Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
File: HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft (raw, json)
Hash identifier: 6Tji6GtMYtDmt64PV8uU70iVE+BAOj0bX+SxDlTdUCA=
Subject key identifier: 5D:51:AD:43:4B:49:74:D4:9A:74:A4:20:B6:B2:04:07:91:8C:7A:70
Authority key identifier: 1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
Certificate issuer: /CN=1d2fefbd168f18661eca15569dc6218f86746942
Certificate serial: 0193568A43782ADBAFD865B3C710F819AD39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
Manifest number: 0ECA
Signing time: Sat 23 Nov 2024 01:02:01 +0000
Manifest this update: Sat 23 Nov 2024 01:02:01 +0000
Manifest next update: Sun 24 Nov 2024 01:02:01 +0000
Files and hashes: 1: 2ZXhEmlS2Z4F3xffsr850d-ETgA.roa (hash: VfuFwu0tEr8HFITsqPeCJGSrWtg8BKQxC1HG63AFOfo=)
2: HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl (hash: al9oWSImochvXbtZ3jxfpkB2clzPciZ6Khd3zJ5tV2U=)
3: QpupplWbjMYh1JkjVwabuQan_vo.roa (hash: Rxs9UAEkniBEjiE8L4AltF/BWWvlhmV7HI4XkoWsOHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:43:78:2a:db:af:d8:65:b3:c7:10:f8:19:ad:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2fefbd168f18661eca15569dc6218f86746942
Validity
Not Before: Nov 23 01:02:01 2024 GMT
Not After : Nov 24 01:02:01 2024 GMT
Subject: CN=5d51ad434b4974d49a74a420b6b20407918c7a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3b:37:20:1f:7c:da:85:52:9b:54:6d:8b:ad:
92:db:d9:a4:eb:3a:b6:b5:dd:96:98:80:a0:c3:63:
a6:ee:d0:13:93:fe:41:83:94:1f:51:4d:e5:1c:a2:
1d:42:b8:26:45:04:f5:47:a0:b8:ae:91:c6:84:7a:
61:47:9b:ef:e7:2a:12:d8:d5:5b:17:f0:49:8c:92:
ad:18:18:7e:99:7e:29:4b:78:82:01:f8:09:c1:82:
c9:b3:13:e1:7a:51:4f:62:65:01:b2:31:e2:9a:db:
7f:fd:40:5c:83:c9:b4:a9:9f:c2:28:22:bf:e3:3d:
e2:c9:3e:1a:db:32:20:eb:52:ea:54:e5:7b:d1:9d:
67:11:f3:02:4f:03:d8:3c:d2:0c:d8:af:ac:db:47:
6f:1f:5c:e4:e5:42:d1:c1:64:82:0a:81:4e:63:8a:
af:23:70:2f:2f:3f:64:bf:32:86:31:ce:63:5d:d3:
0b:5c:1c:54:fc:22:48:d1:49:10:f7:c0:3e:06:25:
33:ad:d7:f3:3e:da:60:e9:6d:b8:14:2c:c4:dc:42:
07:9a:dc:a4:f6:03:08:a7:68:94:54:0c:dd:31:26:
b1:9c:4c:f4:dc:22:45:a5:59:bb:d6:ba:01:ec:88:
85:77:35:9b:c5:7d:2e:e6:9e:1c:b8:fe:75:0b:d6:
ed:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:51:AD:43:4B:49:74:D4:9A:74:A4:20:B6:B2:04:07:91:8C:7A:70
X509v3 Authority Key Identifier:
keyid:1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:81:2b:01:8a:ea:52:00:92:00:21:e5:53:34:e9:a5:8a:51:
3a:b4:8b:36:d0:c6:4b:92:9d:1d:3b:74:16:c7:02:15:8a:22:
15:cc:56:37:4c:6a:68:9d:2e:c0:0a:1a:4b:0b:7c:2c:fe:70:
e8:fa:47:09:10:c6:ba:8c:6e:0e:ea:67:5a:24:2f:5c:90:88:
a8:9d:36:14:03:06:bf:df:11:cd:27:7e:8c:b0:71:12:7c:aa:
15:f7:6a:00:26:c5:51:16:16:e1:57:a9:4c:0f:f1:5a:f6:cb:
40:31:5d:ce:99:f9:fe:0d:57:14:39:64:57:83:fe:08:a0:f1:
74:5c:41:e7:39:86:9e:99:6f:f6:0e:a3:3b:4e:87:8c:e7:ca:
3c:58:1e:49:02:e3:f1:ee:8c:f8:74:78:a8:ef:d7:c2:0c:a3:
99:21:ef:af:38:4c:0a:9e:94:3b:e0:36:dd:6f:1d:7b:f0:a9:
51:ab:93:e9:8c:35:1c:89:50:7e:2b:15:19:34:ff:d9:0a:bd:
fe:0b:0f:17:52:ee:6b:4e:5d:e3:2e:4d:e8:49:a4:1e:18:95:
1b:09:2f:55:42:4c:92:c0:e5:1f:fd:a0:18:43:11:84:79:2b:
dd:00:95:7b:66:fb:ea:e8:b2:6c:96:a7:db:34:fc:9e:b4:cc:
1f:39:02:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:42:01 2024 by rpki-client on console-ams.rpki-client.org