Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
File: VAQZQbFFDWuVtYyj8HfOII39-0s.mft (raw, json)
Hash identifier: MT6QaQjua6U3jmVxLQZjLkRghb2+SwrYKkV1xIpCmAA=
Subject key identifier: 0C:90:72:56:F7:A8:A6:D3:64:E2:2C:24:F8:31:E2:B1:F8:AC:6E:9A
Authority key identifier: 54:04:19:41:B1:45:0D:6B:95:B5:8C:A3:F0:77:CE:20:8D:FD:FB:4B
Certificate issuer: /CN=54041941b1450d6b95b58ca3f077ce208dfdfb4b
Certificate serial: 01935207839F6C3EBB6273B64BDA6375821E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
Manifest number: 040E
Signing time: Fri 22 Nov 2024 04:00:44 +0000
Manifest this update: Fri 22 Nov 2024 04:00:44 +0000
Manifest next update: Sat 23 Nov 2024 04:00:44 +0000
Files and hashes: 1: VAQZQbFFDWuVtYyj8HfOII39-0s.crl (hash: LgOVUiV4hnYUvNqH9zrwsyC9YVOnoAHaLHaKGGQjLh0=)
2: XydTOmpfRmgoBvC0YxZzARZ4Ya4.roa (hash: slEAHkuQwc14xPwIniByY287eXDZutsSBHjEyaJwELU=)
3: yA8FFQwWS21xHDJvnv7k1peLbSQ.roa (hash: IEIYsIExqZUtgs733xjhnv9gdE4AaRmHuPRhioNh/7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:07:83:9f:6c:3e:bb:62:73:b6:4b:da:63:75:82:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54041941b1450d6b95b58ca3f077ce208dfdfb4b
Validity
Not Before: Nov 22 04:00:44 2024 GMT
Not After : Nov 23 04:00:44 2024 GMT
Subject: CN=0c907256f7a8a6d364e22c24f831e2b1f8ac6e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c8:62:0c:1f:95:72:c0:2d:32:46:cd:a0:2c:
dc:ae:2d:e7:09:43:df:12:fe:c6:b9:e7:1d:f1:a3:
5a:5d:93:d2:4d:3a:63:09:93:37:4a:65:77:70:8b:
87:8c:2d:65:83:57:61:7f:a1:f7:8f:7e:de:ec:0e:
8f:59:ba:8f:57:07:d6:cc:66:a6:b4:2d:0f:f7:e5:
ad:fb:da:33:54:7a:ed:2a:45:19:d9:7b:44:65:8f:
25:3b:7c:27:50:4a:47:f8:c8:3e:db:3a:70:e8:f3:
83:d0:04:44:60:ca:1b:be:21:6c:1a:89:1c:35:1a:
f2:6e:2d:5e:ab:2c:5a:40:ea:f6:ad:07:1a:c2:b9:
e5:8f:9a:e8:e6:0a:d0:45:c4:d7:cd:f1:fb:37:92:
d8:81:fc:89:e2:14:e3:c9:50:63:87:e5:77:53:8f:
a4:c6:91:90:e1:98:d2:3c:59:1a:88:b8:7e:77:32:
ea:09:19:cb:9a:50:1b:0d:1a:24:80:b8:7d:a6:f5:
80:27:52:d9:48:d8:3a:85:78:06:71:af:c6:79:92:
30:2c:77:de:e7:a9:12:36:94:3c:f5:0f:a2:69:5b:
72:17:fa:66:2b:34:fe:6e:51:3c:fa:ed:75:30:62:
a4:2f:a8:89:6e:0c:14:1f:4f:82:f3:5e:25:ef:23:
04:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:90:72:56:F7:A8:A6:D3:64:E2:2C:24:F8:31:E2:B1:F8:AC:6E:9A
X509v3 Authority Key Identifier:
keyid:54:04:19:41:B1:45:0D:6B:95:B5:8C:A3:F0:77:CE:20:8D:FD:FB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e7:7e:6a:67:3e:30:29:41:eb:50:f8:0c:aa:72:b2:94:47:
