Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
File: VRGWi3l6ylfWEYAak6hcuGTkPnI.mft (raw, json)
Hash identifier: t64XhNkNWw1ev+Wult7al5LIu9bC+N4883xpklqlnDs=
Subject key identifier: 24:29:4F:6C:F6:1C:82:45:AB:2E:2B:65:5C:F8:E1:84:CB:A9:20:59
Authority key identifier: 55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
Certificate issuer: /CN=5511968b797aca57d611801a93a85cb864e43e72
Certificate serial: 018F8824850D2276AFBEF62182BD598146B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
Manifest number: 0A4E
Signing time: Fri 17 May 2024 20:00:45 +0000
Manifest this update: Fri 17 May 2024 20:00:45 +0000
Manifest next update: Sat 18 May 2024 20:00:45 +0000
Files and hashes: 1: O-3S_stVDYCPWlXSeaLyw7-KgOI.roa (hash: //xWx34UX8wUNZATP2qbsr0lclBSLNmp02sRgpQTxIc=)
2: VRGWi3l6ylfWEYAak6hcuGTkPnI.crl (hash: GPDLoo44XC6pb7dkzAP6MHIH7cvV41+8wf1BYNqth9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:24:85:0d:22:76:af:be:f6:21:82:bd:59:81:46:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5511968b797aca57d611801a93a85cb864e43e72
Validity
Not Before: May 17 20:00:45 2024 GMT
Not After : May 18 20:00:45 2024 GMT
Subject: CN=24294f6cf61c8245ab2e2b655cf8e184cba92059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:05:13:83:fb:09:de:95:18:03:ba:2b:fd:
e3:18:46:4c:b0:bf:fd:3f:be:6e:8a:35:f5:49:04:
08:38:56:d7:8c:34:44:11:f2:a9:e5:00:12:56:52:
6c:69:3c:d5:79:bd:d8:e7:73:29:be:3c:7c:2a:ea:
2f:74:70:fa:f6:2a:5b:19:3c:a2:b7:69:3b:dd:1d:
48:4b:fe:b2:a2:e1:75:41:92:e2:6f:50:ca:b1:6c:
ab:37:71:55:0b:18:08:15:13:c1:7b:63:21:02:27:
b1:7f:af:b3:a0:8a:0f:9e:17:b3:5c:6a:33:56:cc:
fd:a8:5f:2d:c7:4f:90:08:ed:54:00:93:93:cd:d0:
4a:34:78:5c:45:d4:cc:c6:56:9f:5c:a4:02:9e:10:
42:bb:9f:1f:83:40:ee:b9:b0:68:55:91:52:d0:92:
56:1a:1e:0b:40:07:d9:25:56:d0:e6:b1:97:6e:51:
db:f6:e5:19:c3:a9:e8:e4:5e:eb:27:0b:93:8b:13:
13:ff:e2:3f:df:aa:01:2c:b9:f1:7f:de:a2:78:86:
f6:b2:7b:4d:d3:da:bf:9f:42:8c:f4:bc:aa:1c:78:
13:85:95:f6:0b:bf:d5:5e:08:92:ff:66:3e:57:1a:
77:d4:b5:85:1c:d5:e9:dc:cd:8a:f8:eb:b3:d1:77:
ce:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:29:4F:6C:F6:1C:82:45:AB:2E:2B:65:5C:F8:E1:84:CB:A9:20:59
X509v3 Authority Key Identifier:
keyid:55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:16:07:34:b4:82:80:7f:d1:34:f9:37:52:3c:42:9f:5e:38:
3d:48:53:45:c8:c9:20:ed:d7:2c:bc:7a:b7:39:b2:e4:83:b0:
3d:b2:3b:41:11:03:32:24:a7:90:76:8c:ae:af:1a:3a:06:19:
af:ef:75:84:b9:bf:af:3b:d5:e9:10:2a:fc:1b:79:6b:9c:d2:
27:e4:05:6b:89:63:a8:83:21:6b:57:23:4b:24:dc:1d:a4:b6:
f6:8d:18:c7:f3:72:b3:89:a7:e7:8e:fd:4e:fd:e6:34:55:1a:
a7:11:6f:fb:5a:e9:ad:5a:6d:d3:da:0f:ad:f1:3a:aa:f9:75:
6b:60:d0:7b:3f:01:c5:2e:ec:fb:6e:32:c7:7d:39:01:5d:88:
ef:b6:ce:80:e3:e5:7e:fa:88:bf:36:19:35:49:a9:eb:fd:40:
ca:25:6a:c7:0e:ba:7c:2a:27:9c:ad:38:04:06:e3:17:f1:7c:
9e:4b:e7:b8:f7:9e:e2:92:b7:50:d4:ad:0a:ac:6d:36:35:6a:
5f:12:c9:dc:da:ba:9f:0d:0e:02:fc:3c:ca:37:a7:6d:2b:a6:
65:49:d8:8c:63:2a:95:ef:73:2f:ae:28:55:42:e3:10:c6:33:
84:b1:47:08:34:39:39:26:fc:e0:5f:00:d0:cc:8e:bf:24:48:
f6:2f:de:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:46:55 2024 by rpki-client on console-fra.rpki-client.org