Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
File: VAQZQbFFDWuVtYyj8HfOII39-0s.mft (raw, json)
Hash identifier: yS/hvDndEnIxp0e3SoWMXpX4na137rBsShGYVLlyw54=
Subject key identifier: A2:A7:5B:24:AA:20:C0:BC:F8:A5:6B:2D:33:5C:4F:3B:F2:31:0D:F2
Authority key identifier: 54:04:19:41:B1:45:0D:6B:95:B5:8C:A3:F0:77:CE:20:8D:FD:FB:4B
Certificate issuer: /CN=54041941b1450d6b95b58ca3f077ce208dfdfb4b
Certificate serial: 018F8D81E9EAEE4133706A1A9DBF744C0DBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
Manifest number: 0219
Signing time: Sat 18 May 2024 21:00:52 +0000
Manifest this update: Sat 18 May 2024 21:00:52 +0000
Manifest next update: Sun 19 May 2024 21:00:52 +0000
Files and hashes: 1: 7-XRHhcfl-DmlmC_OuJxJU8f3Z0.roa (hash: QF0FJk0X6+Q8j3fvOe2ZQoQSga7sR3h1gIbfi1KtMTQ=)
2: VAQZQbFFDWuVtYyj8HfOII39-0s.crl (hash: dnLi2Hm6jyaI+ON/ux+ggdCicT0lZ0kFvn9x63cBKYY=)
3: yA8FFQwWS21xHDJvnv7k1peLbSQ.roa (hash: IEIYsIExqZUtgs733xjhnv9gdE4AaRmHuPRhioNh/7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8d:81:e9:ea:ee:41:33:70:6a:1a:9d:bf:74:4c:0d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54041941b1450d6b95b58ca3f077ce208dfdfb4b
Validity
Not Before: May 18 21:00:52 2024 GMT
Not After : May 19 21:00:52 2024 GMT
Subject: CN=a2a75b24aa20c0bcf8a56b2d335c4f3bf2310df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:56:fb:41:b0:75:7c:40:70:69:8b:84:2b:15:
d7:d9:83:df:04:79:b5:73:fc:7b:e1:8a:86:d1:93:
d5:35:8e:f4:ed:bf:5c:5e:00:9f:c3:5f:6b:3c:c2:
b8:08:b8:ae:13:7c:82:98:4a:f2:6a:ee:d2:12:98:
b0:65:90:f8:c5:2d:4a:db:4b:a2:8d:da:8f:8f:a8:
fc:28:38:8a:e9:53:46:69:50:7c:a0:84:d4:7c:3a:
6a:03:85:58:09:0e:22:fe:ef:08:19:ee:1d:bc:e8:
4a:eb:55:3d:e1:8d:97:28:e8:ae:62:b8:14:13:bb:
a2:0c:8d:e3:2a:67:81:f9:79:0e:3a:e1:26:5b:69:
02:8a:15:f3:11:0c:6d:9f:c3:88:af:40:7f:cb:4b:
ba:0e:2e:7b:3f:c3:99:59:e8:80:1d:0b:18:fc:b1:
b2:a1:e0:11:7b:0c:27:1b:b0:79:f6:99:3b:e6:3d:
db:cd:71:8d:de:e5:1e:fe:5a:28:b1:8b:f4:f9:3e:
d7:79:5e:3b:6d:5a:ea:bf:c4:4a:03:06:40:83:37:
4a:cb:6d:c9:fd:ea:df:6f:4b:cb:28:ed:2d:d7:52:
bf:f4:5f:23:f7:53:c4:bb:c4:56:c6:66:f7:97:13:
f8:4b:0f:db:fc:ad:56:7c:a1:39:68:0c:d6:a7:40:
cb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A7:5B:24:AA:20:C0:BC:F8:A5:6B:2D:33:5C:4F:3B:F2:31:0D:F2
X509v3 Authority Key Identifier:
keyid:54:04:19:41:B1:45:0D:6B:95:B5:8C:A3:F0:77:CE:20:8D:FD:FB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f7:4c:91:62:d9:61:6a:4c:8a:b6:ad:e3:01:2f:c7:ae:06:
2d:0e:49:8d:26:ea:14:c3:18:2a:fb:13:f6:84:46:a4:c5:de:
4b:1f:49:27:d5:72:92:88:57:ed:5a:ad:44:07:e7:4c:24:4e:
9c:d2:e2:d5:ea:11:4b:8b:ae:bf:5f:37:ca:8b:56:af:7d:65:
06:76:4f:20:c5:b2:ee:10:8d:b7:30:5d:97:a4:32:e0:06:b8:
a6:b8:3c:35:bf:3c:4b:85:54:10:86:79:61:78:25:3b:7b:30:
4b:3e:14:44:3d:eb:55:08:00:fd:75:96:14:de:ac:e4:8c:8a:
b7:48:72:29:ad:6d:53:05:84:83:f1:e4:85:b5:a4:e2:2c:3d:
1f:cd:ba:a7:a4:51:eb:fa:62:cc:6a:d1:1f:b9:2c:dc:d1:84:
33:0f:81:05:58:85:d4:85:e7:b3:4c:80:02:c4:d7:77:57:68:
37:d5:13:75:65:1c:2e:d3:ca:2f:d1:3b:43:d2:7c:c2:6a:eb:
7e:5e:7b:02:c9:4e:89:2b:93:78:5b:3e:c2:e3:f5:19:b2:63:
38:21:86:d6:52:7a:e4:84:99:73:bc:0f:45:9b:9b:dc:4f:02:
de:d3:84:c5:80:09:04:72:0f:23:e5:12:0e:b5:df:dd:44:fe:
8c:b7:42:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 23:03:49 2024 by rpki-client on console-fra.rpki-client.org