Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
File: vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft (raw, json)
Hash identifier: +GWVZRDDL0ICzOpB5N1bBrfI8A+aS/KGcofbzVHkH88=
Subject key identifier: 4E:F8:B6:05:77:92:80:2C:34:21:4B:D9:C5:4F:90:57:1F:C7:C3:F0
Authority key identifier: BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
Certificate issuer: /CN=bc63a36d5c80651a89a76906c9e3402fb34568da
Certificate serial: 0193523E15E47605ECF3D666269DECCD5867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
Manifest number: F8
Signing time: Fri 22 Nov 2024 05:00:20 +0000
Manifest this update: Fri 22 Nov 2024 05:00:20 +0000
Manifest next update: Sat 23 Nov 2024 05:00:20 +0000
Files and hashes: 1: d2_cV0Hs3e4I6WtVS_UL2e7DjjE.roa (hash: n3zYUOF22aV3QNPiAuEhTbzdu1SpHD7geoXVGdBDv9Q=)
2: kp5suYHRdxUnKzt1cufKwuZHniE.roa (hash: hmNusV3Z3flLGPBNuZqWkzRio3vms651Ek5E82P54aQ=)
3: vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl (hash: FRRKv1GHB2W6QxCOyqB3j6K5RorriUkqlMXP1E72Pew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:3e:15:e4:76:05:ec:f3:d6:66:26:9d:ec:cd:58:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc63a36d5c80651a89a76906c9e3402fb34568da
Validity
Not Before: Nov 22 05:00:20 2024 GMT
Not After : Nov 23 05:00:20 2024 GMT
Subject: CN=4ef8b6057792802c34214bd9c54f90571fc7c3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:05:2b:4c:25:d8:5c:5a:cb:87:da:5f:b0:
b1:5e:1b:42:39:b4:c0:1e:4a:2c:22:0a:9d:fc:85:
4f:b8:a9:9c:d2:5a:1d:d7:6c:5e:b9:d0:46:db:da:
0a:4b:d3:21:85:19:4a:00:0f:15:dd:f7:df:91:7e:
e1:f6:89:e3:67:e8:55:6d:e3:bb:12:13:9a:9c:9b:
ee:bf:1b:e6:66:61:e0:d7:bb:4a:c5:e4:cd:b5:a7:
98:03:e5:b3:a4:eb:23:9c:2e:9b:60:6d:43:38:ad:
83:a4:a3:4d:a9:ab:f4:b1:1b:3d:b1:cb:93:be:76:
97:52:bb:48:b8:1a:3f:28:a2:37:ac:24:75:9f:98:
07:39:84:d5:67:36:c2:3f:04:fa:18:fd:eb:3f:e9:
2a:18:91:79:ec:bf:47:a4:40:f4:f2:51:9b:15:9c:
98:26:3f:ff:64:bc:c1:49:84:34:6e:0d:5c:b5:79:
5c:2a:54:5e:6b:f6:2c:1e:1d:8e:02:82:e2:9b:4d:
b6:d6:1a:78:8d:1b:b5:53:87:88:a7:c1:17:80:e4:
6c:99:71:ab:e5:9e:7b:cc:cc:8e:b9:92:c4:d6:b2:
e7:ff:22:39:38:5f:8c:1b:cd:ca:ca:3e:73:d5:be:
93:07:33:87:77:aa:c0:2c:7c:97:36:1c:05:16:a2:
05:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F8:B6:05:77:92:80:2C:34:21:4B:D9:C5:4F:90:57:1F:C7:C3:F0
X509v3 Authority Key Identifier:
keyid:BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:58:f1:fc:ac:03:35:22:82:c0:27:c9:a6:86:34:73:fd:25:
cf:2d:53:29:28:07:72:4a:51:09:c2:99:5e:e7:28:94:07:3f:
44:c9:74:02:6a:21:e1:c3:31:33:25:1a:a6:0c:4a:cd:2a:15:
0e:63:04:58:12:d1:3b:01:a0:b7:93:59:b5:78:27:e9:69:66:
5f:cf:9e:2e:2b:f5:cc:14:5c:fd:06:11:ac:7f:b6:83:5e:2a:
bc:56:3e:3e:38:1b:44:02:eb:ce:51:07:b4:e3:b3:df:01:50:
77:e5:a9:19:ee:5f:d1:f5:28:c6:3c:ce:11:d9:a5:25:0e:e0:
b5:e3:3d:bd:d1:16:32:88:f8:d6:7c:c9:f7:d4:2d:44:2a:a1:
69:50:d3:3a:21:20:80:4b:22:2d:e3:85:ab:6d:69:7b:a0:98:
aa:bd:70:e9:2a:1c:9c:f2:35:0c:a7:94:41:88:5c:24:ba:36:
70:ef:2b:6c:1c:44:07:dd:28:d6:51:3c:62:93:fb:05:8a:aa:
bf:32:be:03:47:68:b9:11:9f:95:a5:06:b3:54:b0:17:57:03:
36:27:d4:b4:42:80:8a:58:91:8b:ea:4f:8b:2c:c7:43:63:2c:
04:8b:cd:89:54:d9:45:41:a9:15:de:dd:ca:90:e6:5a:74:fd:
38:35:41:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:43:34 2024 by rpki-client on console-ams.rpki-client.org