Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
File: VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft (raw, json)
Hash identifier: iMDIOSW8RChsvCrralYKYxU/HLvNILpqva1E1JkPh6k=
Subject key identifier: 60:B2:5C:66:2C:7D:5A:6D:38:25:3B:91:3F:6F:F2:9B:EA:BB:63:EE
Authority key identifier: 55:D5:DC:9E:22:01:12:A2:7C:15:2B:C3:23:89:03:89:74:AE:45:72
Certificate issuer: /CN=55d5dc9e220112a27c152bc32389038974ae4572
Certificate serial: 019353BEFFE8C79A7F26567BF84D4D7E585C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
Manifest number: 1087
Signing time: Fri 22 Nov 2024 12:00:46 +0000
Manifest this update: Fri 22 Nov 2024 12:00:46 +0000
Manifest next update: Sat 23 Nov 2024 12:00:46 +0000
Files and hashes: 1: 7zdIFtyksCfxBdLCkUHAEY9cznY.roa (hash: IESphrV+6pjk0zB46CzGlzVHWAoGyRabTQewcSgl6G0=)
2: VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl (hash: 0dhNN4I/sTLsLBLLEkNGQmQF/kzkl7X5ZNgeUw/Q5uU=)
3: ij4BSufcwAgfVRX2DuJ6U5kJCPg.roa (hash: pbjxxiEB83CuOWuQ87lIhLUcfNts1fLqGX4+8vwr6cM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:be:ff:e8:c7:9a:7f:26:56:7b:f8:4d:4d:7e:58:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55d5dc9e220112a27c152bc32389038974ae4572
Validity
Not Before: Nov 22 12:00:46 2024 GMT
Not After : Nov 23 12:00:46 2024 GMT
Subject: CN=60b25c662c7d5a6d38253b913f6ff29beabb63ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0f:ce:90:05:af:64:f1:84:81:07:e4:73:9d:
7a:69:f5:59:0e:6c:7f:e6:f5:b5:2a:8b:0f:64:2a:
a6:9b:78:86:16:75:f6:83:66:de:5b:75:1d:4e:32:
a5:e5:45:3c:95:d9:47:df:4b:90:07:04:8a:c9:af:
37:a3:96:3c:17:fe:00:cf:a0:16:69:2b:e0:30:1a:
49:2b:c4:42:1f:e6:eb:7e:fd:9a:06:72:2e:09:40:
c0:8e:dd:4e:6f:f1:05:7c:4f:c2:91:cb:11:16:26:
1a:90:07:47:e2:0f:a1:c8:cc:55:c3:d6:f2:3c:b9:
79:c8:60:cf:a6:0c:e8:71:07:6e:ed:2b:da:d6:a5:
e2:22:62:9a:c0:c7:7d:7b:d7:cc:20:bd:70:f9:81:
32:ef:ab:d3:30:74:e8:8d:9f:bf:e9:71:af:f5:8b:
58:04:86:46:64:1e:c3:89:78:d2:51:88:68:e5:dc:
2a:be:78:a8:9d:96:9c:42:04:ea:de:f7:75:7e:d7:
aa:94:e8:d2:0d:9b:0d:21:a5:57:f9:c9:6e:45:a6:
92:c0:9d:c5:6e:1d:d7:d2:6d:0c:fc:30:29:36:fa:
17:81:c7:70:72:4e:05:29:0a:f0:66:03:aa:5d:8b:
c6:a8:12:6e:52:9d:28:f1:e4:55:93:d7:de:33:27:
7c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B2:5C:66:2C:7D:5A:6D:38:25:3B:91:3F:6F:F2:9B:EA:BB:63:EE
X509v3 Authority Key Identifier:
keyid:55:D5:DC:9E:22:01:12:A2:7C:15:2B:C3:23:89:03:89:74:AE:45:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:57:3d:f7:0f:32:13:0d:d0:b0:b3:d4:7c:37:4f:f3:20:ad:
43:17:af:d3:e1:91:55:70:17:eb:9f:87:f7:66:05:84:0b:93:
45:a7:8d:4d:66:28:b4:a0:56:42:06:63:0a:f5:76:46:e5:c7:
b4:a5:28:ef:39:c9:94:d0:8d:9a:2b:74:bd:84:b3:24:42:3c:
46:be:a7:84:25:43:75:d8:09:f6:84:ae:23:b3:89:72:4a:a1:
6a:f7:53:51:43:82:e8:17:1a:2d:68:7e:89:78:e1:87:f0:e3:
0b:e4:2b:bb:ce:e6:49:3a:af:7b:e0:6e:c4:82:ca:6d:dc:59:
fa:4d:f0:44:66:14:67:23:47:22:05:f4:8e:ed:25:40:11:13:
e1:e5:d9:6f:4d:d3:ae:b0:39:75:80:3b:55:33:b9:97:36:25:
15:a7:de:ec:2f:b5:de:41:62:24:db:64:b8:3e:1c:29:52:e4:
c6:95:36:b0:31:60:09:f3:69:ca:08:a8:61:64:4e:fc:d3:98:
3f:67:eb:22:73:7c:da:48:f4:ca:99:64:5b:b6:cf:b2:55:93:
b7:93:72:13:8f:cf:37:10:4b:4b:79:f0:29:14:1e:42:fc:8b:
22:36:07:37:a6:af:dd:45:f4:fc:cc:79:42:65:ed:a6:93:77:
41:ec:e1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:13:49 2024 by rpki-client on console-fra.rpki-client.org