Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
File: vhji2fUJydO0VREqoojTNhhYAaA.mft (raw, json)
Hash identifier: yu8ya1FV6k/E7ZOhhHohLR4/cox2TcooBnHLE3SJACI=
Subject key identifier: D4:3B:C1:F5:09:60:50:86:61:BC:57:99:F3:AE:2A:A9:09:BB:69:A2
Authority key identifier: BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0
Certificate issuer: /CN=be18e2d9f509c9d3b455112aa288d336185801a0
Certificate serial: 0193568B27B4675BC1B16CA0F5E1101A8A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
Manifest number: 0D53
Signing time: Sat 23 Nov 2024 01:03:00 +0000
Manifest this update: Sat 23 Nov 2024 01:03:00 +0000
Manifest next update: Sun 24 Nov 2024 01:03:00 +0000
Files and hashes: 1: tIMpWPVD50yE7oK5wo8PnlH4fJQ.roa (hash: AkF6hewIhPhy1fwn3jpcjjc0FIUT8NUD6KUNXUsNVJg=)
2: vhji2fUJydO0VREqoojTNhhYAaA.crl (hash: JMCfNt8JBmamuJl9sNsa6NYFG1ySwb/zGtdvLGSTJ9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8b:27:b4:67:5b:c1:b1:6c:a0:f5:e1:10:1a:8a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be18e2d9f509c9d3b455112aa288d336185801a0
Validity
Not Before: Nov 23 01:03:00 2024 GMT
Not After : Nov 24 01:03:00 2024 GMT
Subject: CN=d43bc1f50960508661bc5799f3ae2aa909bb69a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:72:a5:1b:6a:7e:7e:67:84:66:b0:72:86:82:
f3:9a:e1:d9:c7:92:2b:09:da:ae:95:aa:01:25:d7:
02:16:6d:8d:72:79:4c:83:05:0c:83:76:f9:e2:ef:
38:cc:af:77:64:af:58:32:f2:4c:95:a1:84:e4:f2:
74:6e:7e:ba:43:c5:4e:60:c4:68:d6:6a:1e:9d:9b:
5e:2f:fc:a7:24:f8:0f:42:89:f3:38:8c:8b:5e:4b:
25:4a:f4:74:0e:32:c9:59:78:96:10:bb:e8:b1:21:
f7:c2:77:16:63:b7:03:9a:27:43:2b:1e:d7:86:5f:
28:b4:df:bc:5e:3b:b5:87:a2:dd:25:b2:23:64:03:
7a:a6:95:4b:88:78:74:11:e5:e7:91:1d:82:63:e8:
c1:11:d5:10:83:00:bc:37:68:82:c8:e0:08:24:ed:
60:37:b0:e9:64:84:08:65:48:85:df:8b:a4:34:7e:
f7:84:52:11:31:11:25:ee:8b:4a:8e:4a:2f:a2:9b:
24:00:e5:ba:2a:a2:0a:c3:1a:43:5f:8a:b3:b7:80:
c8:d2:df:4c:29:dd:d7:cd:45:25:ef:78:4e:ad:98:
3a:f6:8a:9f:d7:14:ce:80:0b:6e:fe:27:16:61:c1:
70:90:f2:6b:3a:57:db:13:1f:f9:76:6d:88:7d:9b:
7d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3B:C1:F5:09:60:50:86:61:BC:57:99:F3:AE:2A:A9:09:BB:69:A2
X509v3 Authority Key Identifier:
keyid:BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f9:5b:48:31:a1:4e:d1:63:f9:7b:cd:65:43:da:ed:e5:51:
bf:a6:05:a3:4b:62:2c:67:e0:8d:de:3c:ad:75:c5:86:3d:fe:
70:d1:e9:f0:ce:9b:95:bd:7c:bc:a3:0a:ef:cc:cd:7c:b5:aa:
8b:c4:17:e8:41:d0:ba:30:77:07:41:ab:9d:a3:5b:18:37:6f:
de:5a:93:c2:02:aa:ef:f9:26:40:75:7e:3e:1b:34:43:f9:94:
42:d4:98:f8:49:0a:48:07:7e:3a:97:d2:86:5a:1c:ac:38:60:
da:45:1a:d3:c6:42:bc:8e:99:b5:24:f7:fb:a6:6d:ba:6a:17:
81:8b:dc:de:c0:04:52:b2:dd:17:fc:fb:e7:97:a7:f1:72:fb:
7d:3f:ce:5a:8a:1f:9a:86:82:18:65:6e:9a:7f:47:aa:e6:fc:
17:cf:94:53:45:35:16:1b:35:e2:36:0e:b5:25:84:39:da:a5:
45:2b:cf:ea:ad:88:09:2f:a2:1f:86:f1:7a:28:f1:cb:19:a1:
a5:76:88:e4:fd:cd:37:cf:e9:24:43:ea:86:87:a6:0f:46:0f:
bc:d6:0d:8a:68:a9:c9:01:f0:ad:84:6b:c3:ed:fe:eb:8e:e3:
7e:cd:4f:3c:84:1f:65:f0:f2:2c:e5:17:46:59:b9:49:fa:ee:
8a:fb:f1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:09 2024 by rpki-client on console-fra.rpki-client.org