Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
File: 87VkazYDeZJMttnD2ZZpzn87LKI.mft (raw, json)
Hash identifier: KzDsNXdJe8KX3piCls6+0GNhtlAMP77FnAsq86iD1hQ=
Subject key identifier: 5A:0A:CD:0E:01:37:2F:DB:E1:59:75:0D:63:5E:E4:A9:0A:38:99:CF
Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Certificate serial: 019355E40B79809A5ED403A2E2611D3BD0FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
Manifest number: 1374
Signing time: Fri 22 Nov 2024 22:00:28 +0000
Manifest this update: Fri 22 Nov 2024 22:00:28 +0000
Manifest next update: Sat 23 Nov 2024 22:00:28 +0000
Files and hashes: 1: 87VkazYDeZJMttnD2ZZpzn87LKI.crl (hash: OxIWDoeOQfKr6w0R5djjLeWwWQKTxcho1tK19ixXyNY=)
2: Bi0okTloovPrtL3uZDrRlpbwMR4.roa (hash: TE+cQ/28ZsFGimW61pzy0Fb/nWpvRypPQakXNrG0F/w=)
3: UooPwNs3PfISE0aetYYeK4ThsU0.roa (hash: 5+QeqV23phzM8VDs0BlqGqqL/ZRKlmTO0qTfaEvlyfU=)
4: YQ-xVKfQD1jRgteCva10HYMl0Qw.roa (hash: /S2yB3AYoCcoSyXbvsXMrsoHpSOp+RYr9HyXeDw2tsY=)
5: fv_xu6nl63wGHL3zb0Wj1RtZpMs.roa (hash: vdDpWwiRQVz7MZF9QcYcaa2wA08WBJEsbvPppkBbnV4=)
6: h4yh5t3VeU09ez4z5QgiB3uf1M8.roa (hash: 7vB9u+MBS8X00ggm9Dac/PkydD1mr0tiX66Zdum6Ios=)
7: ks0dkQ2Fqw-W8yDowQrvAxDS59w.roa (hash: UV1LdIKfe1WkPv2wQCQ+k6yonstokJqCSISeoxCFNaY=)
8: l3qFrUexJRTHGGAw_Qdr_XCL95o.roa (hash: MKnBbe3GSw5m2BNX7XolqqLdSD8MidQm/ajLwKkjGw8=)
9: w6UojNagML6OrNougv5GROdB0Rk.roa (hash: VmT8dtxTru5oAiqhr2qITuwzAKZ6bTtUH2m5y6vlBFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:e4:0b:79:80:9a:5e:d4:03:a2:e2:61:1d:3b:d0:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Validity
Not Before: Nov 22 22:00:28 2024 GMT
Not After : Nov 23 22:00:28 2024 GMT
Subject: CN=5a0acd0e01372fdbe159750d635ee4a90a3899cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:43:0e:82:36:52:ca:a1:dc:db:59:3e:4d:1a:
4c:8a:6c:e9:37:37:9f:64:40:fb:bd:2b:66:45:a2:
52:d6:7d:61:bf:30:52:99:2d:f3:23:19:76:36:b3:
8c:45:db:fb:fa:da:c7:d9:be:25:2c:24:44:26:bd:
d7:9a:b3:cc:8e:6e:60:a9:77:58:29:17:dd:f5:83:
48:ac:28:e9:68:2d:e8:c7:ab:13:7d:66:a0:7d:f7:
cb:83:72:e8:cf:b9:c6:c5:57:7d:f3:be:12:d7:26:
c2:0b:96:ac:75:98:d5:20:41:b4:e8:27:ac:9f:4e:
6b:81:18:bf:3d:38:f3:8c:ef:f6:46:d6:3d:b0:3b:
10:7f:ca:27:25:33:88:70:d5:ab:31:0b:d0:18:dc:
d9:2a:e7:6d:0b:50:2b:c7:44:83:bb:15:b0:4b:f3:
db:83:11:87:c4:25:ec:07:fd:78:bc:68:a4:b7:82:
94:6e:cd:b5:62:33:2e:e4:e6:1d:33:9a:90:5f:da:
0c:91:3b:9a:2a:e9:d5:3b:5e:48:01:60:74:52:1a:
f6:f5:78:4c:5f:2e:56:ec:f2:a2:3b:ac:db:e0:b0:
db:e7:1c:52:81:c1:9e:b1:4a:68:a2:fd:94:4a:26:
e6:71:14:c4:f3:f9:08:17:78:69:b2:75:fb:89:7a:
aa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0A:CD:0E:01:37:2F:DB:E1:59:75:0D:63:5E:E4:A9:0A:38:99:CF
X509v3 Authority Key Identifier:
keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:2d:ff:4c:e1:ee:7b:d9:ff:6d:42:32:d4:45:74:bb:61:81:
62:1a:a2:ee:bd:a5:a2:91:ce:cc:38:0d:7a:b2:5c:fc:e9:7a:
ec:9a:62:a3:d2:b9:f6:1b:04:fb:6c:a1:af:f8:a2:9f:d2:5a:
5f:1f:92:cb:32:eb:15:8e:d4:8e:d4:6f:cb:c6:eb:61:66:9c:
dc:f5:0c:42:10:61:d0:35:c6:ea:3b:1d:b2:d1:41:83:57:f4:
c9:ac:d1:d9:07:9c:71:23:73:9d:56:11:8f:b5:e3:b2:55:d2:
2f:a5:4d:2e:da:3a:f3:83:bf:0e:ef:6a:2a:71:77:5f:5b:d1:
02:b5:61:4d:85:90:e0:51:e6:bc:8d:ee:44:e5:59:42:2b:1b:
d3:b8:59:4a:78:f7:c1:77:a2:4a:33:be:55:da:7f:2d:30:66:
87:33:28:33:05:1a:a9:71:bb:80:3b:23:d0:63:be:0d:6b:b4:
30:24:04:4f:32:2f:7a:e4:37:38:24:7e:a7:1a:a8:5b:88:74:
42:29:7d:f4:48:79:64:ac:11:0c:f4:85:ba:09:f5:aa:f1:7b:
34:37:50:c4:92:4c:20:1f:dd:0e:b3:68:d9:cd:63:07:b0:ca:
21:66:17:72:5e:66:06:7a:80:c1:bd:b4:27:87:f8:ab:7e:9e:
29:be:bf:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:19:31 2024 by rpki-client on console-ams.rpki-client.org