Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
File: vZALuaxgacUTtYLWH9gezNVhpWc.mft (raw, json)
Hash identifier: m1d1a+AvSojhYoXfYsRhJYQEdPNBZUJ6FujEG3HauZ8=
Subject key identifier: 5A:4F:12:96:F1:3C:03:C0:33:4C:13:A9:FB:58:5E:5A:09:46:2E:25
Authority key identifier: BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
Certificate issuer: /CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Certificate serial: 019362C3EC066A2EB8871F92A03C36A818DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
Manifest number: 12F6
Signing time: Mon 25 Nov 2024 10:00:27 +0000
Manifest this update: Mon 25 Nov 2024 10:00:27 +0000
Manifest next update: Tue 26 Nov 2024 10:00:27 +0000
Files and hashes: 1: 1-4p8IVXZMjBey2XUTpIlwmHXC9M.roa (hash: /HuE5uOFR4+hhFAOV1xaFCanP8msA++8ExqFUIojs14=)
2: vZALuaxgacUTtYLWH9gezNVhpWc.crl (hash: T5qtEBrJWVH+omXajBZE6DAmfs/fUb8apbtTUk9B4mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:c3:ec:06:6a:2e:b8:87:1f:92:a0:3c:36:a8:18:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Validity
Not Before: Nov 25 10:00:27 2024 GMT
Not After : Nov 26 10:00:27 2024 GMT
Subject: CN=5a4f1296f13c03c0334c13a9fb585e5a09462e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:48:e7:6d:d0:0b:16:22:c7:f3:ca:f6:82:14:
7f:b7:da:6d:63:44:ae:69:b2:00:a0:89:00:e6:01:
3e:5d:79:7d:7c:86:b3:04:91:42:95:c0:a6:a1:45:
b3:bc:97:23:a0:8c:12:05:e4:63:aa:dd:10:4f:ea:
c7:47:cc:e2:c7:3f:72:9b:b7:ab:5a:11:21:8a:c6:
41:75:98:b4:e7:b0:7b:52:01:d2:fc:a4:e2:8a:df:
a4:95:60:09:7e:b7:51:9d:f8:ab:bf:08:c3:92:40:
44:e5:cd:02:55:de:88:e9:78:3b:45:9f:36:27:29:
82:e3:8a:79:85:ff:46:2b:3d:6c:f4:cc:e0:12:ce:
78:59:e8:b7:f7:e8:2b:a2:51:85:46:69:7d:7b:93:
9c:38:23:cb:76:ca:fb:c4:c0:36:af:7f:ca:33:11:
ba:7b:f5:28:5d:86:ff:63:0b:f2:1f:9d:8d:b0:3e:
56:3c:30:a2:d8:34:05:7e:92:48:36:74:2c:6c:99:
6d:92:3d:6d:8c:a7:ca:eb:f6:56:a9:8d:b3:56:6a:
fa:12:af:fe:bf:02:e4:1b:81:6d:44:f6:1b:9a:b1:
49:36:5d:66:2c:c4:af:bb:30:9f:da:5d:73:38:3f:
b0:90:8d:9d:49:29:25:7c:d9:64:b0:ce:00:b6:b3:
18:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4F:12:96:F1:3C:03:C0:33:4C:13:A9:FB:58:5E:5A:09:46:2E:25
X509v3 Authority Key Identifier:
keyid:BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b6:b9:13:a1:c9:39:a2:7c:ae:7a:f9:3b:9e:9e:5e:65:b5:
87:49:61:b5:08:35:f2:cf:da:35:52:1c:88:94:72:ab:4a:05:
9c:56:10:35:f1:5d:21:58:ed:28:57:49:f4:5b:7e:c3:18:54:
86:58:96:19:cd:89:a6:de:24:74:41:0e:bf:31:04:45:67:e3:
5f:6f:41:ad:86:d7:73:8f:99:b8:52:7c:24:11:f6:b3:d1:fe:
9d:c5:cd:9d:a0:fa:54:39:d9:ee:43:d5:51:6a:da:7a:ad:68:
4c:b5:59:d1:e1:c8:dd:fa:d6:f5:14:09:17:e3:a6:4e:54:c2:
1f:4b:89:ee:54:c6:9a:e8:0d:1c:12:8f:16:75:31:1a:35:02:
64:2f:62:2e:66:c6:56:b7:9f:3a:b2:25:08:ae:4c:55:91:6e:
b4:73:e6:cd:ce:89:90:76:e1:b4:bd:72:bd:25:0a:12:9e:be:
e2:12:62:f6:46:f3:db:35:a8:64:c2:f6:5d:b7:f4:62:39:82:
b5:95:fa:3c:ba:48:33:d4:c3:cf:9e:76:66:3f:ea:8a:3c:9d:
2b:9f:90:9d:dd:97:7c:4c:50:18:ee:2b:fc:1f:36:76:32:af:
f6:1a:02:41:82:69:88:25:f1:21:9f:db:49:93:92:55:76:e6:
01:9a:af:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:31:08 2024 by rpki-client on console-fra.rpki-client.org