53:d4:1b:c9:ed:31:8e:7c:c9:13:ff:c5:5e:0c:2f:bc:63:c6:
30:cb:c5:0f:c3:84:c3:33:99:6a:5a:c4:95:c5:34:9c:5b:ae:
48:1c:48:e4:d7:fd:38:d4:c6:72:72:3a:11:4f:5d:98:8f:21:
fc:b7:b1:40:47:85:05:dd:d6:82:4a:5d:01:ab:dd:29:0d:98:
4d:43:94:9b:a5:42:84:51:86:63:74:42:15:85:2e:38:f8:24:
1f:92:26:3f:c1:d8:91:74:59:b1:30:f4:42:1f:da:db:7f:cb:
5c:95:4f:7f:04:a1:96:e6:a3:3b:ea:c9:2f:71:a7:2b:42:c7:
ac:01:39:f3:13:9e:6f:5f:5e:63:ab:14:b4:9e:5c:19:be:33:
cf:20:e3:b7:f8:e9:7e:90:81:52:7f:81:1d:80:b3:1e:34:5f:
e7:99:2f:53:20:ae:ca:ca:db:07:72:ef:44:1d:43:eb:c0:d6:
57:f2:c1:49:e4:bb:d5:7d:41:a1:af:db:db:b6:85:f8:4e:9a:
35:47:9a:de:2b:25:22:06:01:90:34:3d:2d:20:e6:70:8d:50:
b1:ea:19:19:b0:e8:f3:58:c2:39:5e:e2:1c:51:f2:73:64:69:
e9:56:13:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSB4OfbD67YnO2S9pjdYIeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MDQxOTQxYjE0NTBkNmI5NWI1OGNhM2YwNzdjZTIwOGRm
ZGZiNGIwHhcNMjQxMTIyMDQwMDQ0WhcNMjQxMTIzMDQwMDQ0WjAzMTEwLwYDVQQD
EygwYzkwNzI1NmY3YThhNmQzNjRlMjJjMjRmODMxZTJiMWY4YWM2ZTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8hiDB+VcsAtMkbNoCzcri3nCUPf
Ev7Guecd8aNaXZPSTTpjCZM3SmV3cIuHjC1lg1dhf6H3j37e7A6PWbqPVwfWzGam
tC0P9+Wt+9ozVHrtKkUZ2XtEZY8lO3wnUEpH+Mg+2zpw6POD0AREYMobviFsGokc
NRrybi1eqyxaQOr2rQcawrnlj5ro5grQRcTXzfH7N5LYgfyJ4hTjyVBjh+V3U4+k
xpGQ4ZjSPFkaiLh+dzLqCRnLmlAbDRokgLh9pvWAJ1LZSNg6hXgGca/GeZIwLHfe
56kSNpQ89Q+iaVtyF/pmKzT+blE8+u11MGKkL6iJbgwUH0+C814l7yME7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyQclb3qKbTZOIsJPgx4rH4rG6aMB8GA1UdIwQY
MBaAFFQEGUGxRQ1rlbWMo/B3ziCN/ftLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkFRWlFiRkZEV3VWdFl5ajhIZk9JSTM5LTBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85Mzk4YjAtMmZiYi00YmQzLWI5YmMt
MWU4OWY5Njk1ZDFiLzEvVkFRWlFiRkZEV3VWdFl5ajhIZk9JSTM5LTBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi85Mzk4YjAtMmZiYi00YmQzLWI5YmMtMWU4OWY5Njk1ZDFi
LzEvVkFRWlFiRkZEV3VWdFl5ajhIZk9JSTM5LTBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOd+amc+
MClB61D4DKpyspRHU9Qbye0xjnzJE//FXgwvvGPGMMvFD8OEwzOZalrElcU0nFuu
SBxI5Nf9ONTGcnI6EU9dmI8h/LexQEeFBd3WgkpdAavdKQ2YTUOUm6VChFGGY3RC
FYUuOPgkH5ImP8HYkXRZsTD0Qh/a23/LXJVPfwShluajO+rJL3GnK0LHrAE58xOe
b19eY6sUtJ5cGb4zzyDjt/jpfpCBUn+BHYCzHjRf55kvUyCuysrbB3LvRB1D68DW
V/LBSeS71X1Boa/b27aF+E6aNUea3islIgYBkDQ9LSDmcI1QseoZGbDo81jCOV7i
HFHyc2Rp6VYT0w==
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:04:59 2024 by rpki-client on console-ams.rpki-client.org