Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
File: VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft (raw, json)
Hash identifier: Y+6mnOTXPW+Bzhqp9V1R35WxAOQMyxfCtx4W6jRUy9M=
Subject key identifier: 62:CA:2D:36:D1:8D:9C:87:4D:14:86:B0:24:62:A9:0D:CB:EB:5D:60
Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
Certificate issuer: /CN=57130f799f8a8985502a2ea3356037674085cfca
Certificate serial: 01935207629AD6546AE0628D6D9AD44B5BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
Manifest number: 1376
Signing time: Fri 22 Nov 2024 04:00:35 +0000
Manifest this update: Fri 22 Nov 2024 04:00:35 +0000
Manifest next update: Sat 23 Nov 2024 04:00:35 +0000
Files and hashes: 1: 31-UyeR4pAkuuR-biZyGU0GXB48.roa (hash: f1bYEAGtOnOD7D6kVH4ijNg398OtjxBZ8X4PzJaJ68w=)
2: IVNpOV2zpNXGyApZTGLm0-x0ZK0.roa (hash: R+tkOC1o90D0Eq6CotxrT01eTJhH09NIyECKbpnAL4o=)
3: KHkhbTCUnkLoepaB-LfHVjgNLXM.roa (hash: rw4BDubx5DausqCmok4Cvol4wah+bBMuqoLku+InsOk=)
4: Ls3Ynafee-YiWCvLEIKI3fuRkxY.roa (hash: ZweLuwG16o7nlZDAi4VIk2BrlL7hu4XfgaRqzEYh/cA=)
5: R7kl_Rg1yUs0INMAoCEKR2tayOY.roa (hash: Jl3TwBZwwOLa655sF3+ed3j8Oua8mgGc1YEnxxwPzIM=)
6: VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl (hash: gFWKnh6REys0onL7WfgwcCyjjabGR6GUj2WtqNapZ9M=)
7: XJ8zYy2FdJD5fNl45gFAkXw7bs8.roa (hash: hzGK8yRmoTHGE1CP6Rx8EJUJDB+/Ns8tOiZnhjk2ztk=)
8: c76ZhrfiR11TMzK_StBZ7O7YvCE.roa (hash: 5JyVXgJU19OnMR/eZcRjXyzBora4HleoAa/2pEITffA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:07:62:9a:d6:54:6a:e0:62:8d:6d:9a:d4:4b:5b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca
Validity
Not Before: Nov 22 04:00:35 2024 GMT
Not After : Nov 23 04:00:35 2024 GMT
Subject: CN=62ca2d36d18d9c874d1486b02462a90dcbeb5d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cc:1a:36:7e:1b:4d:87:10:d9:e8:f7:2c:54:
17:d0:fc:80:6b:46:46:14:4c:39:6c:16:fd:bf:7a:
32:b8:d6:1a:00:dc:51:ca:ae:e5:53:c1:ab:95:c5:
e0:cd:ff:cd:6f:52:f8:20:2e:87:55:24:17:39:2e:
52:38:7a:7d:c0:25:21:90:cf:d0:1c:15:88:e4:9b:
c6:40:ff:2a:5c:3e:e1:cd:02:54:9b:92:53:bb:01:
33:cf:22:07:79:4c:8d:ba:d9:d8:0f:3a:e8:bb:82:
da:8a:04:b5:44:66:06:b7:46:09:26:16:e6:0e:e2:
21:3f:5d:57:57:99:dd:2b:cf:b3:3c:99:c2:cc:4a:
ce:66:79:c3:8d:22:d5:28:0d:7f:d4:76:d5:9d:79:
92:6e:4c:61:f1:2a:b0:5c:5e:f6:db:df:37:a7:bb:
e7:ff:bd:d4:5e:1a:01:47:54:18:74:34:58:a5:ea:
0a:63:50:6d:b2:af:15:5f:9c:1d:72:49:34:5b:a5:
e7:86:99:e3:7e:47:57:fd:b9:30:4a:2e:5c:af:fb:
00:e1:c2:c7:fc:0c:57:74:c5:3f:ef:fe:ae:79:03:
6f:fe:2c:d6:fd:60:64:24:09:b0:53:83:5b:4b:bb:
6f:d1:1a:b8:c6:06:53:e2:5d:62:50:7f:6d:96:0d:
c9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CA:2D:36:D1:8D:9C:87:4D:14:86:B0:24:62:A9:0D:CB:EB:5D:60
X509v3 Authority Key Identifier:
keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:93:03:28:3e:26:7e:37:98:d8:c2:89:e7:b7:5b:a7:39:30:
0e:92:fb:f4:c6:b1:e2:5e:18:d8:79:6a:e2:f9:cf:cb:1c:da:
c9:41:da:30:f5:37:97:71:d7:4b:c5:5c:3c:c5:15:b2:7b:9f:
3f:db:36:13:73:45:ae:d8:a7:79:53:00:67:9e:aa:09:b4:3d:
f3:28:6a:1f:28:e6:3c:77:07:bc:de:d2:c6:f8:76:97:a1:f0:
82:6c:8f:cf:06:87:70:89:b5:75:02:ad:e6:4a:21:98:7b:80:
c2:2f:b3:54:92:0c:df:24:b8:bc:3f:e1:73:b0:5b:07:c2:2f:
fa:e6:14:2b:53:23:c1:ba:75:43:50:48:18:e4:2d:d9:d8:93:
cc:32:2d:9c:aa:23:34:a1:e4:aa:14:dd:d7:d8:90:93:2c:7b:
a5:48:6b:56:98:da:86:6b:8f:cf:32:82:0c:4f:48:c1:fd:bc:
ed:51:f6:a9:c7:0a:8d:6c:9a:ef:84:c0:2a:85:69:eb:10:98:
58:3b:35:ff:9f:46:c3:7e:41:4b:83:4d:fe:d0:0c:c4:5d:74:
7c:87:57:4d:25:20:18:e8:0a:64:68:4e:cf:55:0e:a9:fe:e3:
5c:88:31:2f:7d:9d:12:57:28:4a:d3:9f:c5:e9:e1:45:90:cd:
d3:2e:91:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:40:00 2024 by rpki-client on console-ams.rpki-client.org