Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
File: v-NULdY_7SUN5ctl9uykh-f0eEc.mft (raw, json)
Hash identifier: 8XvmZqUXRxHvLQVw4pA3FAccwjIvO3glrIu161Te1P0=
Subject key identifier: D7:0F:98:A5:06:5C:B2:66:C4:31:BA:85:C7:F8:71:02:90:A9:8A:30
Authority key identifier: BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
Certificate issuer: /CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Certificate serial: 01935952FA9DA14827EDAD98E4B495EC11EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 14:00:30 +0000
Manifest this update: Sat 23 Nov 2024 14:00:30 +0000
Manifest next update: Sun 24 Nov 2024 14:00:30 +0000
Files and hashes: 1: P_ku7VQN6Dl8XNNJqgSn1QxE85Y.roa (hash: 3cOktOSB4TeNJoudDlG3mMMjJF/bEj8csdIurvxOC+0=)
2: i9wKAmVhMsyZBj8R5q3SelIcYTU.roa (hash: rmTHE3f6tyDmEcOtltB9QvasjI7KacxL8/Afv6LM458=)
3: v-NULdY_7SUN5ctl9uykh-f0eEc.crl (hash: tOul4PImHUQ3W52b8J+/4CVTaA0u/YdwR+pIJuNXkVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:52:fa:9d:a1:48:27:ed:ad:98:e4:b4:95:ec:11:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Validity
Not Before: Nov 23 14:00:30 2024 GMT
Not After : Nov 24 14:00:30 2024 GMT
Subject: CN=d70f98a5065cb266c431ba85c7f8710290a98a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:01:54:e4:3a:fd:be:2b:34:6e:9d:d5:5a:be:
95:10:eb:5d:8a:83:42:8d:e8:4a:3c:16:c3:d7:db:
b2:b8:e7:94:cc:17:72:f6:49:5d:b5:2a:1f:f3:a8:
35:26:42:f8:5b:37:1d:8d:04:e4:f2:a4:6d:3d:7c:
b4:6a:3b:c9:d9:d3:ce:5f:90:eb:e3:d3:0e:87:5d:
2a:d8:d7:b5:ee:4f:88:a5:95:d5:76:2a:67:8f:8b:
e7:6d:89:a7:c1:26:9d:08:82:49:4b:57:68:81:6b:
e3:81:75:6e:74:12:1b:4f:c2:0d:dd:94:dd:4d:c0:
85:61:3e:9c:d9:03:69:71:e7:67:b9:6d:b5:fa:3e:
9a:a4:b6:50:02:d6:74:c0:d6:d7:75:24:f8:27:17:
7d:0e:6a:32:76:0a:e2:9a:cb:81:1d:38:40:39:5a:
fc:fd:18:37:d7:16:9d:6b:d9:9d:87:60:d5:f4:72:
d4:dd:97:12:ab:b5:7c:ae:be:17:b2:50:52:84:90:
5a:49:13:df:4b:72:ac:6c:c0:c8:97:6f:fb:b2:39:
61:7f:06:54:0e:1a:f1:1c:b4:64:a3:96:a7:f3:91:
d3:f5:6d:7b:b4:52:77:b4:8e:22:61:74:19:14:f0:
92:8b:98:ee:55:88:1a:5e:8a:a6:93:f6:8a:35:ce:
3b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0F:98:A5:06:5C:B2:66:C4:31:BA:85:C7:F8:71:02:90:A9:8A:30
X509v3 Authority Key Identifier:
keyid:BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d7:8c:1b:0d:19:2f:a2:81:8b:af:12:31:80:b3:fb:07:f8:
81:d4:d1:cc:45:2f:c3:b1:b0:4a:fa:0d:aa:fe:bf:29:3b:22:
4a:42:31:3b:56:06:83:0e:46:54:4a:20:fd:1a:4e:5e:3c:fc:
b3:f2:fb:10:ee:6c:ca:cf:b4:06:46:83:82:27:93:d8:de:35:
ad:df:83:9c:28:39:04:f5:ca:ee:a3:6c:f8:1e:db:f8:1d:92:
f3:d2:2c:1f:c8:e9:20:d7:d1:07:5a:10:c2:18:b7:c4:19:1f:
d0:44:81:76:1f:e1:b8:50:27:4f:2e:a1:0d:a5:0a:ce:5e:22:
35:e8:dd:64:db:b4:78:54:c5:aa:c6:37:f6:88:40:88:2e:4c:
b2:f4:eb:3f:ed:e8:6f:04:e5:00:2c:f5:b9:6f:e4:b3:e4:94:
f6:f6:43:a1:70:ce:5c:2d:2e:23:7b:e0:01:4f:58:ef:87:3d:
59:07:46:55:9e:c9:5d:f8:74:0b:6a:55:b4:8f:a5:1a:e0:62:
9d:65:59:5a:31:3b:c8:27:78:23:ea:0d:fb:0d:af:6d:ad:48:
32:d3:bf:1a:62:9a:b5:aa:7a:f8:c9:1e:bc:98:b0:14:38:1b:
94:87:05:b4:2b:69:ff:03:6c:63:65:64:9d:ea:cd:02:9a:ca:
0d:fc:11:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:11:46 2024 by rpki-client on console-ams.rpki-client.org