Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
File: vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft (raw, json)
Hash identifier: Eg60DwpikZHeD85RNhujUNHjh4nTaOJCOJZKztCNl9g=
Subject key identifier: 98:CA:F3:87:AC:F3:A1:69:2D:AE:58:15:D3:E2:28:B7:A1:54:40:59
Authority key identifier: BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
Certificate issuer: /CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Certificate serial: 01935764E2C5E2DD96340E2B84EF3FE752BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
Manifest number: 0BB1
Signing time: Sat 23 Nov 2024 05:00:49 +0000
Manifest this update: Sat 23 Nov 2024 05:00:49 +0000
Manifest next update: Sun 24 Nov 2024 05:00:49 +0000
Files and hashes: 1: sDkAfqlfMdk2N1cpSMoG3DqCjOg.roa (hash: dPOT9z9eh8cXXnReszfexsvS+dHT4zVWN5nTvrTp1TQ=)
2: vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl (hash: tfrnxmESnC0H/vIKnj0iu5HEXCOdgwExBQPqa/xg63Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:e2:c5:e2:dd:96:34:0e:2b:84:ef:3f:e7:52:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Validity
Not Before: Nov 23 05:00:49 2024 GMT
Not After : Nov 24 05:00:49 2024 GMT
Subject: CN=98caf387acf3a1692dae5815d3e228b7a1544059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e0:bc:8b:b4:bf:b9:02:c8:8f:92:21:1a:10:
24:05:8b:ab:5c:b7:15:31:20:d5:22:19:8a:7c:37:
d4:e8:ab:bf:6b:fe:20:ac:71:d5:eb:76:54:ee:3f:
2b:99:3e:6b:c8:37:fd:37:7b:18:bb:3d:74:d8:5f:
9b:b4:ee:8d:ae:bc:b1:74:c2:35:52:12:c7:56:e3:
a2:4a:a3:d8:e6:0c:86:bd:dd:90:88:ce:ba:16:ab:
21:b4:02:d8:6c:f7:8f:10:76:60:6f:f9:1b:a4:d5:
51:6f:21:37:d5:74:9d:e2:1a:4a:d1:ec:fb:5c:02:
03:c3:24:bc:1c:2b:36:e2:09:6a:b9:f7:db:6f:ff:
5b:db:0d:07:bc:0b:56:70:a7:3d:b8:61:dc:d9:93:
57:57:f1:c9:19:79:ca:c0:c5:51:1a:98:ef:d8:02:
1f:0f:d8:ed:61:f8:29:70:14:7f:15:24:d7:5d:ae:
6a:54:4e:0c:b3:0e:6e:a7:f1:dc:a3:ca:13:99:25:
28:6d:f8:68:98:06:49:86:8b:1a:2f:98:be:42:f5:
b4:82:ed:f3:a8:f8:c5:bf:d0:01:8b:72:78:24:5f:
64:ff:02:a1:77:c1:24:d2:2c:ae:75:ca:38:12:0b:
bf:8f:3d:d5:4d:b1:af:47:8b:2e:0a:dd:73:ae:a5:
f2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CA:F3:87:AC:F3:A1:69:2D:AE:58:15:D3:E2:28:B7:A1:54:40:59
X509v3 Authority Key Identifier:
keyid:BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:90:64:e5:5c:99:1c:7c:e9:3e:2c:c8:40:f3:c0:48:53:e8:
b2:ad:21:02:d4:8e:b4:34:29:d7:e4:5f:6e:d6:a2:2a:f1:cb:
bb:d3:16:4c:42:66:47:1a:8c:61:85:3f:b7:18:8e:60:7a:3d:
18:c0:bf:3e:ee:90:bc:65:f2:e1:8c:5f:04:f6:08:e0:23:7a:
d4:8e:2d:a4:d3:6a:8f:0c:0a:46:17:06:27:ce:59:6b:c9:5b:
92:b2:02:b2:52:f3:30:c5:33:d3:7c:16:17:31:03:60:d6:cb:
97:65:2a:8d:c8:de:27:05:b3:99:74:b6:30:7c:af:f0:b7:2c:
60:6e:1e:ca:f2:e8:b9:e5:04:be:6d:2b:2c:4b:7f:78:fa:6c:
35:02:1a:14:42:6c:13:5a:d5:35:26:a7:46:25:51:47:fe:80:
ac:07:01:04:79:05:0d:e0:e9:c2:50:eb:a5:4e:cf:7f:f3:5d:
f1:5e:8b:53:76:94:3c:86:0c:93:28:ee:d6:2c:6d:2b:10:3b:
04:72:8a:ad:b4:cf:71:21:00:c7:a3:e7:e8:10:40:fe:72:35:
b1:5e:5e:f5:ae:d1:d0:ef:90:e0:20:07:07:11:ea:fb:72:cd:
8f:39:29:60:6a:da:72:8d:58:7c:a3:e7:c0:2c:85:69:07:84:
58:c4:c6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:09 2024 by rpki-client on console-ams.rpki-client.org