Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
File: vSUqdclhrTOP2RFH1GHdiz0gz1E.mft (raw, json)
Hash identifier: /vrfu8aow4sc1ClA/HTjBH7FRaizrvd8Jb9ubhOA89E=
Subject key identifier: 41:DF:73:27:3A:44:79:4C:49:1A:B7:FD:82:13:50:17:95:98:00:04
Authority key identifier: BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51
Certificate issuer: /CN=bd252a75c961ad338fd91147d461dd8b3d20cf51
Certificate serial: 0193549AF21E77D81828AFFDA471D1A40452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
Manifest number: 1374
Signing time: Fri 22 Nov 2024 16:01:00 +0000
Manifest this update: Fri 22 Nov 2024 16:01:00 +0000
Manifest next update: Sat 23 Nov 2024 16:01:00 +0000
Files and hashes: 1: JnGkFGgKAJwRzHf28338JLK4Z1Q.roa (hash: i0iJdr42DHOtMFIAtYSeNO8wHodTDAjTb2jTJJAH1GU=)
2: V77Lo2aVp1Y68zpOxbqjqNYt68g.roa (hash: 6htibnnzSyfbaiFqJEhty7Oc4bKGSRnM6LapHtGjkiU=)
3: vSUqdclhrTOP2RFH1GHdiz0gz1E.crl (hash: /kBPPC2DVCaYWC9fubIBtjX2YZUrfiAWBv9bNUHCdH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9a:f2:1e:77:d8:18:28:af:fd:a4:71:d1:a4:04:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd252a75c961ad338fd91147d461dd8b3d20cf51
Validity
Not Before: Nov 22 16:01:00 2024 GMT
Not After : Nov 23 16:01:00 2024 GMT
Subject: CN=41df73273a44794c491ab7fd8213501795980004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:56:e6:1d:90:fc:cd:45:3e:c6:f8:f6:e7:66:
d5:0a:9f:e9:5d:02:83:c2:f7:23:1f:48:af:df:70:
c9:7a:a3:dc:9e:5b:e6:63:87:44:bd:71:93:ea:be:
14:26:d2:e3:3e:1b:f5:18:75:23:33:85:21:24:0d:
37:a2:cc:24:e2:3c:c3:79:4f:06:38:f0:12:dd:06:
08:be:25:74:29:94:20:f0:66:f2:04:0c:51:4a:f0:
4c:b1:17:f4:c7:7c:9f:6e:01:1b:10:4c:1a:0a:1b:
62:83:48:de:be:7c:5f:4d:85:78:c7:0a:c9:ea:83:
10:da:0b:c9:f7:ba:a8:52:13:4b:52:60:3b:41:ec:
99:e8:43:0b:8c:af:0a:c9:06:5c:8a:f7:e6:3d:ad:
14:51:86:bd:92:81:ec:d1:6a:43:a6:3b:c4:1e:61:
ff:cc:09:47:3b:60:1c:bb:93:ba:cd:40:78:3b:b3:
17:b8:43:a6:8f:ca:0c:21:61:05:7c:a4:56:69:ee:
2e:5a:99:d7:08:99:2e:5f:ee:fb:f8:c5:70:bb:23:
58:6c:2f:fc:ee:41:b1:27:8e:15:05:d5:5b:e6:5a:
2e:b4:80:54:35:e7:97:3d:7b:00:28:97:17:c1:6a:
63:45:a6:0f:fc:f3:f4:3e:66:2e:9a:43:db:e4:b4:
06:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DF:73:27:3A:44:79:4C:49:1A:B7:FD:82:13:50:17:95:98:00:04
X509v3 Authority Key Identifier:
keyid:BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:28:bc:91:33:9f:75:ae:70:ad:16:ca:09:ef:65:3d:49:24:
ca:00:d5:3a:17:e6:4a:f2:38:c7:dc:fa:46:9a:69:8a:90:0e:
59:38:1e:93:1b:71:47:21:8a:03:cf:2a:a1:22:6b:8a:12:18:
cb:63:7e:4c:2a:91:6d:df:54:41:7f:36:89:fd:6d:24:d6:b3:
6e:9f:6a:f0:c5:c8:f5:12:d4:1f:8c:86:56:b9:40:a1:10:f8:
f0:da:66:98:f6:49:a5:4a:73:02:ff:14:c8:a7:a3:43:49:93:
7b:1b:c8:4d:7d:98:b2:f7:fe:29:0c:13:53:5b:92:82:7c:9b:
a1:ef:de:e6:18:ef:e9:2e:75:c9:a2:a8:b4:84:5a:21:4e:bc:
06:e4:20:05:59:80:98:9e:c2:eb:9f:27:cb:7c:06:a5:f6:e4:
0f:25:03:48:3a:76:d6:4c:27:47:d2:ba:ea:35:2e:6d:ae:05:
c1:e1:5a:1e:d6:46:cc:97:72:3f:79:c7:61:8f:af:79:38:a3:
97:63:5d:0b:bb:8f:90:89:19:7e:80:63:57:ec:ed:bc:f7:ea:
26:9a:08:7c:cd:6e:5e:87:d9:88:41:e6:4d:82:76:12:e8:68:
df:5f:d1:7b:bb:25:60:d6:ab:7e:29:b0:fe:be:55:72:70:51:
21:64:44:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:12:16 2024 by rpki-client on console-ams.rpki-client.org