Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
File: vkOZUom2pcqXLEuHteMUnDLLRDA.mft (raw, json)
Hash identifier: w5WFwkN7YbeUZWAZkVeXyJMfWSinhjH4s3O8zT4CVXQ=
Subject key identifier: 89:F5:B9:D0:DB:59:59:7C:BF:BC:91:07:4A:05:D6:A8:03:2D:1D:84
Authority key identifier: BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
Certificate issuer: /CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Certificate serial: 019029811E3FF16A5BD6FD1378181C090E85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
Manifest number: 0F92
Signing time: Tue 18 Jun 2024 04:00:45 +0000
Manifest this update: Tue 18 Jun 2024 04:00:45 +0000
Manifest next update: Wed 19 Jun 2024 04:00:45 +0000
Files and hashes: 1: cHsi_8Rv16iSe0Wz3prrZ5XXPU0.roa (hash: Kl9mifeH0p7jmyv3K0184/Hnl0/5B3k0gVd4cStALB4=)
2: nC2Ug481KAQBwRSSxhCNZot38bA.roa (hash: /Zb/nShyWJJF6oRbhFAyiR9eyVmZdJRTigD9nQ/zYzQ=)
3: vkOZUom2pcqXLEuHteMUnDLLRDA.crl (hash: 7vDNi1KB4Lm5BC/C25uUSiJVhiCA4jnIQzlphwolJn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:29:81:1e:3f:f1:6a:5b:d6:fd:13:78:18:1c:09:0e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Validity
Not Before: Jun 18 04:00:45 2024 GMT
Not After : Jun 19 04:00:45 2024 GMT
Subject: CN=89f5b9d0db59597cbfbc91074a05d6a8032d1d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a7:39:86:9c:15:ab:ee:d5:da:80:87:4c:9f:
29:29:e6:e2:fc:6d:49:98:a0:d7:1b:a1:bb:a8:3e:
4e:58:77:c8:a0:55:b1:21:3d:86:6d:7e:66:90:6f:
15:61:ae:86:9d:11:fd:91:be:fa:ff:09:08:e4:d2:
60:29:0c:ec:1c:00:d5:f9:1c:3f:cb:27:84:fa:b5:
31:4d:e9:66:0f:33:90:32:49:8a:d8:40:1e:08:55:
b5:cb:7b:7a:ca:b2:50:ba:d0:0c:54:26:c6:5d:c4:
ba:34:29:6a:82:f1:f7:13:08:6e:22:de:d8:ef:65:
8f:f0:1b:8a:29:05:5c:3b:ac:62:7b:43:9e:0e:26:
02:ec:3d:7a:26:9e:55:79:c1:22:40:d6:ac:81:50:
7e:da:05:9b:b9:45:6b:04:71:e0:32:b1:00:95:63:
3f:b1:56:ce:e4:7a:8c:45:2c:c8:72:60:63:57:8e:
6e:ff:1f:90:8b:23:98:31:e0:be:c3:20:8f:3f:46:
97:a6:2d:bf:14:17:76:93:8b:8a:86:8f:4c:62:6b:
81:8a:fc:28:c7:1a:7a:8a:70:8d:84:2c:de:85:ee:
31:81:13:80:31:69:ca:fc:d8:ec:ec:33:76:27:29:
84:e8:51:ea:27:d1:f2:1a:4e:f9:8d:12:9a:88:e8:
ed:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F5:B9:D0:DB:59:59:7C:BF:BC:91:07:4A:05:D6:A8:03:2D:1D:84
X509v3 Authority Key Identifier:
keyid:BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:df:83:1c:b6:9d:0d:da:a9:07:0c:d9:4d:1c:65:b5:a4:09:
df:45:58:11:11:18:69:32:b9:c3:b7:c1:32:1f:1d:03:7f:3e:
ea:2a:36:2b:5b:85:aa:82:77:26:b1:83:3c:35:85:6a:8f:c5:
fb:f7:26:73:8f:5e:fb:ee:8e:00:58:5f:b5:22:44:73:5e:32:
e2:c6:fe:41:58:c6:aa:06:e6:82:d6:65:a3:3e:c0:01:aa:cb:
db:d1:a8:b8:22:b8:bb:67:5f:4c:e1:5c:05:25:d4:e2:b2:f1:
b2:20:16:e6:d7:2e:9f:d4:36:12:c7:4e:77:08:40:17:a4:b1:
3e:1b:98:9f:b2:7d:b4:ef:cf:83:e8:10:6b:24:00:59:b2:cd:
ca:8d:59:04:b9:db:fa:a3:5b:06:55:40:06:de:f0:df:9a:98:
79:d5:58:29:ba:93:1c:36:cb:23:17:a2:c4:21:71:3c:f0:8b:
77:dd:c0:31:c4:75:d1:63:0c:54:2f:dc:a0:20:45:6b:d4:af:
1f:29:65:08:80:56:af:b3:86:5d:d5:c7:59:30:26:ad:01:38:
2e:5c:0b:25:94:17:fc:0a:6d:51:14:3b:28:ad:81:2b:0e:f4:
76:17:df:30:ac:65:d6:fb:2e:a6:0b:00:4f:ca:b1:87:c7:f1:
c2:78:55:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:28:24 2024 by rpki-client on console-ams.rpki-client.org