf:68:9d:ba:d8:26:b7:1a:9e:d3:6a:dc:7b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55096c61153d2ab55077f1a30c245986001ba1d9
Validity
Not Before: Nov 23 06:00:45 2024 GMT
Not After : Nov 24 06:00:45 2024 GMT
Subject: CN=7495f4ebb02eb3ca1056d028d00c447a1c00ebfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:77:c6:05:aa:59:39:3d:bc:cd:22:38:b1:93:
c9:c6:3d:d9:ac:ae:ed:31:24:4b:2b:2f:fc:85:0b:
7b:63:3c:9d:b8:80:b7:72:6a:74:bc:3e:de:75:80:
22:e0:9a:33:d0:ec:c4:3b:3b:15:8b:4f:ca:0d:fb:
ec:8d:f5:c2:d4:7b:01:f7:39:4e:19:65:83:65:32:
db:93:63:6b:6d:6f:33:ba:79:d1:c0:42:a6:1e:76:
65:d7:d1:06:0f:64:9f:c5:74:8b:ad:09:7f:4e:1f:
97:3c:b0:eb:5e:3b:81:94:17:32:b5:46:50:75:aa:
3a:35:a7:26:43:19:f1:b3:48:e3:e0:93:29:fe:3f:
00:f9:88:b3:e2:00:bd:1e:13:0f:21:84:8d:e4:56:
4c:1e:1b:7f:8f:6e:d1:91:bd:75:2b:3b:45:9e:7e:
82:56:9a:e9:fd:8d:4e:20:c6:fa:16:e2:a6:54:b1:
32:98:85:74:78:44:5d:aa:35:fa:fb:20:44:60:70:
75:71:ba:6e:6f:3d:ae:b7:8c:88:59:43:e8:dc:33:
94:9f:35:06:06:65:3f:72:eb:50:07:1b:c7:cd:00:
ad:b1:52:22:ea:94:0b:1f:46:bc:01:bc:81:cc:02:
48:aa:0b:dd:a5:db:04:bb:2c:d9:93:f6:2a:04:13:
d0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:95:F4:EB:B0:2E:B3:CA:10:56:D0:28:D0:0C:44:7A:1C:00:EB:FD
X509v3 Authority Key Identifier:
keyid:55:09:6C:61:15:3D:2A:B5:50:77:F1:A3:0C:24:59:86:00:1B:A1:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQlsYRU9KrVQd_GjDCRZhgAbodk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d9:bd:96:3b:9a:8c:1f:b7:b7:23:db:77:15:3b:65:b7:07:
5d:5f:70:82:b8:80:71:b5:cd:9a:88:4b:49:b2:09:32:10:7a:
5f:45:e5:80:f1:ea:71:bb:f0:98:1f:74:74:88:87:0d:3e:55:
b8:59:c3:a6:b7:1f:b4:ca:98:4d:62:88:ab:4f:d0:c0:49:93:
f3:8e:c0:ac:1b:2a:f2:45:4c:cf:e5:2f:14:6b:63:29:46:39:
0c:b9:e6:bc:a5:df:be:2c:52:43:fc:23:e0:1d:5f:ab:6f:f3:
1c:12:8c:9f:39:b1:c1:48:9f:a8:52:c7:58:71:ed:dc:bc:89:
4e:d5:de:ee:65:09:57:e4:6b:fb:dd:8c:bf:77:6f:b8:12:ef:
39:81:9f:f8:fb:81:53:4e:c2:7c:67:ff:ff:2d:37:53:a0:1f:
11:65:5a:cc:a6:93:16:0f:51:2e:bc:a5:bb:a0:5c:23:17:e1:
cd:23:85:3b:49:1d:82:ae:da:92:02:f2:92:57:6f:b7:93:f9:
27:17:29:48:3e:b6:ce:30:91:d6:1b:1a:7a:0e:6e:1a:a2:c6:
73:d4:f3:02:14:f0:9e:c3:dc:fc:21:f6:e2:1b:d3:d5:21:86:
22:f6:f9:c4:94:63:83:c9:3b:00:de:73:ba:c4:fa:ad:3e:16:
0c:3a:2e:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXm79onbrYJrcantNq3HtaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MDk2YzYxMTUzZDJhYjU1MDc3ZjFhMzBjMjQ1OTg2MDAx
YmExZDkwHhcNMjQxMTIzMDYwMDQ1WhcNMjQxMTI0MDYwMDQ1WjAzMTEwLwYDVQQD
Eyg3NDk1ZjRlYmIwMmViM2NhMTA1NmQwMjhkMDBjNDQ3YTFjMDBlYmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HfGBapZOT28zSI4sZPJxj3ZrK7t
MSRLKy/8hQt7YzyduIC3cmp0vD7edYAi4Joz0OzEOzsVi0/KDfvsjfXC1HsB9zlO
GWWDZTLbk2NrbW8zunnRwEKmHnZl19EGD2SfxXSLrQl/Th+XPLDrXjuBlBcytUZQ
dao6NacmQxnxs0jj4JMp/j8A+Yiz4gC9HhMPIYSN5FZMHht/j27Rkb11KztFnn6C
Vprp/Y1OIMb6FuKmVLEymIV0eERdqjX6+yBEYHB1cbpubz2ut4yIWUPo3DOUnzUG
BmU/cutQBxvHzQCtsVIi6pQLH0a8AbyBzAJIqgvdpdsEuyzZk/YqBBPQCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSV9OuwLrPKEFbQKNAMRHocAOv9MB8GA1UdIwQY
MBaAFFUJbGEVPSq1UHfxowwkWYYAG6HZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlFsc1lSVTlLclZRZF9HakRDUlpoZ0Fib2RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi80OWJmZWMtNzU3Zi00MzE5LWI0NWQt
OWI1ZDYzYjVjYmY1LzEvVlFsc1lSVTlLclZRZF9HakRDUlpoZ0Fib2RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi80OWJmZWMtNzU3Zi00MzE5LWI0NWQtOWI1ZDYzYjVjYmY1
LzEvVlFsc1lSVTlLclZRZF9HakRDUlpoZ0Fib2RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKtm9ljua
jB+3tyPbdxU7ZbcHXV9wgriAcbXNmohLSbIJMhB6X0XlgPHqcbvwmB90dIiHDT5V
uFnDprcftMqYTWKIq0/QwEmT847ArBsq8kVMz+UvFGtjKUY5DLnmvKXfvixSQ/wj
4B1fq2/zHBKMnzmxwUifqFLHWHHt3LyJTtXe7mUJV+Rr+92Mv3dvuBLvOYGf+PuB
U07CfGf//y03U6AfEWVazKaTFg9RLrylu6BcIxfhzSOFO0kdgq7akgLykldvt5P5
JxcpSD62zjCR1hsaeg5uGqLGc9TzAhTwnsPc/CH24hvT1SGGIvb5xJRjg8k7AN5z
usT6rT4WDDoulg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:01 2024 by rpki-client on console-ams.rpki-client.org