Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
File: vx1ZdLTlmcpy3MTawGbXcUIC78k.mft (raw, json)
Hash identifier: GYyPz5xS2MBhd+LcF2p0LBLr9cmC3ek1Obwo4SHdA2o=
Subject key identifier: 5E:40:99:13:59:A6:D2:1D:BB:21:68:A7:CF:CC:0B:AD:7C:82:0F:27
Authority key identifier: BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
Certificate issuer: /CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Certificate serial: 01935688E776576EB3A7BC79BCC374FEE1FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 01:00:32 +0000
Manifest this update: Sat 23 Nov 2024 01:00:32 +0000
Manifest next update: Sun 24 Nov 2024 01:00:32 +0000
Files and hashes: 1: q6YwftgUAvWJn9Q5GVwpYJtLidc.roa (hash: aHBcM4HUFOI4DEpV8lYOjLB7DMOOMiAqlkmJj21edaU=)
2: vx1ZdLTlmcpy3MTawGbXcUIC78k.crl (hash: YW3yKH8H6UDZ6ZOP6DN5xPYsnkmXcA5920WknferfDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:88:e7:76:57:6e:b3:a7:bc:79:bc:c3:74:fe:e1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Validity
Not Before: Nov 23 01:00:32 2024 GMT
Not After : Nov 24 01:00:32 2024 GMT
Subject: CN=5e40991359a6d21dbb2168a7cfcc0bad7c820f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:df:62:71:0a:a6:dd:4a:cc:20:06:b4:28:38:
68:79:77:a7:00:36:28:54:43:cd:6f:bf:9d:ae:c7:
71:f1:bc:c6:74:30:8d:e4:b0:7a:ec:2b:f7:70:8d:
29:5a:d9:66:0f:51:a4:0e:9d:a3:c2:85:b6:aa:01:
9e:06:a9:cd:26:77:81:5d:48:01:60:69:73:13:53:
47:bb:db:46:56:f2:5c:0b:bb:bc:ce:d6:bf:b7:81:
f0:92:af:6d:62:a9:9d:12:27:f1:33:93:5e:c2:02:
e7:63:bf:73:b0:74:c3:bf:66:66:42:ab:c2:f4:19:
80:7c:3c:4a:4e:2b:aa:7b:d5:7d:85:e5:67:b4:3a:
aa:4f:c5:b9:4e:3e:26:b8:f4:b2:c2:6b:f7:ef:55:
0f:8a:3a:e1:bc:f5:b5:01:02:0c:95:65:88:b5:93:
fb:d6:12:28:26:31:d9:cd:5a:df:07:45:70:27:99:
2f:02:57:79:fd:55:6a:d4:00:a3:3d:24:7a:a9:56:
5d:2a:84:96:26:91:25:16:f3:1d:d6:74:4c:a1:a9:
fc:31:6e:72:46:89:f7:34:5e:1d:6f:78:c7:ca:65:
80:10:35:12:7b:42:a8:3a:b0:b3:46:9c:d1:df:56:
36:4d:0c:1d:6b:f8:76:45:29:31:36:f2:b5:32:96:
22:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:40:99:13:59:A6:D2:1D:BB:21:68:A7:CF:CC:0B:AD:7C:82:0F:27
X509v3 Authority Key Identifier:
keyid:BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:38:e4:81:a6:a8:0b:24:54:f4:67:d7:c9:21:62:49:17:a1:
42:f3:dc:f0:79:45:7c:c9:91:be:54:ae:bd:43:f8:ba:05:76:
f0:ec:3a:07:7c:33:d7:ad:ed:0a:80:e2:34:38:1a:97:62:09:
ec:0f:4f:03:07:35:89:d4:ed:c7:b0:db:9c:2e:3e:d3:c0:03:
a8:24:fc:88:41:26:61:78:e1:66:da:60:96:53:ad:c9:10:d9:
93:2a:ff:47:98:9e:47:ac:3f:98:97:11:57:b3:28:5c:5c:0e:
54:8f:38:03:65:c7:7f:2b:9e:98:6a:ed:7f:64:4e:85:06:27:
1b:6b:02:4f:37:8b:6f:ba:e8:5c:f4:de:e1:4e:45:ff:82:60:
00:93:32:57:a0:90:66:70:b1:e7:f2:23:9b:07:e6:c6:2b:3c:
9c:96:29:b4:ae:8a:67:48:44:62:1f:17:b1:23:c6:cd:a7:8e:
eb:78:71:0c:5d:68:b1:9a:0e:11:f8:93:b1:92:c1:60:4e:e0:
c9:50:4a:cb:81:dd:6e:16:73:0f:54:d0:a9:3a:21:74:e2:2b:
c5:f8:8a:8d:36:6e:b6:40:fa:af:5d:57:4c:ae:ba:a0:5b:dd:
df:09:79:db:aa:8d:c7:62:7d:cd:ac:25:e9:9c:79:16:0d:9b:
57:42:06:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:38:41 2024 by rpki-client on console-fra.rpki-client.org