Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft
File: VgGQvfsKPyO0QR59dI7du9CfhUY.mft (raw, json)
Hash identifier: KkFjjGB4i5PK9GSK2Hzevi9LqEtkKW6gZ3DiDynEbPE=
Subject key identifier: 29:ED:97:6E:42:8F:D0:C1:00:1F:EF:9E:35:46:86:78:1D:21:55:4E
Authority key identifier: 56:01:90:BD:FB:0A:3F:23:B4:41:1E:7D:74:8E:DD:BB:D0:9F:85:46
Certificate issuer: /CN=560190bdfb0a3f23b4411e7d748eddbbd09f8546
Certificate serial: 018F87485EBEFA57DE5BD12842AC5813AEFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft
Manifest number: 0122
Signing time: Fri 17 May 2024 16:00:17 +0000
Manifest this update: Fri 17 May 2024 16:00:17 +0000
Manifest next update: Sat 18 May 2024 16:00:17 +0000
Files and hashes: 1: VgGQvfsKPyO0QR59dI7du9CfhUY.crl (hash: yRHlc23hM47Z4vuuFQ3AhJP4ktJeftcx2vwY2cQkO2U=)
2: aL1hB3Rvwj_KGQzQ7Zp3qQJZcLQ.roa (hash: Jz4TCgJKQZxXLNUOO8cVGQvw0gOPg9IpscxhmXlCLME=)
3: iCX7z_b0Pxcw5OOkMBx9BM4ylqg.roa (hash: yhgqe4s5EZogDDjSoStci/YGBnnzq+Y9Ar5KWLv+1+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:48:5e:be:fa:57:de:5b:d1:28:42:ac:58:13:ae:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560190bdfb0a3f23b4411e7d748eddbbd09f8546
Validity
Not Before: May 17 16:00:17 2024 GMT
Not After : May 18 16:00:17 2024 GMT
Subject: CN=29ed976e428fd0c1001fef9e354686781d21554e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:00:13:6c:67:e8:3b:5c:2f:3f:4a:99:c2:65:
09:84:58:87:c5:9b:38:8e:2e:b9:50:be:0a:c2:1f:
7d:c3:c1:83:fe:09:88:4a:46:a2:6d:93:2a:3b:fb:
7b:b0:6a:df:24:4a:15:f5:ca:64:65:d9:db:7e:89:
a4:ef:50:c4:1a:0a:f5:28:95:60:5e:b2:b1:77:08:
44:37:1d:7c:68:5b:35:79:28:ed:ce:c1:ff:33:f2:
8f:24:8b:14:a9:4c:88:49:15:97:cc:df:df:8a:dd:
f2:9d:a9:d3:68:06:31:fb:49:04:9f:99:05:90:a7:
15:a2:30:b3:ef:4c:37:28:02:ac:3b:cf:b2:d7:28:
fc:5f:17:d0:86:04:65:d0:cf:d4:e5:49:30:b5:76:
7b:c4:7e:5f:57:eb:f9:7e:bc:23:fe:b1:3e:18:46:
53:1d:b1:f9:a6:40:fc:f8:f3:e4:2b:32:a9:a0:63:
8f:cf:ea:0e:19:27:6d:c1:fd:7c:43:01:78:7f:34:
1e:c4:e7:36:50:a4:1f:79:6f:42:42:82:87:1e:2a:
49:ad:ba:61:29:54:32:e5:cb:ed:b0:ea:77:08:f1:
de:27:00:1c:17:cd:ce:9d:14:44:5b:70:14:11:dc:
8a:d0:73:ab:81:9b:0c:1b:27:62:ae:de:d5:29:ce:
b2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:ED:97:6E:42:8F:D0:C1:00:1F:EF:9E:35:46:86:78:1D:21:55:4E
X509v3 Authority Key Identifier:
keyid:56:01:90:BD:FB:0A:3F:23:B4:41:1E:7D:74:8E:DD:BB:D0:9F:85:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:8d:f7:80:e7:2d:63:58:ed:e0:39:8d:90:d5:72:02:af:dc:
05:0a:93:32:49:c8:b5:f5:bd:93:02:7a:d8:e6:bf:46:1a:33:
e7:cf:0d:2a:69:12:9d:4e:a2:05:9f:4e:39:30:9e:f7:6f:9c:
b6:8a:30:11:c7:b7:93:d4:e9:c5:5a:93:6a:c0:95:0d:c8:97:
fe:f9:b6:77:90:18:cb:74:52:4f:3c:93:44:d4:7c:f4:b4:cc:
40:b8:6f:98:90:20:8a:01:2e:1b:34:6d:de:27:ef:5a:b3:f9:
25:f0:1a:ea:31:3d:03:6b:72:57:bf:e4:c7:2b:9b:08:97:cf:
0a:63:c9:a1:6d:b4:7e:14:06:58:cb:9b:c5:68:01:25:48:b8:
fe:2d:ca:29:1d:11:af:a4:8c:a9:bc:68:26:03:a5:1b:dc:2c:
96:70:6b:c0:b9:35:98:a9:14:80:6f:3a:86:34:95:1b:87:85:
a3:f5:fe:0b:5d:06:dc:6d:d3:66:35:31:58:f7:01:d6:41:0a:
42:04:d9:fd:9d:29:6a:1d:94:bb:e8:4a:c6:b5:5b:ff:99:68:
a8:d0:ca:6f:f8:b5:6d:91:57:25:89:9d:4f:83:dc:7d:31:85:
7e:17:be:5f:6e:00:38:0b:2a:04:22:93:ec:7f:f1:72:cf:8a:
bf:cc:74:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:39:30 2024 by rpki-client on console-fra.rpki-client.org