Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
File: vDEkfzWabUktyZQ64PAPyL4hbHg.mft (raw, json)
Hash identifier: 4sVYwwm9OjuAELYGYLdnPkE6vIKjT53oVOus+NJdCXY=
Subject key identifier: CE:BD:DC:22:0D:88:53:F7:1F:E2:AC:8C:2A:13:F7:1C:4B:DE:7E:91
Authority key identifier: BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
Certificate issuer: /CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Certificate serial: 019352076C423A7E6D4633DCDB02939F1BC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
Manifest number: 1370
Signing time: Fri 22 Nov 2024 04:00:38 +0000
Manifest this update: Fri 22 Nov 2024 04:00:38 +0000
Manifest next update: Sat 23 Nov 2024 04:00:38 +0000
Files and hashes: 1: ByYqgeOnQVy35uePtgD4RRkbG_g.roa (hash: soNRfiktb4idTu6vUcTstHZl9iEWFNY687fFTRfkVBg=)
2: fgNf6A7ImjWDab3mzu4P7WN4Ubk.roa (hash: 7NyURISWK3j9kZPXYw9gqCZhvXCwGcdPH97cZ5KS3kc=)
3: vDEkfzWabUktyZQ64PAPyL4hbHg.crl (hash: W1khrsDxd7oF8IygMKf8twD0dCRUajk4ZC9vW3ncl/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:07:6c:42:3a:7e:6d:46:33:dc:db:02:93:9f:1b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Validity
Not Before: Nov 22 04:00:38 2024 GMT
Not After : Nov 23 04:00:38 2024 GMT
Subject: CN=cebddc220d8853f71fe2ac8c2a13f71c4bde7e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:21:72:5a:1a:8c:b2:a3:9e:35:eb:9d:50:95:
ac:c6:ae:9f:5b:23:88:5c:b8:0f:56:7b:3d:aa:75:
89:21:7e:ac:2d:95:71:70:94:59:51:3a:c5:c5:ec:
48:4b:6d:3a:0a:72:99:83:82:e8:78:ee:42:5e:b3:
b7:14:e2:89:d8:57:7a:50:4f:04:f3:ad:0d:2e:3b:
be:c0:1b:d9:65:40:73:45:58:e5:0f:87:be:6d:c2:
69:0f:cf:99:87:ab:52:ee:44:aa:15:5e:5f:31:8b:
c7:ce:87:50:fb:7e:ae:b5:8f:73:01:be:2f:90:a8:
f7:e9:32:b4:a0:42:bc:6a:40:83:20:9f:a0:e6:ee:
83:8e:95:d4:6d:6d:86:ea:80:4c:b7:5f:4e:a9:4d:
ae:d9:70:3d:5b:95:66:54:1c:e9:8f:d8:c6:7a:fb:
c9:a5:dc:e4:8e:39:95:94:93:26:bb:e7:14:b2:8d:
0d:c6:13:8c:5b:04:46:77:ec:6e:36:6e:08:7b:92:
66:e4:8d:23:51:a4:c9:49:26:72:30:7a:92:14:dd:
83:1f:cd:9d:85:19:9e:ae:6d:77:a3:e1:9f:56:50:
66:f2:97:37:ad:03:63:3d:61:c0:84:15:24:9d:ae:
d5:4e:b4:0f:0f:ef:f8:f9:14:87:1d:77:bb:6b:02:
a8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BD:DC:22:0D:88:53:F7:1F:E2:AC:8C:2A:13:F7:1C:4B:DE:7E:91
X509v3 Authority Key Identifier:
keyid:BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e7:ea:6d:cf:71:b7:e9:8a:9f:4a:24:e9:1c:9c:0c:57:69:
e7:20:bc:b6:28:62:d0:31:64:fe:82:e6:65:de:d6:ca:88:1a:
95:da:d8:07:8f:24:c7:89:1f:bf:f5:52:e1:42:62:f7:a0:f3:
02:c8:72:e5:3b:24:ee:2b:ec:9e:f4:88:fd:ae:ab:1e:a8:be:
d2:b0:80:dc:75:8f:fe:97:03:f4:13:d7:ea:c4:47:4d:48:e9:
4d:90:5b:ec:85:55:4c:70:7a:65:c2:33:27:36:19:e3:fc:e5:
b1:d9:b3:d1:38:97:e7:42:67:cd:e4:b9:e7:cb:b5:08:cd:d7:
df:15:3b:ff:8d:36:69:82:60:d4:ea:49:32:52:f7:f2:23:30:
57:94:fc:c5:d5:1b:c6:0d:63:5b:7e:11:3f:00:ea:d2:06:9b:
72:a4:c7:39:73:12:c6:bd:14:16:8e:8f:ad:cc:7b:c1:4a:e5:
ea:7c:02:0c:01:a9:42:60:1c:ca:9f:eb:16:5a:14:78:d0:90:
6f:f7:95:f9:b1:88:5b:07:c9:04:63:c0:9f:a5:81:2f:b4:5e:
a0:cd:96:68:e0:e2:ab:68:dc:0e:e9:a6:78:16:a6:c2:8f:6d:
ca:7c:e6:58:d7:b8:1e:c5:55:dd:ff:df:e9:4e:b3:bc:ae:fe:
bd:dd:72:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:01:05 2024 by rpki-client on console-fra.rpki-client.org